UBB.threads PHP Forum Software Community Forums Thread Like Summary - Phishing attack from our UBB implementation

Greetings . . .

The support folks over at Ipower have taken our web-presence down because of a Phishing attack that apparently originated from our site. The details can be found over at Netcraft:
https://incident.netcraft.com/685581256719/redirect_graph.html

Based on the URL it appears to involve changepfrefs.inc.php. I was just out in the filesystem. None of the php files have been touched since our upgrade back in February. So the codebase doesn’t appear to have been compromised.

Please advise on (if you can) on how to stop the offending redirects. Ipower will not put our site back online until we can assure them that this is fixed.

Regards,
Keith
Tech Services Admin,
Inliners International

A quick workaround for this issue

Open /ubb/scripts/changeprefs.inc.php in an editor and replace the following line near at the end:

with:

This will add an additional check for the curl parameter