TP-Docs
HTML5 Icon HTML5 Icon HTML5 Icon
TP on Social Media

Recent

Welcome to TinyPortal. Please login or sign up.

Members
Stats
  • Total Posts: 196,022
  • Total Topics: 21,332
  • Online today: 363
  • Online ever: 8,223 (February 19, 2025, 04:35:35 AM)
Users Online
  • Users: 0
  • Guests: 330
  • Total: 330

Shout Box hack again, I think

Started by mnichols7, August 17, 2006, 12:13:54 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

mnichols7

When I went to my forum this morning I found this in the last 3 shouts of the shout box.Ã,  First, these are not members of my forum, so how was this done?Ã,  I have just now allowed guests to shout again, but as you can see it does not identify them as guest.Ã,  And of course, I cannot read any of it.Ã,  As far as I know it could be just plain gibbish.
Can anybody translate it or is it nothing but gibbish?Ã,  What can I do to prevent or correct this.

mnichols7

The link is a dead link, leads nowhere and froze my computer when clicking on it, so I was forced to do a hard boot.

I had installed the patch for the shout box so I was surprised when I saw this.

elpvn

Quote from: Marian on August 17, 2006, 12:13:54 PM
When I went to my forum this morning I found this in the last 3 shouts of the shout box.Ã,  First, these are not members of my forum, so how was this done?Ã,  I have just now allowed guests to shout again, but as you can see it does not identify them as guest.Ã,  And of course, I cannot read any of it.Ã,  As far as I know it could be just plain gibbish.
Can anybody translate it or is it nothing but gibbish?Ã,  What can I do to prevent or correct this.

That's one of attempts to attack your site again, and nobody sure that they will not success in feature
So for carefully, please do not enable shoutbox with gues in this time

mnichols7

Yes, that is the first thing I did was to stop guest shouts.

Xarcell

I guess the patch worked and kept your site from being redirected.

It's best to disallow shouts to guess anyways. If you ever have a high traffic site, people will do nothing but advertise in your shoutbox.

mnichols7


gerrymo

That's not a hack. It is nothing more sinsiter than spam. By not allowing guest shouts, it will stop them. If they register and do it, ban the IP address.

mnichols7

What confuses me on it, is that they changed the name from guest to whatever .... How was that done?

TolerancE

If a spam bot was used, they usually automatically generate that stuff. The names used are a dead giveaway that it was a generated bot.

bloc

One way could be to setup some sort of image verification for guest posting.

This website is proudly hosted on Crocweb Cloud Website Hosting.