Messages posted by: lcars

Ah....now that all makes sense.

JTD wrote:

lcars wrote:Here ya go hack mine. Here is the exploit just incase you dont know it. 'a'='a www.ravenprom.org/guestbook/admin.php/

nice statement, but that's not the way they're hacking. They are changing the files in the guestbook directory (i.e. ftp.yoursite.com/guestbook)

well since you might still be online, I need to change my background colors, but can't remember the file. Can you help me?

Works great! Thanks for the hookup. Wish I had made a backup copy of the server before the hackers hacked my guestbook (v2.2).

Lessened learned. Now we's running 2.3.1

I should have been more specific. HTML in the message body is not what I was referring to. I was referring to when a visitor clicks "Sign the Guestbook" and has the option of inserting their "HOMEPAGE" after http://. I was looking to turn this off, but it was never made part of the turn off process.

Hello everyone. Knew to this forum and I was wondering if anyone knows what I need to do to remove a visitors capability of posting a URL (webpage) when signing the guestbook? There is no option to just turn if off.