vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)
-   -   Spam Help!! I'm really stuck, guest posting spam (https://vborg.vbsupport.ru/showthread.php?t=293057)

hogan00 12-17-2012 04:42 AM

Spam Help!! I'm really stuck, guest posting spam
 
Hi

I'm having a really big problem.

Every time I post a new thread a guest post gets created automatically just above the thread!!

See here:

http://themoneyguide.ca/forum/showth...=6364#post6364

How can a guest post, and why is this happening automatically every time I created a new post.

Any help would be greatly appreciated.

Thanks

socialteenz 12-17-2012 04:54 AM

You need to install a anti-spam mod to strengthen your registration process.

My suggestion would be this as lot of people are getting good results after installing this mod.

https://vborg.vbsupport.ru/showthread.php?t=289463

borbole 12-17-2012 12:15 PM

Disable the posting permissions for guests if you don''t want them to post.

hogan00 12-19-2012 05:24 AM

posting is disabled for guests, that's why I'm so confused.

Also, the guest post is automatic once I post anything new???

Anyone have this problem before?

Simon Lloyd 12-19-2012 06:53 AM

You have had your core files compromised, you've had a virus or such like, check your php files for BASE64 code, start with newthread.php, if you have been compromised you need to think why? insecure scripts or ones that haven't been updated are usually the culprit.

To rectify the issue of corrupt files simply upload a whole new batch of core files (with overwrite) via ftp, you can leave out the images folder and delete /install/install.php before uploading.

borbole 12-19-2012 09:46 AM

Quote:

Originally Posted by hogan00 (Post 2391609)
posting is disabled for guests, that's why I'm so confused.

Also, the guest post is automatic once I post anything new???

Anyone have this problem before?

This is weird. Guests shouldn''t be able to post if they don''t have permissions for that. Can you post here a screenshot of the guest group permission settings?

What mods do you have installed btw?

betterthanyours 12-19-2012 09:55 AM

This is obviously a case of where your webserver / files has been compromised.

I'd suggest the same as Simon_Lloyd. Upload fresh files. If still an issue, I'd suggest you have a look at your SQL DB structure or hire an SQL developer.

hogan00 12-20-2012 12:02 AM

Quote:

Originally Posted by Simon Lloyd (Post 2391613)
You have had your core files compromised, you've had a virus or such like, check your php files for BASE64 code, start with newthread.php, if you have been compromised you need to think why? insecure scripts or ones that haven't been updated are usually the culprit.

To rectify the issue of corrupt files simply upload a whole new batch of core files (with overwrite) via ftp, you can leave out the images folder and delete /install/install.php before uploading.

Simon

Thank you very much for the response. By "core" files do you mean all the vbulletin files?

Max Taxable 12-20-2012 01:13 AM

There is a 6 hour and 7 minute difference in the timestamps of the posts. You're saying the spam guest post appears simultaneously after YOU make a post? The spam guest post appears to be the OP of the thread. So I'm kind of confused about what you're saying is happening.

If I didn't know better, I would say this looks like you're posting this here, merely to spam vB dot org by proxy.

hogan00 12-20-2012 04:22 AM

Quote:

Originally Posted by Max Taxable (Post 2391772)
There is a 6 hour and 7 minute difference in the timestamps of the posts. You're saying the spam guest post appears simultaneously after YOU make a post? The spam guest post appears to be the OP of the thread. So I'm kind of confused about what you're saying is happening.

If I didn't know better, I would say this looks like you're posting this here, merely to spam vB dot org by proxy.

What are you talking about??

Why would I do that? I have a legitimate problem here.

Let me try to post another example...

Just posted this...

http://themoneyguide.ca/forum/showth...=7543#post7543

yes, the time stamps are different, not sure why.

--------------- Added [DATE]1355982003[/DATE] at [TIME]1355982003[/TIME] ---------------

Quote:

Originally Posted by Simon Lloyd (Post 2391613)
You have had your core files compromised, you've had a virus or such like, check your php files for BASE64 code, start with newthread.php, if you have been compromised you need to think why? insecure scripts or ones that haven't been updated are usually the culprit.

To rectify the issue of corrupt files simply upload a whole new batch of core files (with overwrite) via ftp, you can leave out the images folder and delete /install/install.php before uploading.

replaced the core files, but now I can't access the site:

http://themoneyguide.ca/forum

????


All times are GMT. The time now is 02:03 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01209 seconds
  • Memory Usage 1,738KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (4)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete