Critical Warning for html Enabled Guestbooks

As you may have read in another post, version 2.3.1 guestbooks with html enabled are being hacked, in addition to the hacks to the 2.2 guestbooks.

In the past few days I have helped remove several of these hacks. I have stressed to the site owners the importance of immediately disabling html and, if necessary, upgrading to 2.3.1 or implementing Carbonize's fix for the 2.2 exploit. Unfortunately, most of them waited too late to do this.

What I am noticing is that the hacker who calls himself (herself?) "Jeeran Hacker" is returning, and when they find that you have removed the hack, they hack you again, this time deleting all of your guestbook entries.

It would be a good idea if everyone periodically backed up their guestbook entries. Most good hosts keep backups, which you could ask them for if you lose your entries, but I think it's better to make backups yourself. I like the .sql files I make in PhpMyAdmin under the "export" tab.

*bump*

*bump*

*bump*

*bump*

*bump*

*bump*

*bump*

*bump*

*bump*

*bump*

*bump*

*bump*

*bump*

*bumped*