UBB.threads PHP Forum Software Community Forums UBB.classic UBB.classic 6 Support Spam exploit

I run classic 6.6.0.
My host has just suspended my account because spammers exploited a script in the ubb cgi folder. I have been unsuspended for now, but he is demanding I uninstall the UBB software to prevent this happening again.

I've done a search on these forums and found very little in reference to spam. I have disabled UBBfriend as this seemed to be mentioned a lot. Is there anything I can disable or change to prevent spamming?

Is this exploit known for 6.6.0 and will an update fix it. I am not a member at the moment, because unless the new release UBB project has some major improvements I am going to move to another software.

I don't know of any such exploit but you may want to consider upgrading to 6.7.2 and disabling UBB.Friend and allowing users the ability to mail users (i believe this was added in 6.6); additionally you may think about disabling Private Messages as users may be getting spammed through that (which is likely what your host is whining about).

Ask your host for more information, there isn't any part of the UBB which would allow spam other than the "allow users to email through the ubb" option.

If you could find out exactly which script they accuse of being the culprit, that would be helpful.

If it's in the UBB's CGI directory, but does not start with "ubb" or "cp", then it is not part of the UBB. You may have a mailform script there as well.

Thanks Gizmo and Charles for your help. However, after bugging the hell out of my host for days they finally decided that it wasn't spam, but rather server resources that were the problem. I've got 10 emails where they clearly state otherwise, but what can you do.....

Anyway, they are now banning me from using UBB.classic on their servers, which is a huge problem for my site. I am keen to go for the new thing you are working on, but I can't afford to wait for the release. Any suggestions for the interim?

Well, if you want a VPS (the optimal solution as there is ultimately very little a host would do resource wise as you get a ton) you should go with EV1:
http://www.ev1servers.net/english/vps_series.asp

Just to add to Gizmo's comment about ev1, I acutally host my classic site with ev1 and have had a fairly positive experience. The added bonus is you have root access to your VPS instance and can install what software you like <img src="https://www.ubbcentral.com/boards/images/graemlins/smile.gif" alt="" />

My problems would all be solved if only the new UBB product was ready <img src="https://www.ubbcentral.com/boards/images/graemlins/wink.gif" alt="" />

Thanks for the suggestion guys. I was hoping for a cheaper and simpler solution <img src="https://www.ubbcentral.com/boards/images/graemlins/wink.gif" alt="" /> But now that I've had a look at VPS I am warming to the idea. My main concern is that I am not much of a geek, so I have no idea how to protect from hacking and other problems that are usually taken care of by virtual hosts. Is this different with VPS? I might have to take it for a spin to work it out.

In most all cases VPS are managed (as in the hosting provider provides updates); Dedicated servers on the otherhand aren't generally managed.

Thanks for the recommendation. I didn't go with the host you suggested, cos I wanted cpanel and fantastico, but I did end up on a VPS and I couldn't be happier.
Now I can patiently wait for the new UBB software <img src="https://www.ubbcentral.com/boards/images/graemlins/wink.gif" alt="" />

Out of curiosity, what VPS provided did you decide to go with?

http://www.powervps.com/

they are really accommodating of noobs too <img src="https://www.ubbcentral.com/boards/images/graemlins/wink.gif" alt="" />