MyBB Community Forums

Full Version: Constant attacks on forum
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2
I have been having the same issue as others with my forum. Many times guys are signing in and making another account as an admin. I have had the same culprit as other using the Profile Skype ID and the Profile Playstation Network ID. I also had the Profile Wii Friend Code and Profile Wii Friend Code all of them I have removed.
I know from reading responses to others having the same issue that I need to upload new fresh copies of MyBB. I have version 1.6.8 that has been upgraded to 1.6.9 before ever opening to the public. My question is can I just use a fresh download of 1.6.9 files when I start replacing them? Or do I need to do the 1.6.8 and then use the upgrade files of 1.6.9?

My forum address is in my profile.

Active plugins
Advanced Secure Spoiler (1.0)
Akismet (1.2.2)
Game Section (1.2)
Google SEO (1.6.5)
Message Bar (0.1)
MyShoutbox (1.7)
MyTube (1.0)
Page Manager (1.5.2)
Plugin Uploader (1.1.2)
Report Spammer (1.0)
Side bar for mybb (1.0)
Spamalyser (0.93)
Userpages for MyBB (1.3)
View Groups (1.5)

Not active plugins
A Celebration Moment (1.0)
CSS Buttons (1.0)
Hello World! (1.0)
MyBBpublisher (2.0.2)
MyTabs (1.32)
Portal Redirect (1.1.0)


Thank You
MyTube has a stored XSS vulnerability too - might be a good idea to remove it just in case.

Best thing to do is delete everything apart from ./inc/config.php and ./inc/settings.php then re-upload everything from a fresh MyBB 1.6.9 download.
OK thanks. I appreciate the input. MyTube is now deleted. Will work it over this evening on the new 1.6.9 files.
I'm not sure why people would need the Playstation/XBOX/Wii plugins, you can do this already under; Configurations > Custom Profile Fields

Then you just have to edit a code like this into the postbit_author_user template of the themes you're using:

Playstation/XBOX/Wii ID: {$post['fid00']}

Replace the "00" numbers with the custom profile field ID number. Easy Wink
(2013-01-17, 04:05 PM)weBex Wrote: [ -> ]I'm not sure why people would need the Playstation/XBOX/Wii plugins, you can do this already under; Configurations > Custom Profile Fields

Then you just have to edit a code like this into the postbit_author_user template of the themes you're using:

Playstation/XBOX/Wii ID: {$post['fid00']}

Replace the "00" numbers with the custom profile field ID number. Easy Wink
Because until you informed me I was unaware of how to do this. Although I still do not understand completely, at least now I can try and figure it out. Smile They don't put "Junior Member" under my name because I am experienced. Toungue

Thanks for the tip. Big Grin
Well the title doesn't always show someone's knowledge accurately. We assume optimistically Wink.
(2013-01-18, 12:01 AM)Josh H. Wrote: [ -> ]Well the title doesn't always show someone's knowledge accurately. We assume optimistically Wink.

Well you know what they say about the word assume. Angel lol Just kidding with ya.

I have been trying to learn but I should get some sort of a curve since I am old. Smile And you also have to take into account There was no internet when I was growing up. We actually had to play outside. The only thing we had was a black n white 13" TV with 3 channels.

Im trying but I still havent understood postbit I keep seeing mentioned all over the place. I did read some on it but still didnt grasp it. Ill try some more reading and figure it out. Any tutorials you want to recommend Im all ears.

I did however overwrite all the files except the 2 mentioned /inc/config.php and ./inc/settings.php Hopefully that will solve my issues.

Thank you all for your support.
(2013-01-17, 10:56 PM)Altered Wrote: [ -> ]Because until you informed me I was unaware of how to do this. Although I still do not understand completely, at least now I can try and figure it out. Smile They don't put "Junior Member" under my name because I am experienced. Toungue

Thanks for the tip. Big Grin

You repped me for that, I assume you got it figured out? You can use it to all sorts of customized profile features with that.
(2013-01-18, 04:03 AM)weBex Wrote: [ -> ]
(2013-01-17, 10:56 PM)Altered Wrote: [ -> ]Because until you informed me I was unaware of how to do this. Although I still do not understand completely, at least now I can try and figure it out. Smile They don't put "Junior Member" under my name because I am experienced. Toungue

Thanks for the tip. Big Grin

You repped me for that, I assume you got it figured out? You can use it to all sorts of customized profile features with that.
Yes I repped you because you offered me real help. I appreciate that. I do have a couple a questions though.
  1. Would including a icon cause a venerability?
  2. I included a icon to show there as well but it has no alternate effect. Is this possible?
  3. How can I get this located in my profile page under Contact Details under MSN ID not in Additional Info ?

Here is my default code
<br />Playstation ID: {$post['fid5']}
Here is the icon located on my host.
http://afksite.clanservers.com/images/pni.gif
Here is the code I currently have. But I do not see the alt effect.
<br /><img src="pni.gif" alt="Playstation ID"> PS3 ID: {$post['fid5']}
(2013-01-18, 07:08 AM)Altered Wrote: [ -> ]Yes I repped you because you offered me real help. I appreciate that. I do have a couple a questions though.
  1. Would including a icon cause a venerability?
  2. I included a icon to show there as well but it has no alternate effect. Is this possible?
  3. How can I get this located in my profile page under Contact Details under MSN ID not in Additional Info ?

Here is my default code
<br />Playstation ID: {$post['fid5']}
Here is the icon located on my host.
http://afksite.clanservers.com/images/pni.gif
Here is the code I currently have. But I do not see the alt effect.
<br /><img src="pni.gif" alt="Playstation ID"> PS3 ID: {$post['fid5']}

No, using an image anywhere shouldn't cause a vulnerability. I'm not sure what "alternate" effect you're looking for.

Your image code doesn't seem complete, it should be:
<br /><img src="http://afksite.clanservers.com/images/pni.gif" alt="Playstation ID"> PS3 ID: {$post['fid5']}

But something's not right with your image, when I tried to open, I got a page with this message:
ERROR!
Hey asshole! The page you are looking for aint here! It's possible your a dumbass and shouldn't be here. Click here if you don't know what else to do

Now as for moving the information under "Contacts", that part I'm unsure of.

Anything created under "Custom Profile Fields" appear under "Additional Details".
Pages: 1 2