Tinyportal under attack

[Akkler]

Link to my site: http://www.dramah.net
SMF version: SMF 1.1.1
TP version: TP 0.9.7
Theme name and version: SMF Default Theme
Mods installed: TinyPortal 0.971, Itemstats 1.5.1.1000
Related Error messages:
I was looking in the error logs of TP and found this:

Database Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'http://www.psikolojikyardim.org/etkinlik/include/eto/nixaz/, 5' at line 7
File: /home/drampir0/public_html/Sources/TPortal.php
Line: 1609
?amp;;tpstart=http://www.psikolojikyardim.org/etkinlik/include/eto/nixaz/

There are hundreds of (failed) attacks like this in the error log. Every attack has different urls, and IPs. Should I upgrade to a newer version of TP? I have been looking for this exploit on some security sites and didn't find anything related to which versions are vulnerable to this attack. Apparently, it seems that my version is safe, but I don't really know.
Also, i checked those urls, and some of them are modified to just include a little bit of php, but others contain things like these: http://www.channelnewsperu.com/imagenes/publicaciones/fotos/eyuxix/bikaku/. Two dirs with a script each.

[Zetan]

Please read the posting guide in this board and update your first post with the information requested.

Including, your site URL and all mods installed.

[Zetan]

You are running very out of date version of SMF and TP.

I suggest upgrading both.. SMF has had several updates to the security.


I did also request a full mod list installed.. Simply because some older mod versions have known exploits.
The SMF Shop mod is one example recently, now patched.