Everyone should update their Bibtex component files bibtex.php, jombib.html.php and jombib.php

so that the first lines read to remove a major vulnerability:

<?php
defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );

remove later occurrence of
defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' ); in one of the files.

With thanks to Hazzaa of joomlame.com

Better Agora http://www.joomlame.com/

Fireboard died a death on 1.04

Hello,

I found a part of the solution:

in the URL, if I add &Itemid=59 in the end of URL, it works...

Hello Mark,

You perhaps remember me, I spammed you with several modifications on your great component Bibtex

I have one more problem. Hope it's the last one!

I modified a few parts of your component. I attached the files. I modified joombib.php and joobib.html.php in the frontend.

I encounter a problem with the different types of users in joomla. The authors and above can access to all the pages of references, but the registered people (simple users) can't navigate on the pages. I don't know if it was the case before I changed the component.

When I'm connected with an user account, I clic on the "page 2", and this text appears : "You are not authorised to view this resource."

How do you manage the users acccess?

Thank you for helping

Phil

I sent you the files Mark.

There is one hack in them that you advised re paging issue, other than that they should be as supplied in 1.32b release.

OK, it looks like there is a security hole in the Joomla Bibtex component that some cheerful group are taking advantage of.  I would love to get this fixed, but I simply do not have the time at the moment and have little experience when it comes to security.  I assume it is an SQL injection problem, can anyone give me a hint as to how to close the hole?

Some 15,000 visitors hit the phishing page... with that many fools reacting to the spam 

There was also a virus package, no idea  if it was called by Bibtex as by the time I realised that the front end had been altered I had already disabled the files in the backend.

Identified, it was Trojan Horse PHP/BackDoor.C99shell in file bayo.php

last file is known now.

BIBTEX has been hacked 

Some files have been added to the JOMBIB directory of my site after clean-up I am left with

BibTex.php
checkit.php
download.bib
errors.php
jombib.html.php
jombib.php
php.cgi.core

are these all supposed to be there, particularly that last one? which is 73Mb :-o

That works, thank you