MyBB Community Forums
[Security] Pop up tries to open on index page - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: 1.8 Support (https://community.mybb.com/forum-175.html)
+--- Forum: General Support (https://community.mybb.com/forum-176.html)
+--- Thread: [Security] Pop up tries to open on index page (/thread-221067.html)

Pages: 1 2


Pop up tries to open on index page - RocketFoot - 2018-12-14

Hi guys, I have a weird issue on my index page...it seems like a pop up window sometimes tries to open but immediately disappears.  It only seems to do it when you navigate to the index page from somewhere else in the forum...refresh doesn't seem to trigger it.  I checked my files and template differences but I can't find anything causing it.  I am hoping that it isn't a data miner code or some other malicious crap injected in to my forum??  Can anyone help me see what is going on here?

V. 1.8.19
www.7173mustangs.com

After 900 tries, I was able to capture it with a screen grab!  See image below:

   


RE: Pop up tries to open on index page - isoldehn - 2018-12-15

URL doesn't work.


RE: Pop up tries to open on index page - Michael2014 - 2018-12-15

try this:  www.7173mustangs.com, I tried navigating back and forth to index but cant trigger in chrome desktop


RE: Pop up tries to open on index page - RocketFoot - 2018-12-17

(2018-12-15, 02:05 AM)Michael2014 Wrote: try this:  www.7173mustangs.com, I tried navigating back and forth to index but cant trigger in chrome desktop

I haven't tried chrome...I use Firefox mainly.


RE: Pop up tries to open on index page - isoldehn - 2018-12-18

Further inspection upon visiting the working link. Can confirm the pop up is there.

Inspected Console log and found:
Quote:A parser-blocking, cross site (i.e. different eTLD+1) script, https://ssl.google-analytics.com/ga.js, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
(anonymous) @ index.php:1387

Inspected page source and found the analytic script at the bottom of the page (footer).
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-17686927-2");
pageTracker._trackPageview();
} catch(err) {}</script>



RE: Pop up tries to open on index page - RocketFoot - 2018-12-19

(2018-12-18, 11:10 PM)isoldehn Wrote: Further inspection upon visiting the working link. Can confirm the pop up is there.

Inspected Console log and found:
Quote:A parser-blocking, cross site (i.e. different eTLD+1) script, https://ssl.google-analytics.com/ga.js, is invoked via document.write. The network request for this script MAY be blocked by the browser in this or a future page load due to poor network connectivity. If blocked in this page load, it will be confirmed in a subsequent console message. See https://www.chromestatus.com/feature/5718547946799104 for more details.
(anonymous) @ index.php:1387

Inspected page source and found the analytic script at the bottom of the page (footer).
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-17686927-2");
pageTracker._trackPageview();
} catch(err) {}</script>

Good!  I knew I wasn't completely crazy!  Now how do I remove the script...I checked my Footer templates and it is not there.  Is this an attack of some kind?


RE: Pop up tries to open on index page - Michael2014 - 2018-12-19

I'm pretty sure it's the google ad you are running within the footer.


RE: Pop up tries to open on index page - RocketFoot - 2019-02-01

I am still having this issue...I have removed all Google ads and tested but the ghost popup still shows!  I also detect a white flash between page loads on IE and Chrome?   I can't figure it out!


RE: Pop up tries to open on index page - Michael2014 - 2019-02-02

Okay, now this is confounding. I'm gonna head over to your site right now, just to give it a gander.

Okay, there is a google ad that is lodged underneath the footer of your website, check out the pic attached.

This appeared in the search results on this page
https://www.7173mustangs.com/search.php?action=results&sid=4bb840ea2352c06af36dc810c93150bc

It is a script, did you see this?
[Image: cKHogEb.png]


RE: Pop up tries to open on index page - RocketFoot - 2019-02-04

(2019-02-02, 02:57 AM)Michael2014 Wrote: Okay, now this is confounding. I'm gonna head over to your site right now, just to give it a gander.

Okay, there is a google ad that is lodged underneath the footer of your website, check out the pic attached.

This appeared in the search results on this page
https://www.7173mustangs.com/search.php?action=results&sid=4bb840ea2352c06af36dc810c93150bc

It is a script, did you see this?
[Image: cKHogEb.png]

Yes, the Google ads are currently in position...I had previously removed all of them for testing.  After I saw that the ghost popup was still there, I added the ads back in.