+ Reply to Thread
Results 1 to 8 of 8

Thread: Mail Spam issue

  1. #1
    Join Date
    Aug 2009
    Posts
    18

    Unhappy Mail Spam issue

    Hello, I have a problem, but for some reason I am unable to access the General Help forum. I can't even view that section, not just post there.

    Anyhow, my problem is this... a couple of months ago, my hosting support company sent me an email saying they suspended my account because of some "mail spam" issue. I asked them what that means.. and they replied that one of my websites has a "tell a friend" function (my open-realty website obviously), and that this is causing the problem. They told me I should either disable the function or add a captcha to it.

    I simply disabled the link that opens the "tell a friend" popup, and they didn't bother me for a few months.

    2 days ago I found out my hosting account is suspended.. again! I told them that this is rediculous, they can't just suspend my account taking away my access to my emails, as well as some of my clients whose emails are hosted in my account. I asked them what is the problem this time.. and they didn't give me any specifics about the same "tell a friend function" but they told me it's the open-realty website again.

    I'm pasting below what they told me...


    "The messages were sent via the index.php script of your "kastelanos.com" domain. The software identifies itself as "Open-Realty 2.5.8 - Installed at http://kastelanos.com". I have unsuspended your account, but I have left the suspension page active for your kastelanos.com domain until this issue can be completely resolved. You should consult the manufacturer of your software to determine if an update is available that will prevent this from happening in the future and let us know what changes you have made.

    We are not able to tell you specifically how this script was used to send spam, you will need to work with the software's developer to determine how this could happen and what you can do to prevent it from happening again."


    In a desperate try to resolve this issue I hope that someone here can give me some information or solution to this, since I have no clue what to do right now. If I had time I would transfer all my websites to a new hosting server, as the whole suspending my account approach is unacceptable. Unfortunately I have no time at all for such procedure as I have a few websites with databases that require a bit more work than a simple file transfer.

  2. #2
    Join Date
    Jul 2005
    Location
    Sao Paulo, BRAZIL
    Posts
    3,763

    Default Re: Mail Spam issue

    Quote Originally Posted by Brilliant View Post
    "...You should consult the manufacturer of your software to determine if an update is available that will prevent this from happening in the future and..."
    Do you still have version 2.5.8 running with core files changes?
    I refer to your previous post (http://support.open-realty.org/showt...6998#post96998) where you wrote: "...I ended up changing core files and losing the oportunity to upgrade to later versions."

    Eduardo

    Open-Realty® DOCs
    We can easily forgive a child who is afraid of the dark; the real tragedy of life is when men are afraid of the light. (Author Unknown)

  3. #3
    Join Date
    Aug 2009
    Posts
    18

    Default Re: Mail Spam issue

    nope, that was a different OR installation. I could probably go ahead and upgrade to v3 but is there any reason for you to believe that this would solve the specific problem?

  4. #4
    the_sandking's Avatar
    the_sandking is offline hadron remnant - Moderation Fachmann the_sandking is on a distinguished road
    Join Date
    Apr 2003
    Location
    Nullspace
    Posts
    5,289

    Default Re: Mail Spam issue

    Transparent Tech ceased all development and bug fixes for OR v2.x in 2009, The old 2.x versions definitely contain security vulnerabilities. You should upgrade to the latest version, those old vulnerabilities were addressed in v3.

    If you have core file modifications, you will of course lose them during the upgrade.

    You could have personally been hacked too via a virus or keylogger, and your index.php file replaced with a malicious script. This happens all the time and is not necessarly because of OR, weak passwords, or a virus on your PC can give hackers and spammers all they need to take over and use your account for whatever they want.
    "Much of what looks like rudeness in hacker circles is not intended to give offense. Rather, it's the product of the direct, cut-through-the-BS communications style that is natural to people who are more concerned about solving problems than making others feel warm and fuzzy."

