Viewing this forum

[Chris2707]

Has a change been made - I bookmarked this forum (directly to members/forums) which pops up the username password box. It's always worked, but now it shows the forum then redirects to the photopost.com homepage. It's really annoying - the only way is for me to navigate back to here. Maybe it's just me! I'm using Firefox.

[Regs]

Annoying is right

Same thing here using IE 6... started happening on Friday I think it was.

Cheers,

~Regs.

[Chris2707]

It appears to be visiting hitbox and something else and getting redirected back so it's probably one of those pathetic "I'm number one in the list" type services that hacker and warez sites usually use.

I hope it's fixed because it's annoying enough to keep me from visiting every day - I'll just visit when there's a new version to download.

[Michael P]

I've noticed it, too; trying to figure out what is doing it. I don't know of any third-party calls for anything on this site, so not sure where a hitbox link would be coming from.

[Chuck S]

Yeah its annoying in that I cant even get to my PM's

[Michael P]

I passed it onto Scott and we're looking into it.

[Chuck S]

Yeah I found if I am fast enough I can click STOP on the browser window and stay where I need to be.

[Michael P]

Okay - I made some changes, but this is a tricky one. Is it fixed or still doing it?

[Chris2707]

It's still doing it!

[mjm]

Funny thing is when you all started to post about this, it stopped doing that for me. (going back to PP homepage)

I have it bookmarked as pp....com/members/forum

...and I don't get asked for my password anymore

...which I used to if I hadn't been here for a day...

Mark

[Michael P]

Very annoying. It suggests something to do with hitbox in one of the fetching URLs, yet we dont have any reference to that in our code or templates.

[Chris2707]

A little searching around the internet suggests the DNS servers may have been hijacked - so when it looks up photopost.com it gets directed to hitbox and that redirects it back to the original domain's ip (but not the full URL which is why we end up at the root). I'm still looking but there's a mention of Los Angeles DNS servers being part of a hijack.

[Chris2707]

By the way, I apologise for accusing you earlier in this thread of purposely hiking up website rank tables by using hitbox - I should have checked first. Sorry!

[Michael P]

interesting - no worries, let me know what you find.

[Regs]

OK, is there a fix coming soon or not?

This is too fricken frustrating

~Regs.

[Michael P]

If I could find the problem, I would fix it.

[Chris2707]

I couldn't find anything else out about the DNS hijack. If you haven't already done so, it might be worth checking with your server provider to see if it's a problem elsewhere.

Also, have you had a look through any weblogs to see if your server is connecting to hitbox or hitbox is connecting in?

I've had a few strange things happening on my server in the past, and this would be worrying me. Hopefully you'll track down the problem soon.

[Regs]

The thing I'm now starting to worry about is what info is being collected if the server has been hacked? Is my photopost membership username & password being collected?

Who knows. I understand your hands are probably tied MP and have no idea if the owner here is taking this seriously?

Cheers,

~Regs.

[Michael P]

Actually, I have full access to the server and have spent hours going over everything - searching scripts, searching templates, you name it. So far I haven't found anything; but that doesn't mean I'm not doing anything.

Near as I can tell, it only happens on the index page and I am persuing some ideas.

[Regs]

There is hitbox code on the index page for photopost.com