HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


error message or attempted hacking?

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#76227 (In Topic #15734)
Avatar

Fan in action

I just received a popup with this message while working on my catalogs:

"enter your password to make sure no one is watching first"

I closed the window and did a search with that string on OcPortal.com–there were no hits. Has anyone seen this before, or should I be reviewing my site's security?
Back to the top
 
Posted
Rating:
#76230
Avatar

Community saint

That doesn't look right at all.

First, I don't think ocPortal has any popups that ask for username/password.

Second, the grammar is all wrong for it to be part of ocPortal.

Looks like you may have a security problem somewhere, but it does not necessarily mean its with ocPortal.

Do you have a Samsung Galaxy S / Galaxy S II ? If so, why not check out my ScreenFree FM Radio .
Back to the top
 
Posted
Rating:
#76232
Avatar

Fan in action

That's what I thought…Now I'm wondering if, despite having an up-to-date firewall, it's not a direct hack into my system with a keylogger?

…off I go to find out.
Back to the top
 
Posted
Rating:
#76234
Avatar

Community saint

If it happens again, can you please take a screen shot. It might give us some clues as to where its coming from.

Do you have a Samsung Galaxy S / Galaxy S II ? If so, why not check out my ScreenFree FM Radio .
Back to the top
 
Posted
Rating:
#76236
Avatar

Community saint

That's the message you get when using the bookmark add-on. Is it possible that you hit the little start icon at the bottom of the page which activates it and asks for your password?

Bob
Back to the top
 
Posted
Rating:
#76237
Avatar

Community saint

Bob, I just had a quick look at the bookmarks code and could not see anything relating to passwords. Digging deeper though I did find the following ocPortal session confirmation prompt:
Enter your password (please make sure nobody is watching first)
Which I suspect is what is getting triggered.

Khaleeka, is the message you get actually the one I quoted above? If so, then that is a valid ocPortal popup (not one that I ever personally recall seeing).

Do you have a Samsung Galaxy S / Galaxy S II ? If so, why not check out my ScreenFree FM Radio .
Back to the top
 
Posted
Rating:
#76238
Avatar

Community saint

The bookmarks code definitely ask for a password using that same text. You can reproduce this by clicking the blue star at the bottom of this page.

Bob
Back to the top
 
Posted
Rating:
#76240
Avatar

Yes is ocPortal. However I think there's no need for a password prompt here, it's only happening because we used the admin menu code to build the bookmarks menu, we'll remove the prompt.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#76262
Avatar

Community saint

Chris Graham said

Yes is ocPortal. However I think there's no need for a password prompt here, it's only happening because we used the admin menu code to build the bookmarks menu, we'll remove the prompt.
Hallelujah! I wondered why the need for a password prompt here as I use the bookmarks quite frequently to track stuff on the forum and its a nuisance.

Bob
Back to the top
 
There are too many online users to list.
Control functions:

Quick reply   Contract

Your name:
Your message: