Hiding profile powered by punbb. Shoppinggid: how to remove annoying spam? Registry and location

We are using HTML5 APIs. Always. Plupload is based on multi-runtime pollyfills for XMLHttpRequest L2 , File and Image APIs. So when there"s no HTML5 available in the browser, we emulate it ourselves.

mOxie (combined code-name for pollyfills) is completely standalone and available separately.

Drag"n"Drop Files from Desktop

Files not only can be picked from browse dialog, but also can be dropped directly from the desktop. In some browsers, mostly in those based on WebKit, it is possible to drag and drop whole folders.

Notice: feature will not work in some legacy browsers.

Access Raw File Data

Since we emulate as much of HTML5 as possible, we are able (among other things) to provide access to raw file data, even in such environments that do not normally support it. One of the biggest benefits of this is that we can display the thumbnails instantly, right as you select the images in the dialog or drag&drop them from the desktop.

Shrink Images on Client-Side

In some cases you would want to upload the image only to turn it into a tiny thumbnail or avatar (like 90x90). Then why waste the bandwidth? Wouldn't it be great if you could do it right there, on client-side, just before the actual upload? That's exactly what we can do. This feature can be applied in a broader scope than just avatars, but that"s where it is at its best.

Upload in Chunks

Files that have to be uploaded can be small or huge - about several gigabytes in size. In such cases standard upload may fail, since browsers still cannot handle it properly. We slice the files in chunks and send them out one by one. You can then safely collect them on the server and combine into original file.

As a bonus this way you can overcome a server"s constraints on uploaded file sizes, if any.

Translated to 30+ Languages

It started with just several, and now we already have tens. In order to manage them better and avoid common mistakes and typos as much as possible, we moved our internationalization (i18n) facilities to Transifex. If you think that translation for your language can be better or your language is not in our database at all, you are welcome to contribute. We will include the translation in all subsequent releases.

Crowd marketing is the attraction of targeted visitors from thematic discussions on forums, blogs, social networks, as well as question and answer services and video services.

This direction is becoming increasingly popular. When used correctly, crowd marketing has an excellent effect in increasing traffic and is safe for the site.

Do not confuse ordinary manual spam of one or two sentences with a link and crowding. They differ in the same way as a junk site from a quality one.

I have noticed more than once that, after reading a useful comment, I went to the author’s website and then subscribed to it. It happens that the information in a comment is even more valuable than in the post itself. It is precisely such comments that need to be emphasized.

Crowd marketing requires an investment of time. If time is limited, you can use various services and programs.

So here is my selection of useful solutions for crowd marketing.

Free tools

A regular Google search is great for finding topical discussions (as is Yandex search).

Enter the required request. Through the menu "Search Tools - All Time" we display only recent discussions:

Depending on the number of results, you can choose different options - from a year to 24 hours.

As a result, you will receive all the latest materials at your request.

At this point, I could easily move on to the next point, but the kindness and love for small details of old man Globator knows no bounds :) Until I tell you in detail, I can’t calm down 😉 .

Using search queries alone when searching for discussions is often not enough; you will not find all the materials you need.

In order to get the maximum number of discussions, it is advisable to use advanced search operators.

For example, to find forums on your topic, we ask the following queries in Google (instead of the word “topic” we use the name of the desired topic, for example, “football”, “fitness”, “yoga”):

topic forum

forum topics

topic "Powered by vBulletin"(forums powered by vBulletin)

topic "forumdisplay"(forums powered by vBulletin)

subject "IP.Board Forum"(on the IP.Board engine)

"showtopic" topic(on the IP.Board engine)

theme "Powered by phpbb"(on phpbb engine)

topic "Created based on phpBB"(on phpbb engine)

topic "viewtopic.php?f="(on phpbb engine)

theme "Powered by PunBB"(on PunBB)

subject "viewtopic.php?id="(on PunBB)

theme "Powered by SMF"(on SMF)

theme "index.php?board="(on SMF)

To find forums only in the desired domain zone, for example, in ru, before queries use the following construction:

site:.ru

To make it look like this:

site:.ru construction "Powered by vBulletin"

Or like this (to search only sites in the by zone):

site:.by health "Powered by phpBB"

Instead of the name of the topic, you can use the search query you need, for example:

site:.ru foundation construction "Powered by vBulletin"

You can use this option:

site:.ru "recommend hosting"(search only on sites in the ru zone)

Or this:

site:.ru inurl:viewtopic "recommend hosting"(search by topics on forums in the ru zone)

Other examples of using extended operators:

intitle:fitness(search for pages that have the desired query in the title)

inurl:blog(search for pages whose addresses contain the word "blog")

what air conditioner *(search for all queries that begin with “what air conditioner”):

Mikhail Shakin - website(the minus sign in front of the site allows you to get results without this site)

In principle, you don’t have to remember extended operators, but simply go to Google’s advanced search:

Or Yandex:

After this, you will have access to advanced information search options.

An excellent service that will allow you to receive information by e-mail about all new materials that are published on the Internet using the keyword you specify.

You can play with the settings and choose the ones that suit you.

Similar to Google Alerts. The functionality is almost the same:

🔥 By the way! I have released a paid course on promoting English-language websites. If you are interested, you can apply for the early list through this form to be the first to know about the release of the course and receive a special discount.

An online service from the developers of BuzzBundle, which is an alternative to the program. I use it all the time.

Allows you to monitor all mentions of your site, competitors’ sites or queries you promote in the following sources:

Using promo code 49DD8B10CA you will receive a 20% discount on all rates.

Setting up notifications in awario looks like this:

Link building service for the West and the CIS.

You can order the following services:

Crowd links
Thematic packages
Creation of turnkey PBN networks
Manual placement in catalogs
Links from Yandex Connoisseurs, Collections and Areas
Reviews for AppStore and Google Play
Reviews on review sites
Links from Quora and Reddit
Outreach

The promotional code "shakinru" gives a 10% discount on all services except outreach.

The cost of one link is 199 rubles. This amount includes the search and selection of a suitable site with indexed links, registration and “upgrading” of the profile, writing and publishing a message with a link to the promoted resource.

Using the promotional code SHAKIN, 199 rubles are credited to your balance. Funds can be used to purchase 1 natural link to test the service.

“Pumping up” your profile may take several weeks. On average, it takes from 5 to 15 days to complete a task. The warranty on posted links is 3 months. If the link is deleted during this period, the service will automatically assign a task to replace it free of charge.

Natural website promotion service. The standard cost of one link is 269 rubles. For packages of 80 links and above, a special price is provided - 250 rubles for 1 link.

You can get a 5% discount using this promo code:

The minimum rate is $200 for 50 links.

The following services are supported:

This service has a project for English-language promotion http://brandcitations.com/.

To obtain natural links for English-language sites, there is a service http://www.themention.net/. Using the code 33871010 when filling out an application, you can get a 5% discount on it.

Crowdlinks supports forums, blogs, question and answer services (including Mail.ru Answers), as well as all popular RuNet social networks.

Tariffs start from 9 thousand rubles for 50 links.

All reporting is maintained in the system; reports can be uploaded in CSV format.

It is possible to link Yandex Metrica and study how many people followed the posted links. It should be taken into account that the data on transitions is approximate, since some of the links may be with a redirect, some of the links may be text, from which it is impossible to find out the exact number of transitions.

Supported resources include:

This service guarantees the safety of completed tasks for the following period:

1 year for blogs;
6 months for forums;
4 months for social networks.

At the time of publication of this post, the minimum cost of posting a topic on the forum through Forumok is 40 rubles, a review in a topic starts from 30 rubles, hidden PR in an existing topic starts from 30 rubles, watching a video on Youtube and publishing a comment starts from 5 rubles.

Rates start at $49 for 50 links.

Many people know this resource as an exchange for ordering articles. I order there myself. There you can also order the publication of comments and reviews on third-party resources. To do this, when creating an order, select the following item:

A detailed example of an order can be found in the section "Help in setting up an order":

On Advego you also have the opportunity to create a tender and select forum profiles of performers of suitable quality (in the screenshot above there is an item with a detailed description of “How to work with tenders”).

This service has a good forum where you can find answers to all your questions.

Minimum order cost: $0.17 per topic of 100 characters. Recommended order price: from $0.5 per topic of 100 characters.

Recently, a number of vulnerabilities were found in PunBB - PHP inclusion and SQL injection.
Vulnerability allows remote user to execute arbitrary SQL
commands in the application database. A remote authorized user can
execute an arbitrary PHP script on the target system. The vulnerability is due to insufficient input processing in the script.
"profile.php". With the "register_globals" option enabled, the remote
the user can execute arbitrary SQL commands on the database
applications. There is a vulnerability in the handling of pun_include tags. Remote user
can download and execute arbitrary PHP script on the target system.

Forum developers never cease to delight ordinary people with new versions
their products, and ordinary people, in turn, use the resources of simple servers
scriptkiddy. Just the other day, 2 new critical bugs were discovered in
popular punbb forum by a man named Stefan Esser.
And now I will try to explain how it all works.

