Issues - Page 2

Buckeyeskickbuttocks · #16 (**permalink**) 09-02-2006, 02:59 PM

Maybe it has something to do with the fact that I view "New Posts" rather than individual forums?

But, I guess, upon some reflection thats not "Always" true... I have today viewed indiv. forums without consequence.

Clarity · #17 (**permalink**) 09-02-2006, 03:01 PM

Quote:

Originally Posted by jlb1705

Somebody (BarbaroS) posted code in the subject line of a new thread that redirected users to another website. It wasn't really a "hack" as I guess that guy would like to pretend, but it was somewhat malicious spam. Any page that had that thread title listed in it (the forum it was posted in, as well as the main forums listing when that thread was listed among the newest posts) was affected. The code showed up in my browser (and the problem was eliminated by editing the post title and getting rid of the code. I wish I would've copied and pasted it before it was eliminted, so maybe you could see what was going on. I don't think anything bad happened to my computer as a result of loading up that page I was redirected to, but it's a cause for concern if you ask me.

I really need an example of the code.

Also, where did it redirect to?

A virus? No. I haven't seen the code, but a simple redirect isn't that hard. What's on the website you're sent to is another question, but any reasonably updated PC shouldn't have any problems.

This is someone of limited means and ability just trying to be annoying.

BearBuck27 · #18 (**permalink**) 09-02-2006, 03:19 PM

FWIW, I haven't had any problems with BP today, either. *knocks on wood*

jlb1705 · #19 (**permalink**) 09-02-2006, 03:25 PM

Yeah, I was pretty sure it wasn't malicious. I figured that depending on the website that one is redirected to, it could be.

I've been trying to find the code you were looking for somewhere in my browser history, but I'm not seeing it. I can see the beginning of the old subject line in my history, but when I click on it, it renames it and takes me to the new, edited version of the post. All it'll let me see from that old subject line is:

'>"">>>

I remember seeing a Refresh= and a "meta" in there (minus the quotes). I don't know what that means, but maybe you can identify it.

I do have the page we were redirected to still in my history. It is here:

http://www.vatanbayrak.org/VBT/

A screenshot of the page is attached.

NightmaresDad · #20 (**permalink**) 09-02-2006, 07:24 PM

So THAT'S why I couldn't log on yesterday?
I think either my firewall was blocking access, or the server was down.

FWIW, I was getting the same thing with O-Zone yesterday, too. I wonder if they had the same thing happen.

MrCodeDude · #21 (**permalink**) 09-02-2006, 07:40 PM

It was probably an SQL injection script kiddie.

Has vB been patched with the most recent updates?

MrCodeDude · #22 (**permalink**) 09-02-2006, 07:43 PM

Another thing it could have been, is that if BP is not hosted on it's own server and we used shared hosting, a script on another site (but on the same server as BP) could have been at fault. Your datacentre might have sorted it out for you.

tedginn05 · #23 (**permalink**) 09-02-2006, 08:09 PM

Quote:

Originally Posted by MrCodeDude

Another thing it could have been, is that if BP is not hosted on it's own server and we used shared hosting, a script on another site (but on the same server as BP) could have been at fault. Your datacentre might have sorted it out for you.

I thought that it was found that it had to do with a code posted in a thread title? Once the code was removed, it stopped. They also banned the user and their IP.