TinyPortal

Development => Support => Topic started by: WillyP on May 03, 2015, 07:17:20 PM

Title: Shoutbox hacked?
Post by: WillyP on May 03, 2015, 07:17:20 PM
Today whilst trying to post to the shout-box, when I hit the shout button I got this message, several times:

QuoteError 403

We're sorry, but we could not fulfill your request for /index.php?action=tpmod;shout=save on this server.

You do not have permission to access this server. Before trying again, close your browser, run anti-virus and anti-spyware software and remove any viruses and spyware from your computer.

Your technical support key is: 4911-93cd-b40c-8ddc

You can use this key to fix this problem yourself.

If you are unable to fix the problem yourself, please contact the WEBMA5TER and be sure to provide the technical support key shown above.

"fix this problem yourself" is a link to hxxp://www.ioerror.us/bb2-support-key?key=4911-93cd-b40c-8ddc, and "the WEBMA5TER" is a mailto, my admin email, but with .nospam and +nospam added.

I'm running TP 1.104, SMF2.0.9.

1.    SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update    1.0    [ List Files ] [ Delete ]
2.    SMF 1.0.18 / 1.1.10 / 2.0 RC1-2 Update    1.1    [ List Files ] [ Delete ]
3.    SMF 1.0.19 / 1.1.11 Update    1.0    [ List Files ] [ Delete ]
4.    SMF 1.0.20 / 1.1.12 Update    1.0    [ List Files ] [ Delete ]
5.    SMF 1.0.21 / 1.1.13 Update    1.0    [ List Files ] [ Delete ]
6.    SMF 1.1.14 Update    1.0    [ List Files ] [ Delete ]
7.    SMF 1.1.15 Update    1.0    [ List Files ] [ Delete ]
8.    SMF 1.1.15 Update    1.0    [ List Files ] [ Delete ]
9.    TinyPortal    1.104    [ List Files ] [ Delete ]
10.    Aeva Media    1.4w    [ Uninstall ] [ List Files ] [ Delete ]
11.    Bad Behavior mod    1.5.5    [ Uninstall ] [ List Files ] [ Delete ]
12.    BBC Spoiler    1.0    [ List Files ] [ Delete ]
13.    httpBL    2.5.1    [ Uninstall ] [ List Files ] [ Delete ]
14.    reCAPTCHA for SMF    0.9.8a    [ Uninstall ] [ List Files ] [ Delete ]
15.    Stop Spammer    2.3.9    [ Uninstall ] [ List Files ] [ Delete ]
16.    Ultimate Profile    0.9.1    [ Uninstall ] [ List Files ] [ Delete ]
17.    SA Facebook    2.0 RC Rev36    [ List Files ] [ Delete ]
18.    SMF 2.0.2 Update    1.0    [ List Files ] [ Delete ]
19.    TinyPortal    1.105    [ List Files ] [ Delete ]
20.    TinyPortal    1.107    [ Uninstall ] [ List Files ] [ Delete ]
21.    SMF 2.0.3 Update    1.0    [ List Files ] [ Delete ]
22.    SMF 2.0.4 Update    1.0    [ List Files ] [ Delete ]
23.    SMF 2.0.5 Update    1.0    [ List Files ] [ Delete ]
24.    SMF 1.1.19 / 2.0.6 Update    1.0    [ List Files ] [ Delete ]
25.    SMF 2.0.7 Update    1.0    [ List Files ] [ Delete ]
26.    SMF 2.0.8 Update    1.0    [ List Files ] [ Delete ]
27.    SMF 1.1.20 / 2.0.9 Update    1.0    [ Uninstall ] [ List Files ] [ Delete ]

I also got this error when I decided to turn off the shout box, though with a different key listed. I then tried another test shout, which went through fine, but got this message again when I tried to delete the test shout.
Title: Re: Shoutbox hacked?
Post by: G6Cad on May 03, 2015, 07:23:34 PM
Or it could be taht your host changed something so your post couldent be saved. Permissions?
Title: Re: Shoutbox hacked?
Post by: WillyP on May 03, 2015, 07:35:23 PM
Sorry, I had hit enter accidentally before I was done. this isn't a message from my host, I'm sure of that. If it was it would have their name and logo all over it. While they have their faults, they are very professional about such things.

"the WEBMA5TER" Spelt with a 5 instead of an S

Link to ioerror.us ...never heard of it, google shows

I did successfully save a post to the shoutbox, then I couldn't again.
Title: Re: Shoutbox hacked?
Post by: G6Cad on May 03, 2015, 07:49:46 PM
http://bad-behavior.ioerror.us/

Looks like a spamblocker of some sort. You have something like that installed to your site or PC ?

EDIT:
Saw that you have that mod installed to your SMF, that seem to cause your error with shoutbox
Title: Re: Shoutbox hacked?
Post by: WillyP on May 03, 2015, 11:33:43 PM
Yep I Googled it myself and that seems to be the case. I didn't want to click on that link in case it was bad.

I'm running a scan on my machine right now.

Strange that it only affected the shoutbox, though.

Edit: spoke too soon, now I can't even post!
Title: Re: Shoutbox hacked?
Post by: WillyP on May 05, 2015, 02:26:07 AM
After turning up negative on the scans, I deleted my cookies and restarted Firefox and all is well.
Title: Re: Shoutbox hacked?
Post by: Ken. on May 05, 2015, 02:32:25 AM
Good job Willy.  O0