http://bbpress.org/forums/ bbPress support forums Tag: iframe en Wed, 03 Dec 2008 00:42:01 +0000 http://bbpress.org/forums/topic/x-victoryru-exploit#post-11998 Thu, 15 Nov 2007 11:32:41 +0000 afdenahy 11998@http://bbpress.org/forums/ <p>Thanks Trent et al. 3ix have fixed the problem. This is their response:<br /> We have investigated the root cause of the issue and it is a type of iframe hacking from an Serbian IP which got into one of the customised php scripts of one of the clients and then got FTP access of domains and modified the pages.</p> <p>We have removed that script and the banned the IP and process of removing that hacked script . Your account has been cleaned.</p> <p>Now I'm changing lots of passwords. Sorry about jumping to conclusions about that script line in your header.php Trent.</p> <p>Anthony </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11992 Wed, 14 Nov 2007 23:50:14 +0000 Trent 11992@http://bbpress.org/forums/ <p>As well, afdenahy you can always contact me by my about page on my site with the contact form. As well, the "modlook" tag would also draw me in faster even though that is not really the intended purpose of that tag to this thread!</p> <p>Trent </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11991 Wed, 14 Nov 2007 23:45:07 +0000 Trent 11991@http://bbpress.org/forums/ <p>I wrote about this in the wordpress.org forums as well and the only thing was that anarchy-media javascript in there left over after I re-uploaded the file after a server crash from my own modifications to the original theme. </p> <p>I have taken that up and reloaded the theme to the server, but I don't see anything in footer.php that would even cause a problem that you are seeing. </p> <p><a href="http://wordpress.org/support/topic/143571?replies=3#post-648853" rel="nofollow">http://wordpress.org/support/topic/143571?replies=3#post-648853</a></p> <p>Trent </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11989 Wed, 14 Nov 2007 19:33:09 +0000 livibetter 11989@http://bbpress.org/forums/ <p>I suggest you move to other hosting providers.</p> <p>I checked few sites on your hosting server (using <a href="http://www.myipneighbors.com/" rel="nofollow">http://www.myipneighbors.com/</a> to find out), they are inserted the same code.</p> <p>Hope you can get refund! </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11987 Wed, 14 Nov 2007 18:12:37 +0000 sambauers 11987@http://bbpress.org/forums/ <p>The file you mentioned is harmless.</p> <p>Your problem was with an iframe that was inserted at the end of the page.</p> <p>Your site still contains some obfuscated javascript at the end of the page. </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11985 Wed, 14 Nov 2007 12:14:03 +0000 afdenahy 11985@http://bbpress.org/forums/ <p>The header.php file is from the bbpress-forum template supplied by Trent at <a href="http://trentadams.com/2007/02/10/theme-release-onvertigo/#comment-347" rel="nofollow">http://trentadams.com/2007/02/10/theme-release-onvertigo/#comment-347</a></p> <p>I reinstalled everything, including the bbpress-forum theme, but with the anarchy.js line deleted. Now everything is fine. I think you might need to have a word with Trent about the purpose of the onvertigo.com/anarchy_media/anarchy.js<br /> Anthony </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11983 Wed, 14 Nov 2007 11:27:41 +0000 sambauers 11983@http://bbpress.org/forums/ <p>I didn't say anything about the script at the top. I assume that's from a plugin you've installed.</p> <p>Remove the script and iFrame from the bottom.</p> <p>Look in footer.php</p> <p>Where did you download your files from? </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11982 Wed, 14 Nov 2007 10:36:54 +0000 afdenahy 11982@http://bbpress.org/forums/ <p>No, the script is still being inserted at the bottom. When I replace the eval in the script with document.write and put the script in a html page, it produces a rectangle -strange. Is this really coming from Trent, the moderator? It has wasted a lot of my time. </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11981 Wed, 14 Nov 2007 10:10:35 +0000 afdenahy 11981@http://bbpress.org/forums/ <p>Thanks - yes, I found this in header.php:<br /> &lt;script type="text/javascript" src="http://onvertigo.com/anarchy_media/anarchy.js"&gt;&lt;/script&gt;<br /> I'll try deleting it and see if it stays deleted. Apparently onvertico.com belongs to Trent Adams, a bbPress enthusiast - hmm. </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11980 Wed, 14 Nov 2007 05:32:07 +0000 sambauers 11980@http://bbpress.org/forums/ <p>At the end of your pages, after the closing HTML tag there is an additional script and an iframe.