Overunity.com Archives is Temporarily on Read Mode Only!



Free Energy will change the World - Free Energy will stop Climate Change - Free Energy will give us hope
and we will not surrender until free energy will be enabled all over the world, to power planes, cars, ships and trains.
Free energy will help the poor to become independent of needing expensive fuels.
So all in all Free energy will bring far more peace to the world than any other invention has already brought to the world.
Those beautiful words were written by Stefan Hartmann/Owner/Admin at overunity.com
Unfortunately now, Stefan Hartmann is very ill and He needs our help
Stefan wanted that I have all these massive data to get it back online
even being as ill as Stefan is, he transferred all databases and folders
that without his help, this Forum Archives would have never been published here
so, please, as the Webmaster and Creator of this Forum, I am asking that you help him
by making a donation on the Paypal Button above
Thanks to ALL for your help!!


Explicit content site opens when I enter overunity.com

Started by Fred Flintstone, May 09, 2009, 04:43:32 PM

Previous topic - Next topic

0 Members and 2 Guests are viewing this topic.

AquariuZ

As far as I can tell it is OK now...

Remove all cookies from russian domains (.ru)

Some have session ID´s pointing to those skin sites

No more popups for now...

I still think a SMF template file compare with a backup to find any modification should be done

find with diff > check

If .htaccess was comprimised them may have laid their hands on the templates

BEP

The problem does not appear as related to browser cache and cookies.

I just used a laptop that hasn't ran in months to access this site. Seconds after entering the OU URL the .RU garbage popped up in a new window.

Harti

You may also wish to check httpd.conf or any includes. If they modified your ht-access they may have inserted redirects in conf files.

If this is not the case then my problem must be in the upstream cache system.

I just looked at the main page source. There is no .ru or other identifiers that I know of.

hartiberlin

Quote from: AquariuZ on May 10, 2009, 08:15:49 PM
As far as I can tell it is OK now...

Remove all cookies from russian domains (.ru)


Cookies are just only stored in your browser,
so the user has to clear his cookies in the browser.

Quote
Some have session ID´s pointing to those skin sites


What are session IDs in cookies ?

Do they call up automatically the sites ?

Quote
No more popups for now...

I still think a SMF template file compare with a backup to find any modification should be done

find with diff > check

If .htaccess was comprimised them may have laid their hands on the templates

How could they access the template files if they just managed to use
an older script that just updated the .htaccess file ?

They probably used the spider-trap script to somehow
add their code into the .htaccess file.

The spider-trap script is now disabled,
so I am looking for a different website firewall script now.

I don´t think they had FTP access, otherwise they would have been doing
much more nasty things..
Stefan Hartmann, Moderator of the overunity.com forum

WilbyInebriated

There is no news. There's the truth of the signal. What I see. And, there's the puppet theater...
the Parliament jesters foist on the somnambulant public.  - Mr. Universe

WilbyInebriated

There is no news. There's the truth of the signal. What I see. And, there's the puppet theater...
the Parliament jesters foist on the somnambulant public.  - Mr. Universe