View Poll Results: Blue fonts
Hate them
32
84.21%
Like them
4
10.53%
I'm color blind so it doesn't matter
2
5.26%
Voters: 38. You may not vote on this poll

Where are the sub forums????

Thread Tools
 
Search this Thread
 
Old 09-18-2014, 11:36 AM
  #161  
Senior Moderator
iTrader: (5)
 
juniorbean's Avatar
 
Join Date: Oct 2000
Location: The QC
Posts: 28,461
Received 1,760 Likes on 1,046 Posts
Originally Posted by imj0257
wtf
I got that too
Old 09-18-2014, 11:45 AM
  #162  
Senior Moderator
Regional Coordinator
(Mid-Atlantic)
iTrader: (6)
 
97BlackAckCL's Avatar
 
Join Date: Jan 2005
Location: ShitsBurgh
Age: 42
Posts: 92,121
Received 4,414 Likes on 3,024 Posts
Originally Posted by imj0257
wtf
Old 09-18-2014, 12:27 PM
  #163  
Administrator
 
Ron A's Avatar
 
Join Date: Feb 2004
Posts: 16,327
Received 1,002 Likes on 572 Posts
Originally Posted by 97BlackAckCL
Well, deleting anachostic's posts fixed the vulnerability popup at least
Not for me. The pop up doesn't appear when I open page 1 or 2 (I have 55 posts per page set) but when I open page 3 which starts at post #111, it appears. WTF?

I even tried deleting the link from the deleted post but that didn't help.
Old 09-18-2014, 12:32 PM
  #164  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
Lolz
Old 09-18-2014, 12:34 PM
  #165  
Administrator
 
Ron A's Avatar
 
Join Date: Feb 2004
Posts: 16,327
Received 1,002 Likes on 572 Posts
Am I missing something here?
Old 09-18-2014, 12:47 PM
  #166  
Q('.')=O
iTrader: (1)
 
imj0257's Avatar
 
Join Date: Feb 2008
Location: DFW, TX
Age: 40
Posts: 23,508
Received 720 Likes on 520 Posts
I just went through all the pages. I get no pop ups on pages 1,2,3,5 but on page 4 I still get the 'No security breaches here, boss' pop up.

Old 09-18-2014, 12:49 PM
  #167  
Moderator
Regional Coordinator (Southeast)
 
CCColtsicehockey's Avatar
 
Join Date: Dec 2003
Location: Mooresville, NC
Age: 37
Posts: 43,475
Received 3,664 Likes on 2,495 Posts
Is it possible however he inserted it made it a permanent change within the page itself?
Old 09-18-2014, 12:56 PM
  #168  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
No. Posts are just db entries not pages.

Edit: Unless they use some kind of static cache system like Super or W3C. But judging by the load times around here that can't be the case.

Last edited by maharajamd; 09-18-2014 at 01:03 PM.
Old 09-18-2014, 02:05 PM
  #169  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
I would like to know exactly how this was done.

This could be really useful in other threads..

muhaha

muhahahahahahahahahahahahahaa
Old 09-18-2014, 02:19 PM
  #170  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
It just looks like a javascript injection.

script :alert("No security breaches here, boss.") /script
It could either be that simple or there could be a malicious plugin installed. Check them. Probably something along the lines of "vb_hook" or something dumb like that.

Make sure vbcode is allowed but scripting and HTML is turned off for posts.
Old 09-18-2014, 02:20 PM
  #171  
Administrator
 
Ron A's Avatar
 
Join Date: Feb 2004
Posts: 16,327
Received 1,002 Likes on 572 Posts
Originally Posted by Ron A
Not for me. The pop up doesn't appear when I open page 1 or 2 (I have 55 posts per page set) but when I open page 3 which starts at post #111, it appears. WTF?

I even tried deleting the link from the deleted post but that didn't help.
I'm into page 4 now, starting with post #166, and so far only page 3 gives me the popup but I don't see anything that would cause it just for one page.
Old 09-18-2014, 02:32 PM
  #172  
Administrator
 
Ron A's Avatar
 
Join Date: Feb 2004
Posts: 16,327
Received 1,002 Likes on 572 Posts

I got this in the Black Market.

