vBulletin Mods

The Official vBulletin Modifications Site
https://www.vbulletin.org/forum/showthread.php?t=307847

Really Big Problem
by sheyworth
02 Feb 2014 20:42

Hello everyone, my website is http://centerstagesports.com

I switched to a new host recently so we had to switch our nameservers. while the nameservers were updating, someone somehow got into the forum and when you click the forum tab it goes to a wordpress page that says knickers is cool.

If you look at whats going on, it goes to the /install directory which there isn't even a install directory in the database. This literally makes no sense for me and this is for VB 4.20 by the way. Please let me know if you have any suggestions, thanks.

ozzy47 02 Feb 2014 22:14

Open your includes/config.php file and below<?php add this line:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

So it looks like this:

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Does the issue still persist?

Max Taxable 03 Feb 2014 00:25

Quote:

Originally Posted by sheyworth (Post 2478682)
Hello everyone, my website is http://centerstagesports.com

I switched to a new host recently so we had to switch our nameservers. while the nameservers were updating, someone somehow got into the forum

Highly unlikely.

Here's page source code, it's not any "hacking" I've ever seen.


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.


ozzy47 03 Feb 2014 00:32

Right, but need to disable the plugins to see if they did it in a plugin, or in the template.

Max Taxable 03 Feb 2014 00:35

Quote:

Originally Posted by ozzy47 (Post 2478718)
Right, but need to disable the plugins to see if they did it in a plugin, or in the template.

I agree. Also more likely than timely "hacking."

But.

I think it is more likely the nameservers are pointing to the wrong place, than it being a "hacker." Or even more likely, this existing WP installation is being called.


All times are GMT. The time now is 09:10.

Powered by vBulletin® Version 3.8.14
Copyright © 2021, MH Sub I, LLC dba vBulletin. All Rights Reserved. vBulletin® is a registered trademark of MH Sub I, LLC
Copyright ©2001 - , vbulletin.org. All rights reserved.