[lfpm]

Ok, here is the source of the hacker: http://lebforces.org/forum/showthread.php?t=31501

When the pop up came up, i inserted the following "212.107.116.238 proxy4.cyberia.net.sa"

Now that use who opened that thread in the above link is putting what i sent.

--------------- Added [DATE]1207400355[/DATE] at [TIME]1207400355[/TIME] ---------------

Here is what is happening, first a user (the hacker) is a manually inserting a picture (the Smile), the picture contains link and when someone opens the thread, the pop up appears, members are seeing the pop up and inserting the username and password, the username and password is going to the hacker, who is using them and posting more of the same.

We know the source, but how can we stop it? I disabled html and it is still happening