Thread: Vb login error!

Everytime I log in the forum I'm facing the following error:

vBulletin Message
Invalid Redirect URL (http://realscam.com/)

Thanks for the heads up. We just upgraded, so no doubt there are a few kinks.

This looks like it should be working normally now!

Site appears to be unreachable thru a search for realscam or realscam.com and then clicking on search results.
End up being redirected to yahoo.com homepage.

Doesn't matter if using goggle or bing as search engine or have cookies cleared or not

Originally Posted by Poyol

This looks like it should be working normally now!

Still not working for me. Still need to use F5 to be logged here :(

Originally Posted by Fgold

Still not working for me. Still need to use F5 to be logged here :(

It's an ongoing and never ending process, Felipe.

Forums are prime targets for hackers and spammers, so the forum software and plugin developers are continually releasing upgrades as new exploits are detected, similar to the security updates Microsoft releases monthly for its' operating systems.

The main difference being, instead of patches, the developers release a whole new version, which requires the forum to be shutdown temporarily while it's installed and overwrites the previous version.

Even after the forum software is upgraded, there are always incompatibilities and small problems left behind which need to be manually solved.

It is for this reason we ask members to notify us of any problems they may still be having

Had to restore the website php files from backup last night as a lot of php files that were left with 604 privileges were hacked a 9:14AM and the eval(base64_decode"blahblahblahcode" was inserted.
It was easier to restore from a backup taken 12-15 after verifying all files were clean.
All the php files I could find have been set to 404 (read only).

The root directory had a subdir called evil. In it there is a css.php file that is nothing but the eval(base64 hack. Hopefully this is where the back door was for the hack.
This file has been set to 000 (no access).

Originally Posted by littleroundman

It's an ongoing and never ending process, Felipe.

Forums are prime targets for hackers and spammers, so the forum software and plugin developers are continually releasing upgrades as new exploits are detected, similar to the security updates Microsoft releases monthly for its' operating systems.

The main difference being, instead of patches, the developers release a whole new version, which requires the forum to be shutdown temporarily while it's installed and overwrites the previous version.

Even after the forum software is upgraded, there are always incompatibilities and small problems left behind which need to be manually solved.

It is for this reason we ask members to notify us of any problems they may still be having

It's good to know that admin cares about solving this issue.

Obviously not an easy process but a skilled staff can solve these things and detect it even before members start reporting it.

Originally Posted by Fgold

It's good to know that admin cares about solving this issue.

Obviously not an easy process but a skilled staff can solve these things and detect it even before members start reporting it.

Correct in your use of the word 'Staff'. None of us are Staff ... we don't get paid! If I was paid to look for problems 8 hours a day less problems would occur/arise!

Thanks for letting us know. Never a dull moment in scambusting land!

search warning.JPG

And sometimes get this message from Web of Trust software when click on search result for realscam.
Guess also being re-directed to various other not so desirable places.

Originally came across Realscam when a friend of mine (CPA in private practice) became suspicious of an 'investment' a client was involved in.
Asked if I could check it out.

Didn't take very long - it was Profitable Sunrise.
But in the process came across Realscam and asked him to simply have his clients check here first.
Very good , useful site, entertaining as well.

But many of his clients aren't very computer literate.
A redirect to Yahoo is 1 thing - a redirect to a potential dangerous site is something else.

Unfortunately will have to UN-recommend it for now.
Don't want to be responsible for sending someone to a site that can screw up their computer.

ps - a little reading here and guess this has been going on for a bit - months.

Anti-scam blogs and discussion sites are frequently targeted as the fraudsters are desperate to silence legitimate critics. We regularly update software and security. We will do everything possible to keep the site up and running and safe for our visitors. Please understand the site is owned by someone who supports our mission and run by volunteers. So, there will be kinks in the works now and then.

"Fake APP Attack, Fake AV Redirect 29" is what Norton just reported to me.
An attempted redirect to malware site 4pu.com.

