my guestbook got hacked - any suggestions?

No to Kens question. You can try my image verification script or you can search this forum for my other way of combatting spam. There is a third way I am working on inbetween updating this script, working on my own guestbook script and making my clients website so don't hold your breathe. In order of importance that list is in reverse order.

a temporary work-around for spam is to rename the directory of your guestbook and disallow google to search and index your guestbook and don't post your guestbook url in places like this forum (or edit the url out of the post once you have it fixed) - most of the spammer folks look for easy prey - 95% of the spammers use google to find guestbooks to spam.... As long as all the guestbook files stay intact in the directory that you rename, it should still work.

------------------------------
If you are using 2.3.1 - you may need to edit the admin/config.inc.php at if that line was previously altered for your images, etc.

ET

Thanks, I followed your suggestions. Til now it works - no more spams
Will keep you informed, if any changes!
re lizbo24

lizbo24 wrote:ET

Thanks, I followed your suggestions. Til now it works - no more spams
Will keep you informed, if any changes!
re lizbo24

Thanks lizbo

Be well and good luck

Please help.
Someone hacked our message board from Turkey and I don't know how to get it back.
Any help would be extremely appreciated.
Here's the link. http://www.mariettafirst.org/guest/

Trey wrote:Please help.
Someone hacked our message board from Turkey and I don't know how to get it back.
Any help would be extremely appreciated.
Here's the link. http://www.mariettafirst.org/guest/

Guestbook fixed now dont waste anytime and use carbs update script ASAP.

It's a fix not a script. Smallpoint but saying script could confuse some people. Maybe I should just upload a copy of the 2.2 sessions.class.php file for them to replace there's with as an easier method.

Thanks!

I dont know if the hacker changed the password or what, but I can't get in.
Sorry.

As stated in the other thread download www.carbonize.co.uk/reset.php to reset your username and password or if it's not been patched login using the exploit and change it that way.

How do you log in using the exploit?

I refuse to post that information in here. I recommend using my reset script to reset the username and password then goto www.carbonize.co.uk/AG and download the pre-patched session.class.php file. You then just extract the file from the zip and upload it to yoru guestbooks lib folder, overwriting the current one.

OK, I changed the password. How do I keep this from being hacked again?

Goto www.carbonize.co.uk/AG and get the 2.2 exploit fix.