Robb (astro) is having a lot of fun at our expense.

I'll get even with him when I delete all his PM's and threads.
Old 09-18-2014, 02:34 PM
  #173  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
lol!

Change his AV to:

Old 09-18-2014, 02:37 PM
  #174  
Administrator
 
Ron A's Avatar
 
Join Date: Feb 2004
Posts: 16,327
Received 1,002 Likes on 572 Posts
I got this reply from IB confirming that IB owns VB and giving us some hope of getting underlining just in posts.

vBulletin is owned by Internet Brands, so if there is a way for us to adjust the links within posts and PMs only, our tech guys should be able to figure it out. The team's currently taking a look to see if there's any sort of workaround they can use for AcuraZine's version of vBulletin (3.8.7).

If the underlining works, it should also prevent any future confusion caused by forum links displaying as their thread titles. I'll let you know as soon as I hear anything.
Old 09-18-2014, 02:39 PM
  #175  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
Ron, that wasn't astro, that was me.

From the looks of it I could probably do a lot more with the open js injections.

It should, however, only be on this page (or whatever page you post the injection in).

The alert will bring you to this pages open tab even if you are on another page in another tab.
Old 09-18-2014, 02:41 PM
  #176  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
Originally Posted by maharajamd
Ron, that wasn't astro, that was me.

From the looks of it I could probably do a lot more with the open js injections.

It should, however, only be on this page (or whatever page you post the injection in).

The alert will bring you to this pages open tab even if you are on another page in another tab.
Shhhhhhhhhhhh!!!!!
Old 09-18-2014, 02:44 PM
  #177  
Senior Moderator
 
oo7spy's Avatar
 
Join Date: Dec 2010
Location: Austin, TX
Posts: 31,897
Received 7,244 Likes on 4,855 Posts
indeed.



, Chad. See you in a week.
Old 09-18-2014, 02:46 PM
  #178  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
Yea, helping out gets me banned. That'll work.

If anything I should be made mod as apparently no one around here knows what they are doing.

Edit: And to think this is the first time this has ever come up before...scary.
Old 09-18-2014, 02:52 PM
  #179  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
There you go...a simple flip of the switch to turn off scripting.

Now it parses as text instead of a js script.

Edit: Sexy title...thanks. I'm like contraband now.

Last edited by maharajamd; 09-18-2014 at 02:56 PM.
Old 09-18-2014, 02:57 PM
  #180  
Administrator
 
Ron A's Avatar
 
Join Date: Feb 2004
Posts: 16,327
Received 1,002 Likes on 572 Posts
It is fixed, but we had to bother robb who might have already bothered IB, but he found the problem and fixed it so alls well that ends well.

I admire your skills but don't admire letting this go on for so long.

If you were really banned you wouldn't be posting anything.
Old 09-18-2014, 03:00 PM
  #181  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
Originally Posted by Ron A
It is fixed, but we had to bother robb who might have already bothered IB, but he found the problem and fixed it so alls well that ends well.

I admire your skills but don't admire letting this go on for so long.

If you were really banned you wouldn't be posting anything.
What? I didn't maliciously do this in the first place, Anachostic did. I just pointed out what it was. Why on earth would I even remotely be considered to be banned?

Maybe I'm just reading your post out of context or something.
Old 09-18-2014, 03:01 PM
  #182  
Community Architect
robb m.
 
astro's Avatar
 
Join Date: Jan 2000
Location: ON
Age: 47
Posts: 72,793
Received 626 Likes on 277 Posts
go wash the sand out of your vagina, will ya?
Old 09-18-2014, 03:04 PM
  #183  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
So confused now...
Old 09-18-2014, 03:05 PM
  #184  
Q('.')=O
iTrader: (1)
 
imj0257's Avatar
 
Join Date: Feb 2008
Location: DFW, TX
Age: 40
Posts: 23,508
Received 720 Likes on 520 Posts


?
Old 09-18-2014, 03:17 PM
  #185  
Moderator
iTrader: (1)
 
justnspace's Avatar
 
Join Date: Feb 2010
Posts: 86,295
Received 16,260 Likes on 11,971 Posts
wtf mate?
Old 09-18-2014, 03:20 PM
  #186  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
Yea I dunno... Lol
Old 09-18-2014, 03:21 PM
  #187  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
Old 09-18-2014, 03:22 PM
  #188  
Moderator
iTrader: (1)
 
justnspace's Avatar
 
Join Date: Feb 2010
Posts: 86,295
Received 16,260 Likes on 11,971 Posts
im giving out free hugs today.

Old 09-18-2014, 08:55 PM
  #189  
Administrator
 
Ron A's Avatar
 
Join Date: Feb 2004
Posts: 16,327
Received 1,002 Likes on 572 Posts
Good news. We now have underlined text in posts. Couldn't do it for PM's.

Originally Posted by PM from IB
Hi Ron,

Good news! After toying with the site's templates, our tech team was able to implement a fix that adds an underline to all links in posts. It unfortunately won't work in PMs due to how HTML tagging is set up in vBulletin, but it addresses the vast majority of links users will see. The underlines are now live, so please me know what you think.
https://acurazine.com/forums/ramblin.../#post15166032

They won't show up in previews, only when submitted.
Old 09-18-2014, 11:06 PM
  #190  
Sanest Florida Man
 
#1 STUNNA's Avatar
 
Join Date: Aug 2007
Location: Florida
Posts: 43,382
Received 10,120 Likes on 6,108 Posts


I read your post in this voice

Old 09-19-2014, 06:05 AM
  #191  
Team Owner
 
svtmike's Avatar
 
Join Date: Oct 2003
Location: Chicago
Age: 59
Posts: 37,663
Received 3,863 Likes on 2,030 Posts


Looks good.
Old 09-19-2014, 07:42 AM
  #192  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
.postcontent inner a:link {}
.privatemessage inner a:link{}

Add different link options if you want. Wrap the content (page.tpl) with a new class to make it more specific if you want.

Shouldn't have been hard for them. And PMs shouldn't be hard either...

Anyway, it looks good now.
Old 09-19-2014, 11:33 AM
  #193  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
Old 09-19-2014, 12:12 PM
  #194  
Banned
 
CocheseUGA's Avatar
 
Join Date: Mar 2009
Location: Kennesaw, GA
Age: 44
Posts: 18,761
Received 960 Likes on 593 Posts
Old 09-19-2014, 12:16 PM
  #195  
Senior Moderator
Regional Coordinator
(Mid-Atlantic)
iTrader: (6)
 
97BlackAckCL's Avatar
 
Join Date: Jan 2005
Location: ShitsBurgh
Age: 42
Posts: 92,121
Received 4,414 Likes on 3,024 Posts
Originally Posted by Ron A

I got this in the Black Market.

Robb (astro) is having a lot of fun at our expense.

I'll get even with him when I delete all his PM's and threads.
Old 09-19-2014, 12:17 PM
  #196  
Moderator
iTrader: (1)
 
justnspace's Avatar
 
Join Date: Feb 2010
Posts: 86,295
Received 16,260 Likes on 11,971 Posts
chad wasnt banned
Old 09-19-2014, 12:19 PM
  #197  
Race Director
iTrader: (1)
 
maharajamd's Avatar
 
Join Date: Jan 2008
Location: Columbus, OH
Posts: 13,382
Received 1,544 Likes on 1,197 Posts
I'm just waiting for the right time Justin.
Old 09-23-2014, 11:28 AM
  #198  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
Whoa!

New picture insert dialogue for the forum!
Old 09-23-2014, 11:40 AM
  #199  
Senior Moderator
Regional Coordinator
(Mid-Atlantic)
iTrader: (6)
 
97BlackAckCL's Avatar
 
Join Date: Jan 2005
Location: ShitsBurgh
Age: 42
Posts: 92,121
Received 4,414 Likes on 3,024 Posts
hate it
Old 09-23-2014, 11:41 AM
  #200  
Needs more Lemon Pledge
 
stogie1020's Avatar
 
Join Date: Mar 2005
Location: Phoenix, AZ
Age: 51
Posts: 52,768
Received 2,000 Likes on 1,173 Posts
It adds the ability to upload images directly from the local machine, as opposed to prior needing to host the image.


Quick Reply: Where are the sub forums????



All times are GMT -5. The time now is 07:54 PM.