I will be banging my head against it on Sunday GMT and I'm sure in the meantime other Admins are working on it.

In the meantime thanks for your patience, everyone!

Checked the php files and a lot were hacked and the line eval(base64_decode" excessively long code"
was injected. Removed all I could find and set the files to read, execute.
The redirects using IE or Firefox are fixed for now.

The files were updated without changing the date/time stamp which is annoying.

I have not been on much but have not had any problems. Have had to ditch Internet Explorer since using Win 8 and went to Chrome if that helps anyone. I am not 'into' apps but it looks to be the future of Windows. :(

Another redirect managed to infect the site. This one may be virulent, from the brief glimpse I had of the end site.

Originally Posted by FGOLD

I think that its not only me but a lot of visitors here also think that admins don't care enough to avoid and solve the issues and due to that fact many attackers will see this place as a good target... It seems that you're glad to be "a good bait for the hunters"

"I THINK"

"a lot of visitors also THINK"

"it SEEMS"

Yep, you're right, you don't "KNOW" anything, you only "THINK" you know what we do.

HINT: Microsoft spends millions of dollars and hundreds of millions of hours on security for its' Windows OS and yet, hackers and spammers STILL find new exploits on an almost daily basis.

We don't write the forum software. We rely on the software and addon providers to provide us with updated software and security fixes.

AND, we do it at no cost to our members so that they can continue to whinge, whine, complain and criticize to their hearts content.

Originally Posted by littleroundman

"I THINK"

"a lot of visitors also THINK"

"it SEEMS"

Yep, you're right, you don't "KNOW" anything, you only "THINK" you know what we do.

HINT: Microsoft spends millions of dollars and hundreds of millions of hours on security for its' Windows OS and yet, hackers and spammers STILL find new exploits on an almost daily basis.

We don't write the forum software. We rely on the software and addon providers to provide us with updated software and security fixes.

AND, we do it at no cost to our members so that they can continue to whinge, whine, complain and criticize to their hearts content.

Thats right its just what I think... I'm not an expert in that field but I guess that this error can be easily solved by yourself in your admin cp...

The juvenile offensive humour department is two doors down on the left, Felipe.

Enjoy

CYA

Originally Posted by littleroundman

The juvenile offensive humour department is two doors down on the left, Felipe.

Enjoy

CYA

What was offensive was the censorship of my old avatar. People who told bad things about my old avatar are those people who wear Cheguevara T-shirts and at same time are too much hypocrite to say that care a lot about peace and human rights...

Glad to see you guys & gals 'hanging in there'. I was surprised at the attitude of Fgold - thought that one was a good member at one time. Must have been thinking of someone else. Sorry I have not been around much lately, maybe with all the holidays past and a new year starting up, I will have more time to add my 2 cents worth.

Happy New Year!!

Thanks and I don't mean to be a pest but one reason I don't come here much is the fact that I do not receive any feeds from any of the threads I have requested to follow except the Romance thread by Ribshaw. To me that seems a simple thing to correct but maybe it involves much more than I can phantom and I don't want to cause the admins any problems as I know they are constantly having to fight off hackers and such. It was just nice to be able to be updated through feeds. Happy New Year everyone!

Thanks for the heads up. We will check it out!

Originally Posted by scratchycat

Thanks and I don't mean to be a pest but one reason I don't come here much is the fact that I do not receive any feeds from any of the threads I have requested to follow except the Romance thread by Ribshaw.

Originally Posted by Soapboxmom

Thanks for the heads up. We will check it out!

There’s a hole in my bucket, dear Liza, dear Liza! There’s a hole in my bucket, dear Liza, a hole!

Originally Posted by okosh

I did mention the email notification not working....That was in April and it;s still not been fixed....
http://www.realscam.com/f24/merged-a...html#post52830

I really wasn't that naughty so if I continue to be a good boy can it please be fixed soon??....

http://www.realscam.com/f24/merged-a...html#post63630