First, you need to raise your rights to administrator using sql-injection.
Open the page in the browser

http://site.ru/punbb/profile.php?id=*

save it to the screw, change the line using notepad:

Those. change the url to an absolute path and add
temp=group_id=1. From the code in the profile.php file you can see that the $temp array is not checked:

while (list($key, $input) = @each($form))
{
$value = ($input !== "") ? "\"".$db->escape($input)."\"" : "NULL";
$temp = $key."=".$value;
print " ".$key."\n".$value."\n
";
}
$db->query("UPDATE ".$db->prefix."users SET ".implode(",", $temp)." WHERE
id=".$id) or error("Unable to update profile", __FILE__, __LINE__,
$db->error());

Open the saved html file in the browser
and press submit, as a result we change the value of the group_id column in the users table and become
administrator. Next we will use the second bug
- php-injection.

This bug is hidden in the file include/function.php

//START SUBST -
while (preg_match(" ", $tpl_maint, $cur_include))
{
ob_start();
include PUN_ROOT.$cur_include;
$tpl_temp = ob_get_contents();
$tpl_maint = str_replace("<".$cur_include.">", $tpl_temp, $tpl_maint);
ob_end_clean();
}
// END SUBST -

The script searches for a tag To load scripts, but because... in the line
include PUN_ROOT.$cur_include; there is a PUN_ROOT variable, then only local files can be connected. For
this we create a drawing with a comment in
in the form of php code and upload it as an avatar. Next, we edit, for example, the forum description through the admin panel, i.e. add:

Open the main page of the forum and voila
- the script includes the image and executes the code
from the comment.

Let's try to understand the question: "Shoppinggid - how to remove it?" The fact is that quite often this application attaches itself to your computer, and you don’t even know about its existence. For the time being. However, such spam must be deleted. Let's figure out what to do.

First try

What might be the first thing that comes to mind when you have just discovered some malicious software or an unfamiliar program? Of course, delete it. But how to do that?

Let's try the usual method. To do this, you need to go to and select “Install” and then in the list that opens, look for “powered by shoppinggid”. Found it? Feel free to remove the program by right-clicking. After that, try restarting the computer and see if this application is still on the computer. No ? Launch the browser and check. And the advertisement, most likely, remained in its place. But then let’s return again to the question: “Shoppinggid - how to remove?” Of course, we cannot do without the item we just discussed, but the likelihood is that the advertisement will disappear after the beginning of action is quite small, so let's look at other possible scenarios.

Antivirus

So, if you are thinking about how to remove Powered by shoppinggid, then you should resort to searching for malicious files on your computer. You shouldn’t do this manually - it can be difficult to detect such files, and it’s almost impossible to do it yourself. After all, that’s why a virus is called a “disease” - it invisibly affects “healthy” files and folders, is encrypted and hidden. Therefore, as soon as you suspect that there is spam or a Trojan on your PC, turn on your anti-virus program and scan your computer.

It is best to use DR.Web antivirus. This is the most effective program that will help you detect even the most tricky viruses. Enable scanning your computer and then wait until the process completes. If you see the words “powered by shoppinggid” or something like that in viruses, you know that the antivirus coped with the task and found your spam. Now all that remains is to disinfect the computer and reboot. After this, check the operation of the browser and the computer as a whole. Happened? Fine. No? Then let's see where else shoppinggid can be "registered", how to remove this spam from your computer and whether its presence can lead to bad consequences.

Shortcuts

The program has been removed, the computer has been disinfected, but advertising still bothers you? This means that not everything and not everything has been deleted. Conclusion - we need to look better. Since the antivirus program turned out to be powerless, you will have to thoroughly study the structure of your operating system, and then begin to take independent actions.

You won't have to search for long. Just look in your browser. More precisely, in the settings of its shortcut. For what? If you right-click on it and then select "Properties", you can work with the place where the spam is registered. Pay attention to the "Object" field. If you notice “powered by shoppinggid” or something like that there, quickly erase this inscription. The point is that, even if your computer is crystal clean, our current type of spam will be firmly registered in the label. Every time you start it will “crawl out”, and when you close the browser, it will hide again. So the question is “How to remove Shoppinggid?” remains open unless you clear the browser shortcut properties. Now just confirm your actions. Reboot. Are the advertisements still appearing? This means you need to search more carefully. Let's see where else this virus might be hiding.

