official guestbook hacked?

oh.....I don't regard it as Spam but since its your site. I don't know if its automated, I think it looks manual though. To check change the folder in infusions called guestbook to something then change the main file guestbook.php to same as the folder, You might want to edit guestbook.php to link it up

Thre are some older MODS to protect guestbook. Don't know if they will still work but you could check that:

http://www.phpfusion-mods.com/forum/v...8&pid=6351

I'm sure that is automated as it is the same message and link I have seen maybe 50 times over the last year.

Well no more "spam" messages occur! So I guess there is no real spam danger, otherwise all php-fusion sites would have been flooded by now.

I remove mentioned guestbook entry! And edit the first post.

Ummm, since this was an issue of spamming - not hacking - was it necessary to use the word "hacked"? in the subject line? We've already had some folks (falsely) accusing PF of being responsible for hacks in the last few weeks so this is not the best subject line to use in this instance.

Guestbooks that don't have some sort of spam protection are an issue on ANY site, inside a CMS or not.

@braajeri
Wel if a weakness or security hole is exploited I call it a hack. In this case I thought it was the guestbook. And please take a note on the questionmark! in the subject line.

I know to what post you're referring when you're talking of some folks.. and you really upset me when you compare me with them.

tomek has been in my guest book also. I assume he is getting addresses from the support sites for Fusion. It is part of the web, and dealt with the nice tools of blacklisting him and his crowd. :D



Here is his WHOIS info:


http://whois.domaintools.com/212.122....22.215.107

He has a nice range of IP's:

212.122.215.0 - 212.122.215.255



Looking at some info in light of strange entries, his site (IP) is listed as SPAM on SORBS.

So he gets a nice blacklist on my site.

@Wanabo, not comparing you to any other poster. Just saying we need to all think before using the word "hacked" in the subject line if the issue is just spam and not hacking. I remember some time back that I never even paid attention to the guestbook in PF until I looked at some stats for my site. Most of the hits were for guestbook.php. I havd literally 100s of entries, 99.99% of which were total spam. Is that an exploit? No, the guestbook is just a simple form that bots can utilize to enter spam. So I just went in phpmyadmin and wiped out all of the entries and disabled the guestbook. If you want to keep your guestbook open (who uses guestbooks anymore besides spammers?), install one of the spam protection mods.