Is PHP used on the forum?

Karellen · Yesterday, 04:55 AM

Could this be a problem on the Mobileread forum?

https://arstechnica.com/security/202...urity-patches/

Gormagon · Yesterday, 08:03 AM

"Is PHP used on the forum?"

Just look at the URL with something like "showthread.php". Although that could be a rewrite rule via htaccess, but usually a rewrite rule to mask ".php" as ".html" may be more common: https://www.php.net/manual/en/security.hiding.php

ownedbycats · Yesterday, 10:30 AM

It's vBulletin so yes. I'm surprised it wasn't down this morning with most of the other PHP sites I check.

JSWolf · Yesterday, 04:39 PM

It's possible the software here is too old to use one of the newly patched PHP versions and will need to be upgraded to a newer forum version.

BetterRed · Yesterday, 05:55 PM

None of the vbully sites I've bookmarked are down - they're all pretty old like this one. The only site I've run into this morning that is down is the AU federal department of health.

DiapDealer · Yesterday, 07:00 PM

Vbulletin was not one of the apps mentioned in the article:

Quote:

The report showed a video of an exploit tool dubbed PHP2Shell executing code on webservers running:

WordPress 7.1.3
MediaWiki 1.46.2
phpBB 3.3.17
Magento 2.4.9
Joomla 6.2.0
Laravel 13.36.0
Laravel 8.83.29
Symphony 8.1.9
Drupal 11.4.10
WHMCS 9.0.9

It's entirely possible the version of vbulletin here is too old for the exploit to work.

But it's all moot since none of the active admins have the access to update any server-level components that MobileRead's forum software runs on.

ownedbycats · Yesterday, 07:19 PM

Quote:

Originally Posted by BetterRed

None of the vbully sites I've bookmarked are down - they're all pretty old like this one. The only site I've run into this morning that is down is the AU federal department of health.

ModTheSims is on a heavily-modified vBulletin and was down for maintenance earlier (owner confirmed on Discord it was patching the vulnerability)

Yesterday, 04:55 AM	#1
Karellen Wizard Posts: 1,914 Karma: 9600930 Join Date: Sep 2021 Location: Australia Device: Kobo Libra 2	Is PHP used on the forum? Could this be a problem on the Mobileread forum? https://arstechnica.com/security/202...urity-patches/

Yesterday, 04:39 PM	#4
JSWolf Resident Curmudgeon Posts: 85,379 Karma: 154365103 Join Date: Nov 2006 Location: Roslindale, Massachusetts Device: Kobo Libra 2, Kobo Aura H2O, PRS-650, PRS-T1, nook STR, PW3	It's possible the software here is too old to use one of the newly patched PHP versions and will need to be upgraded to a newer forum version. Last edited by JSWolf; Yesterday at 04:50 PM.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
php???	crutledge	ePub	13	01-24-2014 06:27 PM
php format	anacreon	Conversion	12	12-17-2013 07:33 PM
Which PHP version do you have?	erayd	Workshop	2	10-04-2010 08:02 PM
PHP for Android	keng2000	enTourage Archive	1	07-30-2010 07:19 PM

Yesterday, 08:03 AM	#2
Gormagon monstrous mythical beast Posts: 216 Karma: 5078396 Join Date: May 2023 Location: Klopstokia Device: Tab Ultra C, Meebook P78 Pro, Viwoods AIPaper Reader, various NXTPAPER	"Is PHP used on the forum?" Just look at the URL with something like "showthread.php". Although that could be a rewrite rule via htaccess, but usually a rewrite rule to mask ".php" as ".html" may be more common: https://www.php.net/manual/en/security.hiding.php

Yesterday, 10:30 AM	#3
ownedbycats Custom User Title Posts: 11,880 Karma: 83333333 Join Date: Oct 2018 Location: Canada Device: Kobo Libra H2O, formerly Aura HD	It's vBulletin so yes. I'm surprised it wasn't down this morning with most of the other PHP sites I check.

Yesterday, 05:55 PM	#5
BetterRed null operator (he/him) Posts: 22,881 Karma: 34252744 Join Date: Mar 2012 Location: Sydney Australia Device: none	None of the vbully sites I've bookmarked are down - they're all pretty old like this one. The only site I've run into this morning that is down is the AU federal department of health.

Advert

Advert