Spam on Our Front Gate

[Fenrir]

I think it exceedingly unlikely that Slash put the following markup and code on the front page of the temple. It is suspect, surreptitious, poorly spelled, and grammatically incorrect.

Code: [Select]

<script>if(document.referrer!='htt'+'p://reff'+'erer.c'+'om')document.write('<sp'+'an style=\'disp'+'lay:n'+'one\'>');</script>
If you intresting in sport <a href="http://rxsportmeds.com/">buy steroids</a> you find place where you can find information about steroids
<script>if(document.referrer!='ht'+'tp://5g'+'o.c'+'om')document.write('</sp'+'an>');</script>
Is this left over from an earlier attack? or is the temple compromised?

[Slash]

Well... I'm tired of seing this kind of attacks on this host. I wish they fixed the security hole (because I doubt it's an issue with the app setup)

Edit: The classic decode trick, infiltrated into the header template file:

<?php /*c7ac5ac4154b3a495f69b124957bac72_5*/ echo base64_decode("PHNjcmlw...2FuPicpOzwvc2NyaXB0Pg0K"); ?>

Edit2: What I have been unable to stop are unwanted registrations, even with KeyCaptcha and reCaptcha modules installed, even with a custom simple human filter, spambots seem to jump over all. I'm wondering if there's an additional entry point, other than the registration page, that the spambots are exploiting.

[Psiweapon]

Edit2: What I have been unable to stop are unwanted registrations, even with KeyCaptcha and reCaptcha modules installed, even with a custom simple human filter, spambots seem to jump over all. I'm wondering if there's an additional entry point, other than the registration page, that the spambots are exploiting.

Is human-moderated signup an option, tocayo?
(I'm assuming that with human filter you mean something on the order of "you have two chickens and one is critically hit with a vorpal sword, how many heads are now laying about?")

[Z]

There is some really weird spam at http://rogue temple.com/hutterite-cult-alberta/ ... (space added to make the link invisible to bots)

[Darren Grey]

That is rather strange, I must say...