Registry and location

Well, let's take a closer look, maybe we've overlooked our spam? Actually, yes. It is possible that it is already firmly registered in your operating system. So you'll have to look at the registry and the location where your browser is installed. Let's start with the second point.

First of all, go to the properties of the shortcut of the program you are launching to access the Internet. Now take a closer look at the window that opens. There will be a "File Location" button. Click on it. A window will appear in front of you in which browser files will be displayed. Look for a document with the bat extension. Open it with a notepad and see if there are any extraneous inscriptions in it. If you asked the question "Powered by shoppinggid how to remove from your computer?" - then the words you are looking for must be present there. Remove them and then save the file. Try launching your browser again. Useless? Then you need to contact the registry.

Press Win+R, then type regedit in the line that appears and click "Run". A window will open in front of you. Go to edit and click on search. Now it remains to set the parameter for the process. Enter "powered by shoppinggid". Wait while the computer checks for similarities. If nothing is found, then you need to think about what to do next. Otherwise, delete all data that appears.

Let's put it again

But what to do if all the previous methods have already been done, but the spam still hasn’t gone away? The answer to the question "Shoppinggid pops up - how to remove ads?" not found yet. There are still a few options left. Let's start with the most obvious.

You have to sacrifice the data saved in the browser, that is, remove it completely from the system, and then install it again. Before doing this, you will need to erase all files that the program creates, passwords, links, bookmarks and logins. Clear your computer's registry of temporarily created files. When there is not the slightest trace of the browser left on the system, simply install it again. Run it and see what happens. Advertising not gone? Then let's try another method, which quite often helps many users.

Add-ons

So, what can you do if nothing helps you in the fight against annoying Shoppinggid ads? How to remove it? If you can’t get rid of it, you’ll have to block it.

Login to your browser. After that, go to settings. There you should find "Add-ons" or "Applications". All that remains is to download and install the so-called AdBlock blocker program. This is a free add-on that will help you fight pop-up ads. After you install it, restart your browser. Now you can work in peace.

PunBB is a free CMS for the forum, the main difference of which is the built-in capabilities for internal SEO optimization, which are absent even in a number of paid forum engines.

Examples of forums on PunBB can be found by entering queries in the Yandex or Google search bar Powered by PunBB or The forum is powered by PunBB. You can download PunBB from the official website http://punbb.informer.com/, where you can also find punbb extensions, themes and templates.

Installing PunBB: how to install the forum

Installing PunBB is very simple, so even an inexperienced webmaster can handle it.

Download the archive with installation files from the official website, unpack it and upload it to your hosting.

To do this, you can use any FTP manager, for example FileZilla.

If you need Russification of PunBB, download the archive with Russian localization files from the official website and copy the Russian folder to the lang directory.

Open the link http://mydomain/myforums/install.php in your browser and follow the installer's instructions.

You need to enter the database name, as well as the username and password in the appropriate fields. You can find out all this information from your hoster. If you don't have a database, create one.

In the penultimate window, enter the administrator's login, password and email.

In the forum settings, select the Russian language.

Installation is complete. You can log into your forum using your administrator username and password.

PunBB Settings: Forum SEO Optimization

Go to the Administration control point, where you can add new categories and forums, as well as set basic settings.

For better ranking of the forum, go to Administration – Management – Settings and select the File-based (fancy) URL scheme. This will allow you to configure the CNC url in PunBB, which will have a beneficial effect on your promotion in the future.

In its original form, PunBB has very little functionality, which can be easily expanded using plugins. Installing extensions on PunBB is very simple: you just need to copy them to the Extensions directory, and then activate them in the “Extensions” section of the admin panel.

Official PunBB extensions can be downloaded from https://github.com/punbb/extensions.

The list of official extensions is given below:

pun_admin_add_user (adding users through a special form)
pun_admin_clear_cache (clearing the forum cache) pun_admin_manage_extensions_improved (working with extensions)
pun_approval (approval of all new users and messages)
pun_attachment (attaching files to messages)
pun_bbcode (BB codes)
pun_colored_usergroups (different colors for each user group)
pun_forum_news (using topics and messages as news)
pun_jquery (jQuery lib)
pun_move_posts (move a message from one topic to another)
pun_pm (private messages)
pun_poll (voting)
pun_stop_bots (several questions during registration to prevent bots from appearing on the forum
pun_tags (tags)
pun_repository (get extensions directly from the repository)

To change the appearance of the forum, you need to download PunBB styles and choose the most suitable one among them. You can also order a style from professionals or make changes to the finished style yourself by editing CSS files.