Sarah
05-16-2018, 08:51 PM
was dealing with a death in the family before that and wasn't entirely made aware of what was happening here so i apologize for not being able to resolve things earlier.

i'll post updates here as i fix things.

it looks like code was injected into one of the plugins, it's been removed, but i'm looking for other places code may have been modified.

---------- Post added at 01:51 PM ---------- Previous post was at 01:18 PM ----------

believe i found & removed the code that was both causing the redirects and displaying malware/spammy ads

let me know if you continue to have problems with either

the only thing that should be detected on the main page is google analytics; it's meant to be there and isn't malicious. if you see anything else appearing, let me know.

let me know what style you're using and what page (url) you're on when you have problems, it will make it easier to figure out the source of the issue

Salted
05-16-2018, 09:00 PM
Seems to be fixed now, and is loading faster, especially in private messages. Thanks for the help. Mobile is not experiencing trouble either.

KusanagiShiro
05-16-2018, 09:12 PM
Old-school style and redirects are still happening!

Sarah
05-16-2018, 09:17 PM
could you upload a saved version of the page it's appearing on? need to look at the html to help figure out where it's coming from

Salted
05-16-2018, 09:22 PM
Ah wait, it's back

---------- Post added at 02:21 PM ---------- Previous post was at 02:20 PM ----------

Here's the main page html

https://hastebin.com/omapekohon.xml

---------- Post added at 02:22 PM ---------- Previous post was at 02:21 PM ----------

The redirect seems to happen after the page has finished loading, if that helps any

---------- Post added at 02:22 PM ---------- Previous post was at 02:22 PM ----------

Line 2792

******** src="http://horoskopishqip.org/blog/haxored.php" width="728" height="90" frameBorder="0" scrolling="no" seamless="seamless"></iframe>

KusanagiShiro
05-16-2018, 09:23 PM
Sarah it’s literally any page on the forums for me. Both on phone and laptop. Confirmed on LTE too

---------- Post added at 01:23 PM ---------- Previous post was at 01:22 PM ----------

Page redirects to http://horoskopishqip.org/blog/haxored.php

Salted
05-16-2018, 09:24 PM
Yeah, there's an iframe of that on the main page near the bottom

Sarah
05-16-2018, 09:41 PM
found & removed that iframe, anything still showing up for you?

Salted
05-16-2018, 09:45 PM
Nothing at the moment. Sometimes, logging in would show an invalid redirect URL, but would still log you in, but I have not experienced that since the spam was removed.

MartyMcflies
05-16-2018, 11:41 PM
Thank you for fixing this.

Not sure if this has been addressed yet but what was with that fake copy of FFShrine that was posted on another thread?

Salted
05-17-2018, 12:23 AM
Thank you for fixing this.

Not sure if this has been addressed yet but what was with that fake copy of FFShrine that was posted on another thread?

Can you post the link?

Mike1959
05-17-2018, 01:04 AM
Firstly, Sincere condolences on the death of a family member :(


I think this maybe the link I saw yesterday...I added it to uBlock filters.

http://www.slayingwave.com/

MartyMcflies
05-17-2018, 03:04 AM
I'm curious, how did you even find that in the first place?

Mike1959
05-17-2018, 05:06 AM
I saw it posted yesterday in another thread if it's my message you're referring to ?
it's still up and running in real-time.

Thread 223907

MartyMcflies
05-17-2018, 05:37 AM
I saw it posted yesterday in another thread if it's my message you're referring to ?
it's still up and running in real-time.

Thread 223907

Oops, I thought you were the one who originally posted that website to begin with, not that "Lockdown" user lol.