Messages posted by: Carbonize

Nobody can read your config.inc.php file as it is a php file. Also there is a .htaccess file in the admin folder that prevents access to it anyway.

OK my mod is fine it's just that you are using a modified version of Advanced Guestbook and so I have emailed you the required change.

Download 2.4.1. Copy the database information from your current config.inc.php file to the one in 2.4.1 then upload 2.4.1. Once uploaded goto www.yoursite.com/guestbook/misc/update_db.php to update the database.
Job Done.

May as well upgrade to save messing with database again.

1 - You need to disable HTML.

2 - The admin url is actually http://www.meyerracingonline.com/Guest/admin.php

Your main problem is your host is still using PHP 4.4.1 so you get an infinite loop on password change page. Hence you are still using default username and pasword. I'd recommend updating to 2.4.1 whilst your guestbook is empty as this also has a password reset script with it as well as anti spam.

Remove your version and have them install the old version for you then simply update to the newer version.

Speak to your hosts and make sure that you have the correct location for the MySQL server

There has recently been discovered and is reported at http://www.securityfocus.com/bid/17745/info

This post is to just make it clear that the exploit only affects the version of AG that was modified to work with phpBB.
They should of renamed their version to avoid this type of confusion.

The CAPTCHA (image verification) in 2.4.1 should stop all automated spam. You may still get the odd bit of spam manually entered by a person.

¿ Advanced Guestbook o Advanced Poll ?

Update to 2.4.1 as it uses CAPTCHA (the poster has to type in some characters that appear in an image).

By can't get to link do you mean the actual DELETE link?

Do you have HTML disabled?

If you are using version 2.4 or newer of the guestbook then there is a password reset script in the misc folder. If not goto http://lazarus.carbonize.co.uk and look in the FAQ for my reset script.

Ok email me you config file to webmaster@carbonize.co.uk

When you updated to 2.4.x you were meant to copy your database info from your current config.inc.php file to the 2.4 one.