Weird Images showing up where they don't belong.

[Verity]

Lately my members have been complaining that they are seeing weird images that don't belong where they are showing. They don't belong at all! They all have been good enough to get screen caps of what they are seeing. I personally haven't seen anything weird but most of my members have and they still are seeing weird things. Below is all of the urls of the screen cap images my members got.

1. http://mysite.verizon.net/res21ded/s...res/hacker.jpg - The Christmas tree.
2. http://mysite.verizon.net/res21ded/s...tures/hack.jpg - The text that is highlighted.
3. http://galeon.com/techie/h1.gif - The peel and stick banners.
4. http://galeon.com/techie/h2.gif - More peel and stick banners.
5. http://www.shakiramedia.com/temp/mad-2.jpg - Santa Claus and reindeer.
6. http://www.shakiramedia.com/temp/madforum.jpg - Christmas stocking.
7. http://mysite.verizon.net/res21ded/s...tures/hacc.jpg - The Trinity picture.
8. http://mysite.verizon.net/res21ded/s...es/cartoon.jpg - The Calvin and Hobbes cartoon.
9. http://mysite.verizon.net/res21ded/s...res/hacccc.jpg - The cartoon looking woman.
10. http://www.shakiramedia.com/temp/mad-xmas.jpg - The elves.
11. http://home.wanadoo.nl/erikenmarijn/mmad.gif - This one is actually where you log in or register and it's like people are logging into a porn site.
12. http://www.shakiramedia.com/temp/hack.jpg - All of the yawn smilies.

And people are still seeing various things from pictures off eBay to porn ads to Christmas decorations and so on. Any idea on why this is happening and how to resolve it?

Thanks,
Becky

[Steve Machol]

Do you allow HTML posting?

[Verity]

Do you allow HTML posting?

Yes, I allow HTML in posts and in signatures.

[Dan]

I would suggest turning that off.... some html code is probably causing this stuff

[BenSjoberg]

Well, judging on the log in page I think you've been hacked!

[Verity]

Hmmm......Well that is just weird. Why offer that option if it's just going to mess up the forum?

I guess my next question then is: How do you center an image using vB code?

I allowed the HTML because my members wanted to be able to center images in their signatures. I know not a big issue, but it does improve the way the forum looks with out everything getting all distorted. And I know as soon as I turn off the HTML I will have dozens upon dozens of people asking me how to center their image with vB code.

[Verity]

Well, judging on the log in page I think you've been hacked!

Actually that was a one time thing. The user that captured that image hasn't seen it since. But it is highly weird that allowing HTML would cause THAT to happen on the log in page.

[Steve Machol]

Allowing HTML is a security risk and can also result in all sorts of strange formatting issues, including your image problem. As long as you allow HTML you are putting your forums at risk.

As to why this is an option, many customers are on private servers or run totally private forums in which the member base can all be trusted.

[Matthew Gordon]

Sounds like someone is running it through those online scripts that does odd things to a page. Have you actually seen those images, and did all those pictures come from the same user?

[Verity]

Sounds like someone is running it through those online scripts that does odd things to a page. Have you actually seen those images, and did all those pictures come from the same user?

I personally have not seen any weird images, and only a handful of my members have not seen them either. The images posted above were captured by 4 different users whom actually took it upon themselves to take a screen cap. Other members have seen weird images as well, but did not get screen caps.

[Verity]

Ok so I'm just going to turn off HTML all together. However, how do I do that? I thought I turned it off in the admin cp which it did turn off HTML in signatures but it doesn't appear to be turned off completely. For example here near the bottom of the screen is the little Forum Rules: box. Where it says You may post new threads, and so on then it says HTML code is off, vB code is on and such. Well at my board the HTML part says it's still on.

So apparently I haven't turned it off in the correct place. Any help would be appreciated.

Thanks

[Verity]

Nevermind. lol I got it taken care of or at least I'm sure I did. In that little Forum Rules: box the HTML now says it's off.

[Verity]

Well HTML is now off, and the weird images are still there. Should people clear their cookies and delete their temp internet files? Would that work?

Sorry to keep on with this but it's highly frustrating that my members have to be frustrated to be on my forum when they should be enjoying themselves. I am open to anything (within reason of course) to solve this problem.

[Steve Machol]

What's the URL to one of the threads with these images? If it does not show up in the HTML source for that page, then it's got to be something on their end.

[Verity]

Well, I have seen one now for the first time and strangely enough it happened in my test forum's admin control panel. The vBulletin logo was replaced with a holiday logo. Below is one the images:



I made this one bigger to include the url in the screen cap. If you want the username and password I will PM those to you. Once again, I am seeing this in my test forum's admin control panel.



Also as soon as I saw it I viewed the source code and it is not in there either. I have attached the source code.