    "We gotta' go to the crappy town where I'm a hero!"
    -Hoban 'Wash' Washburne 2485-2519


    "When you’re born you get a ticket to the freak show. When you’re born in America, you get a front-row seat.."
    -George Carlin 1937-2008

    New to Open-Realty® and need help? Check the:
    -OR DOCUMENTATION -

    Important: Read this at least once in your lifetime
    How To Ask Questions The Smart Way

  5. #5
    Join Date
    Aug 2009
    Posts
    18

    Default Re: Mail Spam issue

    can someone please tell me what is the best way to upgrade 2.5.8 to 3.x ?
    What kind of backup should I do, things to keep in mind while doing the upgrade, etc.
    Last thing I want is to mess it up ><
    Thanks

  6. #6
    the_sandking's Avatar
    the_sandking is offline hadron remnant - Moderation Fachmann the_sandking is on a distinguished road
    Join Date
    Apr 2003
    Location
    Nullspace
    Posts
    5,289

    Default Re: Mail Spam issue

    Upgrade Docs: http://open-realty.org/docs/release/...09596220217645

    OR v2 Template considerations:
    http://www.open-realty.org/blog/upgr...realty-3x.html

    OR Blog:
    http://www.open-realty.org/blog.html

    I'd recommend removing all add-ons and attempt to upgrade a copy of the live site before attempting to upgrade the actual live site. I 'd also suggest that you read all of the blog articles, particularly the change logs released since OR v3.0.0 (we're up to v3.1.5 now) .
    "Much of what looks like rudeness in hacker circles is not intended to give offense. Rather, it's the product of the direct, cut-through-the-BS communications style that is natural to people who are more concerned about solving problems than making others feel warm and fuzzy."

    "We gotta' go to the crappy town where I'm a hero!"
    -Hoban 'Wash' Washburne 2485-2519


    "When you’re born you get a ticket to the freak show. When you’re born in America, you get a front-row seat.."
    -George Carlin 1937-2008

    New to Open-Realty® and need help? Check the:
    -OR DOCUMENTATION -

    Important: Read this at least once in your lifetime
    How To Ask Questions The Smart Way

  7. #7
    Join Date
    Mar 2009
    Posts
    11

    Default Re: Mail Spam issue

    I am having the same exact problem.. 140.000 emails in the email queue using the "tell a friend" form even though captcha is enabled.
    We are running 2.5.8 with the Joomla 1.0 bridge.
    We have thousands of of articles on our joomla site and we're afraid of upgrading...
    We're also ranked #1 in google for several keyword phrases and we don't want to risk that as that's where most of our leads are generated from.

    So my question is: How would we best go about and upgrade and maintain 1) all our links/articles 2) our ranking and links to articles etc?

    Appreciate any advice.

    Thanks

  8. #8
    Join Date
    Mar 2009
    Posts
    11

    Default Re: Mail Spam issue

    Is there a way to quicly "disable" the tell-a-friend form? So it doesn't load?
    I have already deleted the link from the webpages but obviously they already have the exact location of the script/form in their emailer system so the go to the exact URL direct.
    Can I comment out some part of the core files until we have managed to upgrade?

+ Reply to Thread

Similar Threads

  1. anti-Spam
    By gary b2 in forum Addon help, ideas and discussion (CLOSED)
    Replies: 5
    Last Post: 04-10-2009, 05:32 PM
  2. Spam bot attack
    By penney in forum General Help (CLOSED)
    Replies: 7
    Last Post: 02-20-2008, 10:47 AM
  3. Spam and OR
    By RealEstate in forum General Discussion
    Replies: 3
    Last Post: 05-09-2005, 03:03 PM
  4. Issue with Mail forms
    By neparealtor.com in forum HELP (CLOSED)
    Replies: 15
    Last Post: 07-29-2004, 06:54 PM
  5. Spam
    By FoxyWeb in forum General Discussion
    Replies: 1
    Last Post: 10-23-2003, 04:37 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts