TFF listed as attack site (yet again!) in firefox

[Merlin]

I don't remember if I got the most updated vB licensce info, but I can upgrade the forums to the latest update, etc once I do... which would include nuking all the files. That is unless you want to go ahead and do that now, since I won't have time to do it until Saturday.

And yes, I deleted all traces of vB exploits I found. I have backups of what they did on my computer. What they were doing didn't actually work, from what I could see, but even attempting it is good enough in my book to ban your ass.

[IRANianCha0s]

This is so lol...



Google: Here you go, use some of our proprietary Adsense advertisements to make money towards hosting your site!

TFF: HOKAY! (uses Adsense)

Google: OMFG The Final Fantasy: Exclusive Final Fantasy Coverage and Community IS NOW A REPORTED ATTACK SITE!!! NO ONE GO THERE LOL

TFF: :'(

IRANianCha0s:

[Merlin]

Is MySQL and Apache up-to-date, or is that what you are refering to? O.o

Also, why the hell is vB so vunerable to XSS all of a sudden... they are supposed to be filtering everything for that shit.

The only other thing I can think of is because you have the site and forums interconnected in a mishmash fashion, so someone is hijacking the DB through the site somehow. The DB has been steadily getting more and more buildup over the years from old hacks, whatever... plus all the crap running now. Last ditch effort might be to back-up the "useful" parts of the db, ie: only the fields that are used by vB 3.7.3 standard, and nuke the whole damned thing, DB, directory, everything. Reinstall everything from the ground up and only add the features we actually need. It'd be a big mess and the forums would be down a few days, but it might be worth looking into. I'd work on it, but I have no clue how to access the DB atm.