Snarkpit Forum Index » General Banter » I found something in snarkpit's code
I found something in snarkpit's code
1
Post Reply
Quote
 Re: I found something in snarkpit's code
Posted by Le Chief on Tue Jun 17th at 4:41am 2008

Err, for some random reason there is porn embedded inside the snarkpit code. On firefox, open up any web page and go tools>page info. Go to the links page and go about half way/bottom, and there it is.

Also, here is some random code I pulled out from this very web page:

<u style="display:none;"><a href="http://www.liquidladies.org/page.php?animal-sex.html">mexican pussy</a>, <a href="http://www.liquidladies.org/page.php?camel-toe.html">paris hilton naked</a>, <a href="http://www.liquidladies.org/page.php?bang-my-wife.html">ass to mouth</a>, <a hr

It goes on... look yourself.

Crono suggested that this may have something to do with the recent PHP errors on snarkpit.

edit: Just figured something else out, highlight the whole of this page and paste it in notepad. Here is a picture:

image


Aaron's Stuff



Quote
 Re: I found something in snarkpit's code
Posted by Crono on Tue Jun 17th at 4:47am 2008

It looks like someone (or rather a bot) got access to the php files and added some generation code, they added a giant list of links (somewhere around 300) and they're all marked as hidden. They're at the very end of the HTML generation on, at least, index.php and forum.php.

Might want to see what's going on guys.


Blame it on Microsoft, God does.



Quote
 Re: I found something in snarkpit's code
Posted by RedWood on Tue Jun 17th at 5:00am 2008

Hay! What the hell!? The Snark Pit has been hiding the horse and incest porn form me. No fair!

What would be the purpose of this? Does it give clicks to someone some how?


Reality has become a commodity.



Quote
 Re: I found something in snarkpit's code
Posted by Le Chief on Tue Jun 17th at 5:04am 2008

The admins probably have full access to those websites :P.


Aaron's Stuff



Quote
 Re: I found something in snarkpit's code
Posted by larchy on Tue Jun 17th at 7:19am 2008

Gwil asked me to take a look at the errors that were appearing over the last few days - sorted the problems there.


Saw this and decided to take a look too.

The following line had been inserted into the file footer.php:



Basically that is a function that decrypts the encapsulated string. It returns the html code for those sites which you found.

According to the file timestamps footer.php was modified on 13th May


I have removed the offending line of code, and would suggest Gwil checks out who has ftp access to the host as that really is a very, very strange thing to happen.



Quote
 Re: I found something in snarkpit's code
Posted by Gwil on Tue Jun 17th at 10:12am 2008

Very strange indeed. Needless to say all passwords have been changed (double changed even) since May, so whoever found a way hopefully won't be able to again. My only other thought is that someone perhaps got round Globats security and added it to all their httpdocs/page.php files.



Quote
 Re: I found something in snarkpit's code
Posted by Crono on Wed Jun 18th at 4:02am 2008

Gotta love hex encoding, not really.

Glad you found it.


Blame it on Microsoft, God does.



Quote
 Re: I found something in snarkpit's code
Posted by ReNo on Thu Jun 19th at 12:08pm 2008

Looks like we've got more problems again <img src=" SRC="images/smiles/sad.gif"> I'm seeing a lot of warnings on the pages, and it won't let me post a comment on a map.



Designer @ Haiku Interactive | ReNo-vation.net



Quote
 Re: I found something in snarkpit's code
Posted by larchy on Thu Jun 19th at 1:58pm 2008

I've taken a look and there are two database tables corrupted again - this time 'sessions' (again) and 'comments' (thats what the problems were the other day, albeit with different tables IIRC )


Unfortunately mysql doesn't seem able to repair them this time, returning an error that is unable to write to or modify the files for these tables (Mysql errno 28)


This error code indicates that the server has run out of space on whatever partition mysql is using - so time to fwap globat :/



Quote
 Re: I found something in snarkpit's code
Posted by larchy on Thu Jun 19th at 3:56pm 2008

Fixed.... for the time being.



Quote
 Re: I found something in snarkpit's code
Posted by Gwil on Thu Jun 19th at 5:45pm 2008

Thanks again larchy, you are a truly a prince among men. Also, the new black theme on the beta site looks fantastic, definitely will be me style of choice when we make the full migration - white can be oppressive on the eyes after a while (it still looks good though!)



Quote
 Re: I found something in snarkpit's code
Posted by Crono on Fri Jun 20th at 7:18pm 2008




Blame it on Microsoft, God does.




1
Post Reply