Guest Book Hijack?

[Russ]

Hi - I apologize in advance if this is a basic question.

 

For various reasons it has been a long time since I checked in on my Guest Book. I did so today, and it appears to have been hijacked! A mictrsoft dialogue box pops up saying something about defacement and lists an email address I have never heard of. Then the page is redirected to some page dealing with defacements and computer crimes!

 

Can someone explain to me what has happened? How to fix and how to prevent a reoccurance? To see what I mean, click on the link below to my home page and then scroll down and click on guest book.

 

Thanks in advance for any help.

 

Russ

 

My Home Page

[TCH-Thomas]

Hi,

It looks like you are using Adv. Guestbook 2.2 while the current version is 2.3.2 so first of all, so I strongly suggest that you update it immediately (The latest can be found here). Secondly use strong passwords.

Third, you can be alerted about updates by subscribing to the Software/Scripts/other alerts forum.

[Russ]

Thank you, Thomas. What exactly happened? I am curious and ignorant (dangerous combination )

 

Russ

[TCH-Thomas]

The earlier version the more vulnerable, so that in combination with perhaps a not strong password can make it easy for the bad guys to break in.

 

What exactly happened in your case I can´t tell. Sorry.

[Russ]

I had very little traffic on that guest book (that was the reason I didn't frequest it often). Can I just deleteit from my site, upgrade and start over?

 

Thanks, again.

[TCH-Thomas]

Unless you want to save the entries it should be no problem.

How to save the entries is something I will have to let someone else answer because I have never done that myself.

[Russ]

No, I don't need to save anything.

 

One last question, if you don't mind. What do you mean by a "strong password?"

 

Thanks you.

[TCH-Thomas]

Example strong:

8*%6KdyR

 

Example bad:

lifeisnice (and other passwords where you find dictionary words)

[TCH-Thomas]

And don´t forget to let us know how the installation of the new guestbook went.

[TCH-Don]

Russ if you are stating over

you may want to look at Viper Guestbook

you can have moderated entries to help avoid guestbook spammer.

[TCH-Rob]

If you stay with Advanced Guestbook, you might want to look in to an image verification or the like as it will keep down the auto spam. I have set it up on mine and have not gotten ANY spam with my Advanced Guestbook.