If you are not registered or logged in, you may still use these forums but with limited features. Show recent topics
  [Search] Search   [Hottest Topics] Hottest Topics   [Members]  Member Listing   [FAQ]  FAQ 
[Register] Register / 
[Login] Login 
Is it to late to fix?  XML
Forum Index » Support Forum
Author Message
JTD
Graduate

Joined: 08/05/2004 21:52:50
Messages: 529
Location: Arkansas
Offline

I hav'nt edited mine and it is true version2.3.1. With the exception of some of your fix's.

LINK-> Use Lazarus Guestbook
[WWW] [Yahoo!] aim icon [MSN]
RCRacer
Beginner

Joined: 01/03/2005 06:41:46
Messages: 12
Location: Stanton, Ca.
Offline

This is the whole file.

[WWW]
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

ok it was nothing to do with smileys. I'm going through someone elses guestbook who has the same problem. I admit they don't know I am going through their guestbook but they should patch it. It's worrying that a search on google shows a lot of guestbook 2.2's with the same error.

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

I wonder if you are all on the same host anyway for a quick test (need to narrow down the problem) put // at the start of line 91 like so

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

http://www.google.com/search?hl=en&lr=&q=XXXXXXXXXXXXXXXXXXXXXXX scary

<carbonize has edited to obscure the url to prevent it being abused>

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
RCRacer
Beginner

Joined: 01/03/2005 06:41:46
Messages: 12
Location: Stanton, Ca.
Offline

Carbonize wrote:I wonder if you are all on the same host anyway for a quick test (need to narrow down the problem) put // at the start of line 91 like so

Same error I guess
[WWW]
RCRacer
Beginner

Joined: 01/03/2005 06:41:46
Messages: 12
Location: Stanton, Ca.
Offline


I have alot of domain names on this server and don't' reconize any of them.

<carbonize has edited to obscure the url to prevent it being abused>
[WWW]
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

Thats because I'm starting to think the error is on line 101 and not 91. In fact I'm damn sure it is.


WELL BUGGER ME

Yes you have been hacked at some point. It's your url.php file thats been altered to a file that allows them to view all the files on your server. Open it and replace it's contents with and voila, problem gone.

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

http://madminis.com/sign/templates/url.php VERY SCARY

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
RCRacer
Beginner

Joined: 01/03/2005 06:41:46
Messages: 12
Location: Stanton, Ca.
Offline

Ok, the problem is gone, but every image is also.
[WWW]
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

All you changed was the url.php yes?

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
RCRacer
Beginner

Joined: 01/03/2005 06:41:46
Messages: 12
Location: Stanton, Ca.
Offline

Carbonize wrote:All you changed was the url.php yes?

Yes
[WWW]
ET
Graduate

Joined: 21/02/2003 22:17:48
Messages: 179
Offline

Carbonize wrote:
http://www.google.com/search?hl=en&lr=&q=XXXXXXXXXXXXXXXXX
scary

That is!!! Probably is due to a hack attack....

<carbonize has edited to obscure the url to prevent it being abused>

---------------
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

it was. they had installed a file manager script and then used it to make files. On one they had made a fake bank login for phishing, on others email sending forms to send the emails from to hide their IP. It's a phishing expedition that we hopefully managed to catch and stop before it got to far.

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
RCRacer
Beginner

Joined: 01/03/2005 06:41:46
Messages: 12
Location: Stanton, Ca.
Offline

RCRacer wrote:OK, the problem is gone, but every image is also.

After changing that file, tlhe guestbook is not working correctly as the posts are not showing up, just the comments.
Is there a fix for this?
[WWW]
 
Forum Index » Support Forum
Go to:   
Based on the open source JForum