If you run OpenX watch out for this - CRITICAL SECURITY -

**Rick Diculous** · 09-18-2010, 06:15 AM

Yeah, I got 5 of my sites blocked by google this week because I was using openx. they say I distributed badware though openx

**Klen** · 09-18-2010, 06:29 AM

This is why i use commercial scripts rather.

**strobi** · 09-18-2010, 06:43 AM

Holy shit! checking that out (upgrading)!

**TheMaster** · 09-18-2010, 07:02 AM

is this happening to sites running that particular update or for all older OpenX versions?

**MaDalton** · 09-18-2010, 07:04 AM

thanks for the info

**DWB** · 09-18-2010, 07:52 AM

Originally posted by KlenTelaris

This is why i use commercial scripts rather.

Such as?

**Dating Port** · 09-18-2010, 08:20 AM

I deleted my OpenX about a year ago.

Thanks for helping that guy out Nikad. I coiuld only see what it was. Not where.

**GTS Mark** · 09-18-2010, 08:21 AM

Thanks for the update

**LeRoy** · 09-18-2010, 08:29 AM

Better check your sites. This one hurts like a mother fucker!

**Klen** · 09-18-2010, 08:35 AM

Originally posted by DirtyWhiteBoy

Such as?

Such this shit:
http://smart-scripts.com/?action=smartspots

**nikad** · 09-18-2010, 08:42 AM

Glad it was of help! ( as if awms hadn´t been hit hard lately now this :P )

**cykoe6** · 09-18-2010, 09:22 AM

Yea this happened to me and it really crushed me. I got my sites which got hit reconsidered by Google and the malware warning taken off but now my whole network is sandboxed. Really painful and costly shit.

**Vick!** · 09-18-2010, 11:00 AM

Originally posted by KlenTelaris

This is why i use commercial scripts rather.

Like commercial ones are immune to security loopholes and vulnerabilities.

**roly** · 09-18-2010, 12:04 PM

Originally posted by Vick!

Like commercial ones are immune to security loopholes and vulnerabilities.

yeah a lot of open source stuff has 100's of geeks going over the code rather than a few employed coders of commercial scripts.

**Hawkins** · 09-18-2010, 12:11 PM

OpenX sucks

**tiger** · 09-18-2010, 03:30 PM

Those fuckers got me, but luckily on only one installation.

**CyberHustler** · 09-18-2010, 03:42 PM

I dropped openx right on time... sucks for some of you guys though.

**signupdamnit** · 09-18-2010, 03:47 PM

There's an update to fix it...

**HomerSimpson** · 09-18-2010, 07:18 PM

openx rocks and this will be solved...

Originally posted by KlenTelaris

Such this shit:
http://smart-scripts.com/?action=smartspots

I have it and I have following problems
- geoip targeting not working for my country
- php includes code not counting hits/clicks
- memcache not working (bad help on this one too)
- banners load slowly the rest of the page, lacking iframe codes...

**hdkiller** · 09-19-2010, 01:13 AM

a few days ago (2) just got an update

do your update

**Davy** · 09-19-2010, 02:22 AM

That must have been quite a big security hole if it allowed attackers to inject code into the ad fields.

I never liked openX. They include the Pear library in their download which makes the whole thing huge. Many servers already have pear installed. They should just make it a server requirement instead of including it in the download.

**nikad** · 09-19-2010, 05:23 AM

The latest update does not completely solve the problem, you must allow only your server ip address to access any files of this script, otherwise they will get in again. I always loved this script, but the security hole has been there for almost a year...that doesn´t make me happy. I will give it a last chance though, but it gets boring :P

**stonehammer** · 09-19-2010, 07:38 AM

looks like its time to use simple php scripts like those free random banner scripts

If you run OpenX watch out for this - CRITICAL SECURITY -

If you run OpenX watch out for this - CRITICAL SECURITY -

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment