i need help - problem (forum sending spams mail)

[Arman]

hi, every one.. i need your help.

i m using vbulletin 3.6.8 and the host provider says your forum is sending 200+ mails per hour, host provider send me the details for coding he says' stop this ...

Please take a look:
root@shared1 [/home2/styl3b3b/public_html/example.net]# grep mail\( *
calendar.php: vbmail($toemail, $subject, $message, true);
infraction.php: vbmail($userinfo['email'], $subject, $message);
login.php: vbmail($user['email'], $subject, $message, true);
login.php: vbmail($userinfo['email'], $subject, $message, true);
payment_gateway.php: vbmail($toemail, $subject, $message, true);
profile.php: vbmail($vbulletin->GPC['email'], $subject, $message, true);
profile.php: $userdata->verify_useremail($vbulletin->userinfo['email']);
register.php: vbmail($toemail, $subject, $message);
register.php: vbmail($email, $subject, $message, true);
register.php: vbmail($email, $subject, $message);
register.php: vbmail($userinfo['email'], $subject, $message);
register.php: vbmail($user['email'], $subject, $message, true);
report.php: vbmail($moderator['email'], $subject, $message, true);
sendmessage.php: if (!is_valid_email($vbulletin->GPC['email']))
sendmessage.php: vbmail($destemail, $subject, $message, false, $vbulletin->GPC['email'], '', $name);
sendmessage.php: if ($sendtoname == '' OR !is_valid_email($vbulletin->GPC['sendtoemail']) OR $vbulletin->GPC['emailsubject'] == '' OR $emailmessage == '')
sendmessage.php: vbmail($vbulletin->GPC['sendtoemail'], $vbulletin->GPC['emailsubject'], $message);
sendmessage.php: vbmail($userinfo['email'], fetch_censored_text($vbulletin->GPC['emailsubject']), $message , false, $vbulletin->userinfo['email'], '', $vbulletin->userinfo['username']);
Please try to remove sendmessage.php script.

now what should i do ..i don't know php...
please help me..

[edited by: jatar_k at 11:16 am (utc) on April 17, 2008]
[edit reason] examplified domain [/edit]

[bwnbwn]

This usually means the site has been hacked and is using your provider with your email address as the sender.

Get in someone that does know how to code to stop this or your gonna be taken down

Fist thing you need to do is disable the email and get it fixed or your a gonner.

[rocknbil]

Please try to remove sendmessage.php script.

FTP in to your site, locate sendmessage.php in the forum directory, and delete it. You can upload it later once you figure out how you got hacked. You can also upgrade to 3.6.9 or 7 beta.

[thecoalman]

Am I missing something here? Why would 200+ emails be considered that it was hacked? If you have a moderately active forum that certainly isn't a lot. By default most of the forums send an "Topic Reply Notification", if you have 20 people watching a thread and and one person responds and its even a day or two old chances are you're going to send 20 emails for that one post alone, then you have PM notification too. phpbb3 can be set to allow people to even watch a forum...

What I did was reset everyones default settings to no notifications using a query on the database. Then I changed the default settings for when they reister so it was no notifications. Lastly I let everyone know what I did and told them to change it back if they wanted.

Most of the people signing up probably never use that feature anyway unless its very inactive forum.