On my forum, whenever I load this page:
http://mybbaddict.com/thread-why-mybb
It get a dialog box saying this:
![[Image: e8806b.png]](https://camo.mybb.com/a9ba559fafc3740c6fe197667b8dd2e1bb1b4032/687474703a2f2f7777772e696d616765736e6174636865722e636f6d2f696d672f363133356365636134613863626564302f6538383036622e706e67)
I have never heard of
http://moviehotel.net.
I think I know the user who committed this, he his a .php file as his signature image. He will be banned, but what is this? How can I prevent this? It was a .php file linked as an image.
(2012-02-23, 03:55 PM)BitzDefender Wrote: [ -> ]It was a .php file linked as an image.
Even a normal image within the protected directory will generate this message, it's not an exploit. You can't prevent this, everybody can set up a htaccess at any time.
Okay so no harm can be done? I just want to make sure it wasn't some kind of phishing attempt, or even any kind of malicious intent.
It should be harmless. But definitely remove the sig because every page with his sig will show that.
Moviehotel.net is owned by fb29 his forum was hacked a few days ago dont trust those authentication boxes. it is a phising attempt thats what I've research you can do the same.
(2012-02-23, 10:36 PM)John J. Wrote: [ -> ]Moviehotel.net is owned by fb29 his forum was hacked a few days ago dont trust those authentication boxes. it is a phising attempt thats what I've research you can do the same.
Do you allways spread BS like this? Password protected directory doesn't
allow user to access protected specified folder and content inside it (subfolders,files).You will be promoted with authentication window and if you enter correct pass/username you can enter that directory.
Ok so basically it is harmless, but was unintentional because the forum was hacked.
I've removed the signature.
Yes, It is harmless but never trust authencation boxes, never put info in them.
(2012-02-23, 11:08 PM)John J. Wrote: [ -> ]Yes, It is harmless but never trust authencation boxes, never put info in them.
So, my clients shouldn't login to their client area on my website and the secure area for my job I should never trust? Okay, thanks for telling me then! I won't touch them again.
(2012-02-23, 11:27 PM)WebOutfit Wrote: [ -> ] (2012-02-23, 11:08 PM)John J. Wrote: [ -> ]Yes, It is harmless but never trust authencation boxes, never put info in them.
So, my clients shouldn't login to their client area on my website and the secure area for my job I should never trust? Okay, thanks for telling me then! I won't touch them again.
No I'm not saying it that way. I'm saying if you see an unsuspected box then don't do it but if you know what the box is for then you can enter it and do your stuff.