Guestbook was hacked

vqueen · 05-20-2005, 01:29 AM

When people tried to access the guestbook (even when i tried from the control panel), we keep getting redirected to a porn site

which is very upsetting since the site is for a storyteller for children.

I had to disable the ultraguest guestbook.

Can the admi do something about this please? My other ultraguest guestbook hasn't been touched. Just the other one.

Thank you.

***Andreas*** · 05-20-2005, 03:36 AM

What is the guestbook ID (or URL)? I tried to check the guestbook associated with your email but it appears be working.

There are two possibilities here:

Someone has left a message which somehow forwards the user to an adult site. In this case there is a bug in the guestbook system, since "dangerous" html, javascript etc is supposed to be removed from all posts.
Someone accessed to the members area using your email and your password, and changed the header of your guestbook. Javascript etc is allowed here which makes redirects possible. This would not be a bug in the system.

vqueen · 05-20-2005, 04:05 AM

The guestbook ID is 1116010034. I tried to access from the control panel and I still got the porn sites. I can't close the sites since it opens multiple browser windows and I have to restart my computer.

***Andreas*** · 05-20-2005, 04:54 AM

Hi,

This was indeed a bug in the guestbook system.

Malicious messages has now been removed from your guestbook and a bug that lets people post certain code in the "Name" field has been fixed.

Thanks for reporting this problem and making UltraGuest.com better!

05-20-2005, 01:29 AM	#1
vqueen Join Date: May 2005 Posts: 2	Guestbook was hacked When people tried to access the guestbook (even when i tried from the control panel), we keep getting redirected to a porn site which is very upsetting since the site is for a storyteller for children. I had to disable the ultraguest guestbook. Can the admi do something about this please? My other ultraguest guestbook hasn't been touched. Just the other one. Thank you.

05-20-2005, 03:36 AM	#2
*Andreas* UltraGuest Admin Join Date: Nov 2003 Location: Oslo, Norway Posts: 746	Re: Guestbook was hacked What is the guestbook ID (or URL)? I tried to check the guestbook associated with your email but it appears be working. There are two possibilities here: Someone has left a message which somehow forwards the user to an adult site. In this case there is a bug in the guestbook system, since "dangerous" html, javascript etc is supposed to be removed from all posts. Someone accessed to the members area using your email and your password, and changed the header of your guestbook. Javascript etc is allowed here which makes redirects possible. This would not be a bug in the system.

05-20-2005, 04:05 AM	#3
vqueen Join Date: May 2005 Posts: 2	Re: Guestbook was hacked The guestbook ID is 1116010034. I tried to access from the control panel and I still got the porn sites. I can't close the sites since it opens multiple browser windows and I have to restart my computer.

05-20-2005, 04:54 AM	#4
*Andreas* UltraGuest Admin Join Date: Nov 2003 Location: Oslo, Norway Posts: 746	Re: Guestbook was hacked Hi, This was indeed a bug in the guestbook system. Malicious messages has now been removed from your guestbook and a bug that lets people post certain code in the "Name" field has been fixed. Thanks for reporting this problem and making UltraGuest.com better!

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Can One Upload Pictures Onto Free GuestBook?	LatinChica209	Guestbook Support	1	01-09-2005 05:12 PM
Deletion of certain words in guestbook	Barr-y	Guestbook Support	3	12-29-2004 07:02 PM
Editing Guestbook entries	ShatPank	Guestbook Support	1	11-09-2004 07:45 AM
Guestbook hacked???	Hebertsite	Guestbook Support	13	09-15-2004 03:21 AM
using same guestbook for several websites?	Andreas	Guestbook Support	0	12-07-2003 09:00 AM

Currently Active Users Viewing This Thread: 7 (0 members and 7 guests)