Author Topic: Weird forumbehavior and spam  (Read 3361 times)

Offline yatagarasu

  • Roaming Philantropist
  • Page
  • *
  • Posts: 9
Weird forumbehavior and spam
« on: December 27, 2012, 11:06:39 AM »
A few days ago, I discovered a new "admin" on my forum. I was quite surprised because I don't remember sending administrator rights to anyone. The new admin was a fresh registered new member. Now, I've relocated the member to the right member group. And I've upgraded my forum version and did an extra safety precaution. All things considered, there could have been real damage.

I still wonder which exploit would be responsible so that a new member can get in as an administrator ?  :o

Offline NeeNee

  • Administrator
  • Senior First Class
  • *****
  • Posts: 5111
Re: Weird forumbehavior and spam
« Reply #1 on: December 28, 2012, 05:47:29 AM »
I haven't encountered that problem yet, thankfully. It sounds pretty weird (and scary). ???

What did you do as a precaution?

Offline yatagarasu

  • Roaming Philantropist
  • Page
  • *
  • Posts: 9
Re: Weird forumbehavior and spam
« Reply #2 on: December 28, 2012, 06:39:39 PM »
I've changed the name of my adminCP folder to something else and adjusted it also in the  inc/config.php to the desired new name. And I hid my admincp link that's normally visible if you login to your administrator account. And I've made a backup of the forum database, and a backup of all directories of my forum via FTP. So if someone would break into my account, they shouldn't be able to find my control panel.

Offline NeeNee

  • Administrator
  • Senior First Class
  • *****
  • Posts: 5111
Re: Weird forumbehavior and spam
« Reply #3 on: December 28, 2012, 11:55:08 PM »
Heh. I don't even know how to do that. ^^'

I should probably look into some safety measures too. Though they do say that MyBB and its variants are more prone to viruses and the like, because it's the most common forum software out there.
 

Offline NeeNee

  • Administrator
  • Senior First Class
  • *****
  • Posts: 5111
Re: Weird forumbehavior and spam
« Reply #4 on: December 30, 2012, 06:04:26 PM »
I'm getting another strange issue here: ghost members. The statictics say that someone signed up today, but no names had been added to the memberlist. And it's not the first time this happens, either.

According to my settings, it shouldn't be possible for members to delete their own account...

Offline Paradox

  • Intermediate Second Class
  • ***
  • Posts: 750
  • "Despite everything, it's still you."
Re: Weird forumbehavior and spam
« Reply #5 on: December 30, 2012, 07:30:51 PM »
And two guests with "Unknown Action" right now. How is it possible?

Yatagarasu's problem sounds weird as well, but I can't help either.
« Last Edit: December 30, 2012, 07:33:14 PM by Paradox »

Offline yatagarasu

  • Roaming Philantropist
  • Page
  • *
  • Posts: 9
Re: Weird forumbehavior and spam
« Reply #6 on: December 30, 2012, 11:52:06 PM »
Maybe your ghost members are search engine bots (this type is harmless), some fora allow that engines can sign in. When they are active on my forum, they show up as google and the chinese counterpart. And those unknown action are sometimes bots who try to index a certain page/file in a restricted directory. I don't know spammers that sign in and sign out again without leaving an account or something else.
« Last Edit: December 31, 2012, 02:42:15 AM by yatagarasu »

Offline NeeNee

  • Administrator
  • Senior First Class
  • *****
  • Posts: 5111
Re: Weird forumbehavior and spam
« Reply #7 on: December 30, 2012, 11:56:19 PM »
And two guests with "Unknown Action" right now. How is it possible?

Unknown action isn't so weird, I see it over at ASN all the time. It probably just means that they are doing something that isn't specifically listed.


Maybe your ghost members are search engine bots (this type is harmless), some fora allow that engines can sign in. When they are active on my forum, they show up as google en the chinese counterpart. And those unknown action are sometimes bots who try to index a certain page/file in a restricted directory. I don't know spammers that sign in and sign out again without leaving an account or something else.

I hope so.

Offline yatagarasu

  • Roaming Philantropist
  • Page
  • *
  • Posts: 9
Re: Weird forumbehavior and spam
« Reply #8 on: December 30, 2012, 11:59:33 PM »
Though they do say that MyBB and its variants are more prone to viruses and the like, because it's the most common forum software out there.

Didn't know that Mybb was a common used forum software. I compared the software packets when I chose mine. I chose Mybb because it's free and there are many plugins available. I installed many themes on mine but I'm still not sure which theme appeals the most for my forum. Did you test them already ?

Offline NeeNee

  • Administrator
  • Senior First Class
  • *****
  • Posts: 5111
Re: Weird forumbehavior and spam
« Reply #9 on: December 31, 2012, 12:40:36 AM »
Didn't know that Mybb was a common used forum software. I compared the software packets when I chose mine. I chose Mybb because it's free and there are many plugins available. I installed many themes on mine but I'm still not sure which theme appeals the most for my forum. Did you test them already ?

I'm probably mistaken, the reviews I was thinking of were talking about phpBB. I thought MyBB was a newer version of that, but that's obviously not the case.
http://www.webhostingshow.com/2010/04/02/comparing-the-best-free-forum-scripts/
http://www.techsupportalert.com/best-free-website-forum-software.htm

I prefered SMF from the beginning, both because I like its functionality better than phpBB and because I'm used to it from being a mod on ASN, so when I saw it was consistently in the top 3, I didn't hesitate. As for the themes, I went throught the entire collection, tried about 20-30 of them (most were immediately discarded due to defects), and then kept the one I liked most with the second and third as alternate choices for users who prefer to pick another theme for themselves. I might be adding more options if people ask, but I probaly won't be changing the main theme anytime soon, because I really like it. :) (It would be even better thought if the blue curls had the shape of Blue Exorcist flames. If there's anyone who can do that...)

EDIT:
Well, whadda you know. Now a new member showed up in the list, but not in the stats. Apparently there's a bit of a delay (probably until they have confirmed their registration).

Offline yatagarasu

  • Roaming Philantropist
  • Page
  • *
  • Posts: 9
Re: Weird forumbehavior and spam
« Reply #10 on: December 31, 2012, 01:20:21 AM »

http://www.techsupportalert.com/best-free-website-forum-software.htm

8)
I've did a bit of data mining in this link and I found this.

Quote
MyBB
If SMF doesn't do it for you, try out MyBB. This free forum is much younger than SMF so expect some development work before it is 100% smooth. There is a lot of positive feedback for this app though, so if there is anything you don't like about SMF then MyBB is the one to look at next.

I had a super idea today when I was experimenting with my forum. I've managed to put hyper links in my forum title !!!

It's now like this.

Main site link: | On Facebook | On Twitter | Animetoplay Forum
« Last Edit: December 31, 2012, 02:47:46 AM by yatagarasu »

Offline Cherub

  • Junior Second Class
  • **
  • Posts: 149
Re: Weird forumbehavior and spam
« Reply #11 on: October 17, 2017, 10:24:45 AM »
Ugh good lord! I know nothing's about making and protecting sites, but the bots and spams just keep getting weird. So out of curiousity how are they getting in.