Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Spyware Homepage Spam thingy Details »
Spyware Homepage Spam thingy
Mod Version: 1.00, by Zach (Member) Zach is offline
Developer Last Online: Sep 2005 I like it Show Printable Version Email this Page

This modification is in the archives.
vB Version: 3.0.0 Rating: (0 vote - 0 average) Installs: 1
Released: 14 May 2004 Last Update: Never Downloads: 0
Not Supported Is in Beta Stage  

I read a few posts about url spamming and spyware screwing with members homepages -

Just threw this together - just copying my post from over at .com -


Ok this should at least screw with em and slow em down (very simple)





find






Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.



in profile.php (html|php3|etc)







add this right above that line




Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.











Then in templates - find the modifyprofile template



find


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.







make it this



Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.












Let me know if this works - I am not sure if it will get past init.php or not - some of my files are not very vBulletinish anymore



Also, if anyone that is getting this, do me a favor - pm me the sites, urls - I personally have not had this at all that I have noticed - which makes me wonder if the spyware garbage is keying in on either urls that have forum in it, or its looking for profile.php, or if it is just looking for formfields name hompage. (I use .html so if its looking for profile.php, it would never hit me)



Gonna go see if I can get infected now - then I can see exactly what this garbage is doing - but this fix I am pretty sure will fix it from happening anymore.

Download Now

Only licensed members can download files, Click Here for more information.

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Comments
  #2  
Old 14 May 2004, 15:30
Zach's Avatar
Zach Zach is offline
 
Join Date: Nov 2001
And I meant to post this in 3 oops - someone move it?
Reply With Quote
  #3  
Old 14 May 2004, 15:48
Boofo's Avatar
Boofo Boofo is offline
 
Join Date: Mar 2002
Real name: Rob
Moved.
Reply With Quote
  #4  
Old 14 May 2004, 16:08
Zach's Avatar
Zach Zach is offline
 
Join Date: Nov 2001
Thanks
Reply With Quote
  #5  
Old 14 May 2004, 16:14
Zach's Avatar
Zach Zach is offline
 
Join Date: Nov 2001
Will explain what this is doing real quick

Since I have heard about users homepages getting changed to porn sites and such, with out them knowing it - the only way I can think of this to happen is some spyware on their system.

The spyware would have to key in on the form field with the name "homepage"

So we just change the name of that formfield to the usersname - which means that the spyware jerks are going to have to be more clever as every single user now has a differently named homepage formfield.

Then when its submitted, we just give the variable $homepage its value on top, so we dont have to mess with anything else and let the programming that works already work - that is what this is doing

$homepage=$$bbuserinfo[username];


So if I submitted a new profile change, my homepage variable would now be like

Zach="http://FantasySportsWire.com"


so to get $hompage = to that

we need $homepage = $Zach - but since we are not gonna hard code in a million different user names, we use $homepage = $$bbuserinfo[username] - which if I am submiitting it, is exactly the same as $homepage=$Zach
Reply With Quote
  #6  
Old 14 May 2004, 16:17
Zach's Avatar
Zach Zach is offline
 
Join Date: Nov 2001
Ref this for exactly what the heck I am talking about

http://www.vbulletin.com/forum/showthread.php?t=96331
Reply With Quote
  #7  
Old 14 May 2004, 19:30
ap0c's Avatar
ap0c ap0c is offline
 
Join Date: Mar 2003
Originally Posted by Zach
Ref this for exactly what the heck I am talking about

http://www.vbulletin.com/forum/showthread.php?t=96331
thanks for the above link. I was having some trouble following what your trying to do
Reply With Quote
  #8  
Old 14 May 2004, 19:46
Zach's Avatar
Zach Zach is offline
 
Join Date: Nov 2001
Originally Posted by ap0c
thanks for the above link. I was having some trouble following what your trying to do

I am a sports idiot that learned how to do the Hello World demo, didnt graduate to the explain what the heck you are talking about part yet

But, if you want to know who to be looking at and ultimatly decide on taking at 3.6 - I can explain that fully
Reply With Quote
  #9  
Old 29 Jun 2004, 15:54
teksigns's Avatar
teksigns teksigns is offline
 
Join Date: Sep 2003
does not work .....


when i edited my profile to test and saved


then went back and homepage field was blank .....
Reply With Quote
  #10  
Old 02 Jul 2004, 18:09
700mb 700mb is offline
 
Join Date: Jul 2004
its working.....for a while......little while
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 14:50.

Layout Options | Width: Wide Color: