XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Modules Support forums / 
  3. Module troubleshooting 
  4.  / Problem with Liase 1.27
Register
1
chefry
Problem with Liase 1.27

  • 2011/1/4 6:56

  • chefry

  • Home away from home

  • Posts: 1005

  • Since: 2006/10/14


I've got Liase 1.27 running as a contact form, registration form, and site feedback form on a Xoops 2.3 website.

The problem is about 4 months ago I started getting a LOT of spam through the contact form advertising pills, etc.

So, I disabled liase, and reported the spammer to the company hosting their free email account.

Now they've moved to something else called webjam.com and are using an email address from cvportal.net.

The problem though is that even though I have disabled the module, and hidden it (set to zero) I'm still getting spam. Over 300 in December alone

Any idea how they're still sending me spam through a disabled module???

TIA
Frank
2
ghia
Re: Problem with Liase 1.27

  • 2011/1/4 9:33

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


Check the apache logs to see which files they access.
Remove also the PHP files of the uninstalled module.
3
redheadedrod
Re: Problem with Liase 1.27

ghia, he disabled not uninstalled...

Before deleting the php files you should uninstall the program.

This will delete the tables added by the module etc.

When you disable the module all this does is tells Xoops not to use it but you can still access it directly. Sounds like this spammer is using a bot of some sort to get into that module. Which means anyone with that module is vulnerable to that spammer until some sort of verification requirement is added.

4
chefry
Re: Problem with Liase 1.27

  • 2011/1/4 15:23

  • chefry

  • Home away from home

  • Posts: 1005

  • Since: 2006/10/14


Liase has it's own version of captcha which obviously doesn't work
5
redheadedrod
Re: Problem with Liase 1.27

Without looking at the code I am guessing that there is a way to bypass the normal entry code and go to save the data directly.

Unless they have figured out a way to defeat it.

Rodney

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

235 user(s) are online (175 user(s) are browsing Support Forums)

Members: 0

Guests: 235

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Apr 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits