Advanced Guestbook And Html

[TCH-Rob]

Last night I was working a ticket that looked like the clients Advanced Guestbook had been hacked. They were running the latest version and I wasn’t aware of any specific bugs in the program. What I found was that if you allow HTML to be posted in your guestbook that a user can insert enough code to make it look as if your page has been defaced and even allow it to redirect your page to another site. Make sure you turn off HTML for your guestbook.

 

Should you ever notice this happen to you, just go to your phpMyAdmin, open the table that keeps your comments and delete the offending entry and your guestbook should be back to normal.