vBulletin 4.2.5 is end of life and will not be receiving any future development. Warning: vBulletin 4.2.5 is not compatible with PHP 7.2.0 or higher.
Welcome to the vBulletin support forums! In our community forums you can receive professional support and assistance with any issues you might have with your vBulletin Products.
If you are having problems posting in the relevant areas for your software, please see this topic.
Upgrade to vBulletin 5
We're pleased to announce a special promotion for upgrading your vBulletin 3/4 sites to vBulletin 5. From now until December 31st, we are offering vBulletin 5 license upgrades at $169 each. This promotion is available to all vBulletin 3 (owned) and vBulletin 4 license holders, entitling you to the latest version of vBulletin 5.
If you would like to purchase this upgrade, please log into the vBulletin Members Area and use Promo Code: vB5UPGRADE during checkout to apply the discount.
I'm trying to piece this together, but my site is no longer loading...
I am running 4.2.
No changes have been made to the site in months... although a lot of my files now say modified 12/17 at 2:09 AM. No one did anything though.
The error: PHP Fatal error: Cannot redeclare fi() (previously declared in /home/<user>/public_html/forum/showthread.php(1) : eval()'d code(2) : eval()'d code(1) : eval()'d code:1) in /home/<user>/public_html/forum/global.php(1) : eval()'d code(2) : eval()'d code(1) : eval()'d code on line 1
I don't even know where to go with this. Any assistance would be helpful.
If the files were modified and you didn't do it you should contact your host to see if they have an explanation- this would be a serious issue if someone unathorized has access to your files.
I would re-upload a fresh set of the the vBulletin files- download the exact version you are using from the Member's Area and re-upload all file like you were doing an upgrade, except do not upload the /install/ directory- it should not exist on your server either.
Another person with the same issue reports restoring a fresh set of vBulletin files fixed the issue for him.
Without more info it is hard to know if you were hacked or something else happened- but I would follow the instructions to clean up and secure your sites-
uploading all the files did the trick for me. Still have no idea what caused the problem, but will assume someone hacked the site, until proven otherwise.
On a related note, does the base install of vB include Panjo? If not, someone installed it on our site. That was the only unwanted product/plug-in I found.
uploading all the files did the trick for me. Still have no idea what caused the problem, but will assume someone hacked the site, until proven otherwise.
On a related note, does the base install of vB include Panjo? If not, someone installed it on our site. That was the only unwanted product/plug-in I found.
-Steve
We don't use Panjo because we are suspicious of it; that's partly because we tried Vertical Response when it first got integrated into vBulletin before finally giving up on it and using MailChimp instead (MailChimp is much better in our experience). My suspicion is that integrating Panjo would result in you building Panjo's business rather than your own business. If you wanted to add classifieds I think dBTech have a mod that does this.
To the best of my knowledge the only way Panjo can be installed is if it is set to "enable" in AdminCP, Plugins and Products, Manage Products, Installed Products. So the base install of vB must include Panjo or you wouldn't just be able to enable it.
Yes you were likely hacked, The other customer found multiple rouge plugins in his Plugin Manager, at the top, under the vBulletin Product listing. By default vBulletin doesn't have any plugins for the vBulletin Product, if you have any they should be ones you manually added yourself. Check the code of all plugins and delete any you didn't create.
The other customer also found a fake bank website uploaded to his store_sitemap folder - You should go to Admin CP -> Maintiance -> Diagnostics -> Suspect File Check and delete any suspect files you cannot account for as being from a modification you authorized.
Our site went down again last night, so I apparently missed something in the clean-up process. I'm guessing it's a rogue/corrupted plug-in, since I re-loaded all the vB files, changed passwords, etc.
I had to completely move servers. Everything is trash. My site was sending DDOS attacks to anyone that went to the site, and the all the files has Trojans.
There are four steps to securing your site. If you don't do them all or you do them in the wrong order than you're still susceptible to being attacked again.
Close the hole... This has three subparts in this instance.
Delete your install folder
Review your admin users and delete any that don't belong. Don't ban them. Don't make them regular users. Delete them.
Close access to your AdminCP using .htaccess. Use either user authorization with a different username and password or IP address restrictions.
Fill the Hole... There are seven subparts in this instance.
Review your files for changes. You can do this under Maintenance -> Diagnostics.
Delete any Suspect Files.
Replace any files marked as "Does not contain expected contents"
Scan your plugins for malicious code (exec, base64, system, pass_thru, iframe are all suspect keywords). Delete any you find.
Repair any templates. Any templates that you don't have notes on changing, you need to revert. If you're using a custom style, it is best to delete your existing style and reimport from a fresh download.
Update your Addon Products.
Rebuild your datastores. You can use tools.php in the "do not upload" folder to do this. Upload it to your admincp directory, delete when done.
Secure the Hole
Parts of this were done by closing the hole but there are still things to do here.
Keep notes of all changes you make to the system - what templates and phrases you change, what files belong to which addons, what plugins do the addons install.
Consider using a separate Super Admin who has access to admin logs in the AdminCP. There should be only one Super Admin.
Create a lower permission Administrator for every day use.
Review your permissions in the system.
Block off access to the includes, modcp, packages and vb folders via .htaccess. Deny All can work here, unless you use the ModCP. You need user authorization there.
Move your attachments outside the forum root directory.
Create a complete backup of your site. Make database backups weekly.
Vigilance
You need to keep active on the security of the site.
Give out the fewest permissions necessary for anyone to do their job
Make sure your hosting provider updates the software.
Update to the latest vBulletin when it is released.
Make sure your addons are always up to date.
Translations provided by Google. Wayne Luke The Rabid Badger - a vBulletin Cloud demonstration site.
vBulletin 5 API - Full / Mobile
Vote for your favorite feature requests and the bugs you want to see fixed.
We don't use Panjo because we are suspicious of it; that's partly because we tried Vertical Response when it first got integrated into vBulletin before finally giving up on it and using MailChimp instead (MailChimp is much better in our experience). My suspicion is that integrating Panjo would result in you building Panjo's business rather than your own business.
Yes, certainly by using Panjo you would build the Panjo business. But... by using MailChimp, don't you build the MailChimp business? :-) Panjo is the in the business of helping improve the experience and security for buyers and sellers in forums. Panjo helps forum owners generate revenue and reduce the administrative burden of maintaining a vibrant marketplace. Through our mobile app, web site, and social media outlets, we work to drive traffic to our partners. You can check out Panjo's new iOS app and browse forum classifieds on an iPhone, iPad, or iPod.
My members and I are getting a cannot access the site error. (not found)
It's intermittent, but there more than not
I noticed it today but now the complaints are rolling in...
Fri 19th Oct '18, 10:36am
Working...
X
We process personal data about users of our site, through the use of cookies and other technologies, to deliver our services, personalize advertising, and to analyze site activity. We may share certain information about our users with our advertising and analytics partners. For additional details, refer to our Privacy Policy.
By clicking "I AGREE" below, you agree to our Privacy Policy and our personal data processing and cookie practices as described therein. You also consent to the transfer of your data to our servers in the United States, where data protection laws may be different from those in your country.
Comment