</p> <p>This code is not in the download tarballs, so it seems the code has been injected on your site only. You should contact your web host for assistance as your service may have been compromised. </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11979 Wed, 14 Nov 2007 05:30:27 +0000 php4ever 11979@http://bbpress.org/forums/ <p><a href="http://www.blockacountry.com" rel="nofollow">http://www.blockacountry.com</a> is what some do when they find they have no other options.</p> <p>~ Jared Ritchey </p> http://bbpress.org/forums/topic/x-victoryru-exploit#post-11977 Wed, 14 Nov 2007 04:54:04 +0000 afdenahy 11977@http://bbpress.org/forums/ <p>When I browse to ourshire.net/forum, the status bar indicates something downloading from x-victory.ru. I've tried improved security via .htaccess, changing database password etc, but it goes on. Google lists this as possible "Badware" site.</p> <p>Has anyone had this problem, or have any idea what I could try to prevent? No sign of damage (yet). </p> http://bbpress.org/forums/topic/unable-to-log-in-in-iframes#post-11058 Sat, 22 Sep 2007 09:58:23 +0000 warmechoco 11058@http://bbpress.org/forums/ <p>this whas kinda my persuasion to choose for bbpress, so I could login from Iframes.. I knew nothing about forums (only phpBB: but this wasn't easy to work with in iframes)... what a shame :) </p> http://bbpress.org/forums/topic/unable-to-log-in-in-iframes#post-11057 Sat, 22 Sep 2007 09:56:47 +0000 warmechoco 11057@http://bbpress.org/forums/ <p>hmmm but Iframes is so handy :) I also use it for my photo albums... Thanks btw! </p> http://bbpress.org/forums/topic/unable-to-log-in-in-iframes#post-11051 Fri, 21 Sep 2007 17:33:48 +0000 fel64 11051@http://bbpress.org/forums/ <p>&gt; how else do you integrate a forum in a site??</p> <p>Preferably not with iframes. iframes are really nasty, because you can never access the url of anything you navigate to and instead of the full browsing window you have just that frame.</p> <p>It really depends on the kind of integration you want. If you want visual integration, just make it look the same or use some of the methods other dudes have used here (see Chris' links). </p> http://bbpress.org/forums/topic/unable-to-log-in-in-iframes#post-11050 Fri, 21 Sep 2007 16:49:59 +0000 chrishajer 11050@http://bbpress.org/forums/ <p>Oh boy - just search these forums for integration.<br /> <a href="http://bbpress.org/forums/tags/integration" rel="nofollow">http://bbpress.org/forums/tags/integration</a> (threads tagged integration)</p> <p>This was a good summary I thought:<br /> <a href="http://www.adityanaik.com/integratepress-part-i/" rel="nofollow">http://www.adityanaik.com/integratepress-part-i/</a></p> <p>Normally, people adjust the template of their forum to match their website. I haven't seen one in an iframe yet, and don't know enough about form submission (login form) and redirection and htaccess rewrite rules to know if it would work like that. </p> http://bbpress.org/forums/topic/unable-to-log-in-in-iframes#post-11049 Fri, 21 Sep 2007 16:45:11 +0000 warmechoco 11049@http://bbpress.org/forums/ <p>good idea, but it didn't work ... :/</p> <p>how else do you integrate a forum in a site?? very curiouse </p> http://bbpress.org/forums/topic/unable-to-log-in-in-iframes#post-11048 Fri, 21 Sep 2007 16:37:18 +0000 chrishajer 11048@http://bbpress.org/forums/ <p>Can you change the iframe source to a page name rather than relying on the index page of the directory called "forums"? So, instead of this:</p> <p><code>&lt;iframe src=&quot;forum&quot;</code></p> <p>Try this:</p> <p><code>&lt;iframe src=&quot;forum/index.php&quot;</code></p> <p>I have no idea if that will work. It's an interesting way to get an integrated look. I don't think I've ever seen that before. </p> http://bbpress.org/forums/topic/unable-to-log-in-in-iframes#post-11046 Fri, 21 Sep 2007 15:24:21 +0000 warmechoco 11046@http://bbpress.org/forums/ <p><a href="http://apollonialeuven.student.kuleuven.be/forum" rel="nofollow">http://apollonialeuven.student.kuleuven.be/forum</a> = original forum<br /> <a href="http://apollonialeuven.student.kuleuven.be/forum.php" rel="nofollow">http://apollonialeuven.student.kuleuven.be/forum.php</a> = iframe forum</p> <p>thank you! </p> http://bbpress.org/forums/topic/unable-to-log-in-in-iframes#post-11043 Fri, 21 Sep 2007 14:08:56 +0000 chrishajer 11043@http://bbpress.org/forums/ <p>Please provide a URL where this can be experienced. I have not heard about this problem before. </p> http://bbpress.org/forums/topic/unable-to-log-in-in-iframes#post-11042 Fri, 21 Sep 2007 13:03:47 +0000 warmechoco 11042@http://bbpress.org/forums/ <p>hi,<br /> I use my bbpress forum inside an Iframe..<br /> Before I didn't have any problems logging in (IE6 &#38; 7),<br /> but just now I'm unable to login in the iframe... FF works just fine,<br /> just IE6&#38;7 are giving troubles... When I go to the real page logging in works just fine.. but that's not the intention to work outside iframe..</p> <p>someone having the same difficulties?</p> <p>thx! </p>