SMF Problem?!? pop ups

N1ghtf4ll3r · **SMF Problem?!? pop ups -** 06-21-2008, 11:44 AM

Need some help please,

If you all go to my smf forum, you should see the problem, once you click to go onto another forum page, a pop up keeps appearing.

Attempted solutions so far:

Deleted all members who have not posted... incase they where bots, causing the problem.

Looked through all uploads, nothing there.

Copied any database data into my personal test server, deleted smf board, re-installed smf board and then copied only the essential smf data back into mysql. Problem was solved, for 24 hours! then it re-appeared... im starting to think this is a problem with 000webhost.com and not SMF.

I dont see anything wrong with the code, nothing has been hacked and i have submitted a support ticket over 3-4 days ago with no response... i mean even if they dont know whats wrong, they could atleast tell me, its too advanced for them or something.

Is anyone else experiencing these problems with SMF on this host? and does any one have any solutions?

Link to forum is either

www.avatar-kingdom.com/forum/
www.avatar-central.co.uk/forum/
www.animeavatarcentral.site88.net/forum/

Any help would be great.

N1ghtf4ll3r.

sizzlefire · 06-21-2008, 12:03 PM

I went to your site, and see what your talking about. If I were you, Id go to the smf website, simplemachines.org download smf 1.1.5, delete your database, and upload it all again, and see if it happens with the default smf theme.

N1ghtf4ll3r · 06-21-2008, 06:49 PM

Just done that, erm, appears that after a bit of research that i have done.... well, simply put, i believe your servers have been hacked. Be warned, any one else with a simple machines forum, will quite likely be posting this issue very soon.

Following thread may help owners and operators of the servers that 000webhost use.

http://www.simplemachines.org/commun...topic=244093.0

Quote:

If its inserted into the php files themselves., then usually these type of injections are as a result of a host hack.
I'd recommend contacting your host asap.

If your on a shared server, it can often be wise to check other sites hosted on the same server. (Use a site like myipneighbors.com ) And see whether there index.php's have been affected aswell.
Then you'll know whether that entire shared server has been compromised.

- Double check all your mods are latest versions.
- That you've got attachments encrypted.
- Any other scripts your running are upto date.

Unfortunately, just replacing the files isn't enough. You and/or your host need to find out how it was caused. Otherwise it could continue to happen.

Nothing else i can do really, other then inform you guys and all other simple machines forum users. Now its down to Admin and owners of 000webhost to fix this problem.

Thanks for the partial help sizzlefire, but as i said i stripped SMF to bits to find the problem and its definitely a hack.

Keep me informed, perhaps sticky this topic, so that way others dont have to post a new thread.

Red-X · 07:03 PM

I found something similar to your problem in SimpleMachines.org. Try asking the same question inside that thread. Good luck.

EDIT: Oh, well glad you got an answer to your question.

N1ghtf4ll3r · 06-30-2008, 06:25 PM

....

Are any of the operators of this website going to deal with this issue or just let it get worse?

....

If you are going to let it get worse, well i may as well highlight it else where and see what happens.. maybe there will be more hacking. I dont exactly know.

Have a loverly day.
....

If you are going to fix it then can you please update this thread with something sayiing that you are.

Laterz =)

conwayjd123 · 07-01-2008, 09:56 PM

I've run into the same problem today with one of my sites with 2 others that fail to open.

dark_tech · 07-02-2008, 10:05 AM

try using phpbb3 or vbulletin its a gud forum script and im sure u wont get any errors or popups in it..

conwayjd123 · 12:10 PM

Good mornnig.
I'd taken the site down last night and plan on reinstalling this morning.

Seems I have problems when enabling the frontpage component and 1 other module. I disabled all of the modules and enabled them 1 by 1 and found one with an issue.

I looked through file after file and didn't see the iFrame that's causing the problem. I figure it had to be on the hosting server. I have another site on the same server and it works great.

N1ghtf4ll3r · 07-03-2008, 05:30 AM

Quote:

Originally Posted by dark_tech

try using phpbb3 or vbulletin its a gud forum script and im sure u wont get any errors or popups in it..

I would but i love SMF, ive been using it for years now. I know how to rip it to bits and piece it back together, i dont really have too much time at the moment to start learning another forum and how its scripted.

Anyway, ill try and give it ago. See what happens.

In regards to conwayjd123,

Ive now started suffering the loss of my Index page for my website which i believe is a consequence of this hack.

Laters,