Author Topic: signature pic been hijacked  (Read 3012 times)

0 Members and 1 Guest are viewing this topic.

Offline Carl Mac

  • Member
  • ***
  • Joined: Apr 2009
  • Posts: 359
signature pic been hijacked
« on: July 28, 2009, 17:02:13 »
Hello Cat, it looks like our signature pic has been hijacked on photo bucket, I've removed mine until I get to the bottom of it. Andy-V-Strom any ideas mate.

Carl

                                                               Feel the fear and do it anyway

Offline svpower

  • Member
  • ***
  • Joined: Apr 2009
  • Posts: 86
Re: signature pic been hijacked
« Reply #1 on: July 28, 2009, 17:10:51 »
Yeah what's all this feck.com thing. ###
a post of mine has changed from a picture
of a bike to feck.com..... :wtf:
Anyone know why...!!!!!
Suzuki SV650s 99, Suzuki SV650s 06, Kawasaki KLV1000 05, Suzuki GSX650f 08.
You shoot me in a dream you better wake up and apologise......!!!!!

Offline Juvecu

  • Member
  • ***
  • Joined: May 2009
  • Posts: 13454
  • Eat, Sleep, Ride, Repeat
  • Bike: '11 Versys 650 & '05 TT-R250
  • Location: Ryton-On-Dunsmore
Re: signature pic been hijacked
« Reply #2 on: July 28, 2009, 17:18:08 »
There are some pics in the Gallery that have also changed to that feck.com pic. Also, some posts that I have read seem to have "feck" randomly inserted into the post. If this is the case, the forum might be compromised (please note that I'm not saying that it "is compromised".) Anyways, it's probably better if someone with the proper access checks it out and informs us?
Members Map                                                    Juv's Strom "Restoration" (sold to Mad Phil)
Juv & Locky's Morocco Trip Report                   Juv's Blog

Offline Caveman

  • Member
  • ***
  • Joined: Jul 2009
  • Posts: 6
Re: signature pic been hijacked
« Reply #3 on: July 28, 2009, 17:19:11 »
svpower - this might be linked to the L U C K problem in the other thread.
Got the full six pack but lacks the plastic thingy that holds it all together

Offline Catballou

  • Member
  • ***
  • Joined: Jul 2008
  • Posts: 6389
Re: signature pic been hijacked
« Reply #4 on: July 28, 2009, 17:19:41 »
I've changed mine for now then ...............mmmmmmmmmmmmmmmmmmmmm      Ronan O'Gara ......I'd like to tackle him   :grin:  :grin:  :grin:  :grin:
Life isn't about waiting for the strom to pass.... it's about learning to dance in the rain

Offline Caveman

  • Member
  • ***
  • Joined: Jul 2009
  • Posts: 6
Re: signature pic been hijacked
« Reply #5 on: July 28, 2009, 17:20:39 »
It's your signature that changed, not your avatar
Got the full six pack but lacks the plastic thingy that holds it all together

Offline Catballou

  • Member
  • ***
  • Joined: Jul 2008
  • Posts: 6389
Re: signature pic been hijacked
« Reply #6 on: July 28, 2009, 17:22:18 »
Quote from: "Caveman"
It's your signature that changed, not your avatar

Oh & what did I have there a quote,  sure I didn't have a piccy  :shrug:  :shrug:  but still Ronan O'gara... that's me doing no work for the rest of the afternoon whilst I letch
Life isn't about waiting for the strom to pass.... it's about learning to dance in the rain

Offline Catballou

  • Member
  • ***
  • Joined: Jul 2008
  • Posts: 6389
Re: signature pic been hijacked
« Reply #7 on: July 28, 2009, 17:23:33 »
oops I did.. can't for the life of me remember what it was
Life isn't about waiting for the strom to pass.... it's about learning to dance in the rain

Offline svpower

  • Member
  • ***
  • Joined: Apr 2009
  • Posts: 86
Re: signature pic been hijacked
« Reply #8 on: July 28, 2009, 17:26:53 »
Cat you dirty f u c k e r.........I did put Looker really.....lol
Suzuki SV650s 99, Suzuki SV650s 06, Kawasaki KLV1000 05, Suzuki GSX650f 08.
You shoot me in a dream you better wake up and apologise......!!!!!

Offline Juvecu

  • Member
  • ***
  • Joined: May 2009
  • Posts: 13454
  • Eat, Sleep, Ride, Repeat
  • Bike: '11 Versys 650 & '05 TT-R250
  • Location: Ryton-On-Dunsmore
Re: signature pic been hijacked
« Reply #9 on: July 28, 2009, 17:29:32 »
As an observation, so far the only posts that I have noticed that have the random "feck" inserted were ones posted by minkyhead. That could also be a complete coincidence as they were also all first posts in a thread (maybe he just starts more threads than others and the chances are bigger that his posts have the random inserts.)
Members Map                                                    Juv's Strom "Restoration" (sold to Mad Phil)
Juv & Locky's Morocco Trip Report                   Juv's Blog

Offline svpower

  • Member
  • ***
  • Joined: Apr 2009
  • Posts: 86
Re: signature pic been hijacked
« Reply #10 on: July 28, 2009, 17:31:53 »
Has anyone tried feck.com......lol
Suzuki SV650s 99, Suzuki SV650s 06, Kawasaki KLV1000 05, Suzuki GSX650f 08.
You shoot me in a dream you better wake up and apologise......!!!!!

