Jump to content
Sign in to follow this  
Rally Pack 2000

"New Post" Widget Hack

Recommended Posts

Since the latest upgrade it seems that spammers can somehow as Guests hack into out "Recent Post" Widget and deliver the usual crap spam about Porn, Viagra and there is even one in Spanish something about the Amazon in Ecuador. When you try click on it so I can see the full message or try identify the IP address it says I dont have permission. There is clearly a vulnerability there that needs to be closed.

WidgetHack.jpg.de5ef783f7417fa0b1f87fca8d0c0ea2.jpg

Share this post


Link to post
Share on other sites

I noticed this being worked on yesterday so im sure a fix is coming but just a note to say they are still slipping through.

SpamGlitch.jpg.5af716ca64fb1d5ac532fd4b3e91a1b7.jpg

Share this post


Link to post
Share on other sites

I need to raise this as a technical support ticket with the forum software providers. Can't do that just now as I am out and about. 

Share this post


Link to post
Share on other sites
On 10/03/2019 at 21:36, Vista said:

I need to raise this as a technical support ticket with the forum software providers. Can't do that just now as I am out and about. 

Its definitely a curious glitch. It seems to even catch innocent posts as well like this chap after some Mk1 square headlights. I cant access his post though as it says its not admissible. If we could find a way to get word to him that would be good.

WidgetHack2.jpg.f20eac76dc0f98f084a3f04b236f663b.jpg

Share this post


Link to post
Share on other sites

Hmmmmmm, looking at that it may be a setting somewhere that is allowing guests to post direct to the widget. 

The guy for the square headlights is in South Africa, he emailed me directly. Do you have a source of them then?

Share this post


Link to post
Share on other sites
2 hours ago, Vista said:

Hmmmmmm, looking at that it may be a setting somewhere that is allowing guests to post direct to the widget. 

The guy for the square headlights is in South Africa, he emailed me directly. Do you have a source of them then?

Yep, guests can create new posts without being signed in. These don't appear in the forum anywhere, but do appear in the widget. For now I will switch that widget off whilst I raise a Tech support query over it.

 

 

Share this post


Link to post
Share on other sites

OK, it turns out the new software update has a feature where guests can post before registering. The default setting? Yup, on! Now switched off, I'll put the widget back in place tomorrow. 

  • Like 1

Share this post


Link to post
Share on other sites
3 hours ago, Vista said:

Hmmmmmm, looking at that it may be a setting somewhere that is allowing guests to post direct to the widget. 

The guy for the square headlights is in South Africa, he emailed me directly. Do you have a source of them then?

No Im searching for a source as it seems Australia is going to be the best place to find some given all our Mk1s had square headlights. The trouble is that the looms vary so while I have a set of Lucas ones as spares my car takes Hella ones with H4 bulbs. I think most of the after market ones sold here will be the H4 type not the Lucas type. Thats if I can find any at all. Im looking for a stash sitting dusty on a shelf somewhere. Its good the guy emailed you directly as well so you can get him to sign up for answers.

53 minutes ago, Vista said:

Yep, guests can create new posts without being signed in. These don't appear in the forum anywhere, but do appear in the widget. For now I will switch that widget off whilst I raise a Tech support query over it.

 

 

 

23 minutes ago, Vista said:

OK, it turns out the new software update has a feature where guests can post before registering. The default setting? Yup, on! Now switched off, I'll put the widget back in place tomorrow. 

Result! I knew it was related to the update as thats when the porn messages started coming through but when a car post listed the same way I knew something odd was happening.

Dont you hate that, everything is switched on by default. This new computer has been driving me crazy with that. It was tough to find a modern SSD laptop that still used an older windows 7 operating system but the moment you plugged it into the net the default auto update tried to change it on me to windows 10. This computer also has default in its bios that keeps the USBs powered even after the thing is switched off. I would walk away from the computer and could hear all the external drives all still whirring away. Took me a day just to figure out how switch the default to off. (The instruction manual is on a CD rom but there isnt one in the laptop itself! Insane!)

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×
×
  • Create New...