[blind-eddie]

Originally Posted by RedTyger

Ah, the screenshot makes all the difference, thank you. This looks to me like Referer spoofing. Since the modification looks at the page the visitor came from and adds it to the database, if the visitor fakes that information then whatever they change it to will be added just the same.

They could also do it (if you have the "Use page titles" option enabled) by creating a webpage with the title "Hello, you've just been hacked" and adding a link to your forum in the page. When they click on the link, the modification will read the "Hello, you've just been hacked" title and add it.

It isn't hacking, its just a slightly crummy trick. I may add one or two tests to try and guess if a referrer is genuine but its not possible to be 100% sure and its not possible to check with page titles at all. If the blocklist isn't functioning properly then I'll try and fix that, because that is the best way to deal with it. Otherwise, just delete them. No harm done.

Thank you for the info...