Ideas to stop GuestBook Hackers?

A few weeks ago, a friend of mine died. His obituary was posted in the newspaper with a link to a GuestBook to enter condolences for the family. Doing that was a two step process. You fill out online a form with your message, that then goes electronically and automatically to the Webmaster for review -- then the webmaster lets it go on into the GuestBook and be posted.

I am using Advanced Guestbook 2.3.1 -- specifically how can I modify its software so that a new guestbook entry will first be transmitted to me -- then I let it go on into the Guestbook to be posted there if it is not spam? Wouldn't that system catch most all of the Hackers who now can immediately get to the Guestbook with a spam/trashing posting?

Does GuestBook 2.3.1 have any password (for Administrator) vulnerabilities that need to be fixed to prevent hacking?

Are we facing a losing battle such that GuestBooks cannot be made secure and sooner or later they are trashed?

check the stickies in this forum.

2.3.1 is secure. 2.3.2 is more upto date but still in beta. Simple anti spam modification - http://proxy2.de/forum/viewtopic.php?t=4211

my friends guestbook has been hacked.. and its just a big black screen and then it redirects to some site.. how do i get rid of that?

Post a link to it here.

sure thing!

http://www.fortryllelse.com/guestbook/

i know how to edit the design of it.. but thats it.. i don't know any of the tech stuff..

Fixed now you need to patch. Easiest way is goto www.carbonize.co.uk/AG and download the patched file then upload it.

this one?

Advanced Guestbook 2.2 Login Exploit Fix

yes.

wow how did you fix it?? lol

what happens if it happens to my other clients guestbooks?

Install the patch before it happens again is HIGHLY recommended.

julie wrote:wow how did you fix it?? lol

what happens if it happens to my other clients guestbooks?

Carbonize fixed it the same way it got hacked - through the exploit - As Auron points out, the sooner you patch it, the sooner the exploit is closed up. If you take the time to read through other "i've been hacked" posts on this board, you will notice that some have to get hacked 2 - 3 times before they finally figure out that the hackers will keep coming back time and time again - sometimes every few hours.

It's been 6 hours and that site is still not patched.

Carbonize wrote:It's been 6 hours and that site is still not patched.

ummmmmm..... guess you won't be surprised if asked to fix another attack there....