Offline Catballou

  • Member
  • ***
  • Joined: Jul 2008
  • Posts: 6389
Re: signature pic been hijacked
« Reply #11 on: July 28, 2009, 17:34:17 »
No it's not something I'm familiar with, what page of the kama sutra is it  :shrug:
Life isn't about waiting for the strom to pass.... it's about learning to dance in the rain

Offline svpower

  • Member
  • ***
  • Joined: Apr 2009
  • Posts: 86
Re: signature pic been hijacked
« Reply #12 on: July 28, 2009, 17:37:42 »
Yeah ~Yeah......do you stop at page 69......lol

you'll find in on page 1398.... :sarc:
Suzuki SV650s 99, Suzuki SV650s 06, Kawasaki KLV1000 05, Suzuki GSX650f 08.
You shoot me in a dream you better wake up and apologise......!!!!!

Offline Fat Rat

  • Administrator
  • Member
  • *****
  • Joined: May 2008
  • Posts: 17447
  • Bloke/Geezer/Fella
  • Bike: DL650A L6, K8 DL1000 & Tenere 700
  • Location: Carmarthenshire, West Wales
Re: signature pic been hijacked
« Reply #13 on: July 28, 2009, 17:41:17 »
Thanks folks,

The Forum appears secure, it could be that Photobucket has a problem?
*** Bikers Campsite in West Wales ***



Learn to spell! There's a big difference between knowing your shit and knowing you're shit

Visit the V-Strom.co.uk shop today!

Offline Catballou

  • Member
  • ***
  • Joined: Jul 2008
  • Posts: 6389
Re: signature pic been hijacked
« Reply #14 on: July 28, 2009, 17:46:13 »
Quote from: "Andy V-Strom"
Thanks folks,

The Forum appears secure, it could be that Photobucket has a problem?

Just checked and the images are fine in my Photobucket account
Quote from: "svpower"
Yeah ~Yeah......do you stop at page 69......lol

you'll find in on page 1398.... :sarc:

Nope usually 68  :neen:
Life isn't about waiting for the strom to pass.... it's about learning to dance in the rain

Offline Caveman

  • Member
  • ***
  • Joined: Jul 2009
  • Posts: 6
Re: signature pic been hijacked
« Reply #15 on: July 28, 2009, 17:50:28 »
Andy, I suspect you have a problem with the phpbb skin, looks like it randomly changes images to the "feck.com" one and also changes any words ending in U C K to feck.  Got an old backup somewhere?

Another idea - clear out everything the ..cache directory

And another - replace ..viewtopic.php and ..templatesviewtopic_body.tpl from backup

(Be sure to take a backup through admin first ofc)
Got the full six pack but lacks the plastic thingy that holds it all together

Offline Stumpy

  • Member
  • ***
  • Joined: Jan 2009
  • Posts: 269
Re: signature pic been hijacked
« Reply #16 on: July 28, 2009, 18:15:43 »
Can't say I've noticed the random insertions in any posts, nor any pictures been hijacked.

Are you all sure that your local machines / browsers haven't been compromised?
Why waste time learning when ignorance is instantaneous?

C code. C code run. Run code run…please!


Offline Fat Rat

  • Administrator
  • Member
  • *****
  • Joined: May 2008
  • Posts: 17447
  • Bloke/Geezer/Fella
  • Bike: DL650A L6, K8 DL1000 & Tenere 700
  • Location: Carmarthenshire, West Wales
Re: signature pic been hijacked
« Reply #17 on: July 28, 2009, 18:37:29 »
Quote from: "Caveman"
Andy, I suspect you have a problem with the phpbb skin, looks like it randomly changes images to the "feck.com" one and also changes any words ending in U C K to feck.  Got an old backup somewhere?

Another idea - clear out everything the ..cache directory

And another - replace ..viewtopic.php and ..templates<skin>viewtopic_body.tpl from backup

(Be sure to take a backup through admin first ofc)

Hmm I can't see any problems with the skin or find any evidence that the phpBB directory has been compromised  :shrug:
*** Bikers Campsite in West Wales ***



Learn to spell! There's a big difference between knowing your shit and knowing you're shit

Visit the V-Strom.co.uk shop today!

Offline Carl Mac

  • Member
  • ***
  • Joined: Apr 2009
  • Posts: 359
Re: signature pic been hijacked
« Reply #18 on: July 28, 2009, 18:38:24 »
I had a simular thing happen to my forum a couple of months ago by a porn site called gaydar.com

these porn sites/hackers are always messing with php scripts which makes our sites quite vulnerable. They even managed to get my main server password. Something you might want to change Andy mate.

Like Andy says though its looking like the problem is with photo bucket that could explain the pic but how are they changing the words have they been at you word censurer  Andy or do you think they are doing it in some sort of remote way.

To be on the safe side in the end I contacted my server people and retrieved a backup of my site from 2 weeks earlier  ###

                                                               Feel the fear and do it anyway

Offline Carl Mac

  • Member
  • ***
  • Joined: Apr 2009
  • Posts: 359
Re: signature pic been hijacked
« Reply #19 on: July 28, 2009, 18:43:52 »
Quote from: "Catballou"
oops I did.. can't for the life of me remember what it was


Cat it was a round badge type pic about sarcasm

                                                               Feel the fear and do it anyway