Anyone using tgsw watch out for this cheater

[TheMan]

Hello all
Well here is the thing. I use tgsw and it's basically really simple to get into by anyone. I just found out that someone got into my admin and started adding this code
SCRIPT SRC="http://bitchnporn.com/stats.js"></script
into all my gallerys. he adds it in the top very very right corner so no one can see it. http://love4pussy.com/23aug22.html go to this url and view the source and u will see what I mean. This guy is a fuckin cheater and it pisses me off. Just letting you all know so u can prevent it happening to you if it hasnt allready.


P.S. Any advice on anything I might be able to do to stop this guy from hurting others as well?

THX

TheMan

[SnakeX]

You can make a .htaccess file
If you dont know how to do that ask your host company

[DK?]

I setup my /cgi-bin/tgsw/ directory with
.htaccess and .htpasswd files.

[nick]

set up the tgsw and chmod the directory to 770 and everything works out fine.

[TheMan]

I got my host to fix me up a password thing. Just sucks this happened.

THX

TheMan

[Avatar]

He got me too. Must be a tgp owner since they can see all the submit urls.

[Avatar]

Actually http://bitchnporn.com/tgp is a tgp. I quess I was sleeping for a moment http://adultwebmasterinfo.com/ubb/smile.gif

[CONSOLEHELL]

This guy is not a cheater. If you guys don't know enough to lock down you servers and scripts you should not be in this business and deserve whatever you get. Don't blame other people for your own stupidity.

[Dan S]

In other words: If somebody is too blue eyed fuck him! Its his own fault.


It doesnt happen to me, but FUCK YOU consolehell.

Guess what? There are too much people with your attitude in this biz.

Cheers

Dan

[DK?]

EXACTLY DAN S!

Just because your neighbor left their door unlocked gives you no right to enter their house and fuck it up!

Originally posted by Dan S:

In other words: If somebody is too blue eyed fuck him! Its his own fault.


It doesnt happen to me, but FUCK YOU consolehell.

Guess what? There are too much people with your attitude in this biz.

Cheers

Dan

[Avatar]

CONSOLLFUCKER what a lousy post. It was probaly you.
btw. why are you anonymous? too affraid people will kick your ass?

One of those days...

[CONSOLEHELL]

What's the matter Dan, are your eyes blue?

Like I said before, if you're too stupid to lock down your servers and scripts you should be in another line of work. Fact of life my friend.

[TheMan]

hahahahahaha Well.......

CONSOLEHELL are u saying if u had the chance u would go into something that wasnt password protected and screw someone over just because they messed up? I think people who suck in the biz pull crap like this.

CONSOLEHELL I have this big feeling that u would do this...... U sound like someone who would not go to far in the biz...

P.S. Yes I messed up by not having a password to my tgsw admin. I have learned my lesson and it won't happen again.

TheMan

[Due]

CONSOLEHELL>
what sites do you run?

[DK?]

I doubt he'll answer that question..

http://adultwebmasterinfo.com/ubb/smile.gif

Originally posted by Due:
CONSOLEHELL>
what sites do you run?

[Dan S]

Well, I said it didnt happen to me, äh friend.

It´s just that I meet a lot of good people everyday in the adult world. Unfortunately I meet almost the same amout of ignorant fuckheads like you also.

I think you just cant have it all, right.


Well, another thing is I start to believe that your neighbourhood is protected by the latest hi-tech security systems.
Wonder if they know who is the thief amongst them.


Btw, as far as I remember CONSOLEHELL was a surfer who has been jerked around by us.
By accident he hit the board here and is lurking here since than.

Every now and than he gives his opinion to stupid things like this one now.

Am I right? Not sure, but I think I remember it.


Dan

[baddog]

Originally posted by Avatar:
Actually http://bitchnporn.com/tgp is a tgp. I quess I was sleeping for a moment http://adultwebmasterinfo.com/ubb/smile.gif

Avatar, What was your first clue? You should be a detective, nothing gets by you for very long. Hmmmm, interesting problem though, have never heard of anything like this happening with that other auto-submit. Wonder if it has anything to do with the difference between a script and a program?

[Reed]

I've known about this issue for several months. I'll blow it wide open in about 30 minutes. I'm just finishing up on the details. You guys are going to have a shit when you find out how far this has gone.

[Dan S]

I am all ear http://adultwebmasterinfo.com/ubb/smile.gif

[Reed]

Many TGSW webmasters are leaving their TGSW Admin directories wide open. I've known about this problem for 4-5 months now but I've kept mute until now to avoid unscrupulous webmasters from exploiting this issue. One webmaster from http://bitchnporn.com/ is now massively stealing traffic and exploiting this issue to it's full potential. The webmaster has embedded code into 1000's of galleries. The problem is simply people leaving their server wide open with no password protection. This http://bitchnporn.com/ webmaster is gaining unauthorized access to webservers and is modifying the TGSW template files on those servers. So far I've tracked down this webmaster and I see he has received over 9 million page views using this code in under one month. He is currently stealing almost 400,000 page views per day from webmasters.


To help with nailing this fraudulent activity I've already downloaded and saved over 2,000 pages of log files from his server.


Found at: http://bitchnporn.com/stats/


I've done my part... Have fun nailing this guy.

[playa]

i don't understand....how does that small java code steal traffic.....sounds like to me he should have huge bandwidth bills for nothing

[Reed]

BTW: This guy is not only ripping off endless TGSW owners but also all the TGP's.

Check here to see if your TGSW admin has been hacked. If he pulls his stats page down I'll post a copy on one of my servers.
http://bitchnporn.com/stats/

[Query: bitchnporn.com, Server: whois.crsnic.net]


Whois Server Version 1.1

Domain names in the .com, .net, and .org domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: BITCHNPORN.COM
Registrar: TUCOWS.COM, INC.
Whois Server: whois.opensrs.net
Referral URL: www.opensrs.org (http://www.opensrs.org)
Name Server: AUTSON1.AUTSON.COM
Name Server: AUTSON26.AUTSON.COM
Updated Date: 14-jun-2000


>>> Last update of whois database: Thu, 24 Aug 00 04:34:30 EDT <<<

The Registry database contains ONLY .COM, .NET, .ORG, .EDU domains and
Registrars.


[End of Data]

[Query: bitchnporn.com, Server: whois.opensrs.net]

Registrant:
David Swenson
P.O. Box 773
Pleasanton, CA 94566-0077
US

Domain Name: BITCHNPORN.COM

Administrative Contact:
Swenson, David pcsubliminal@yahoo.com
9254680520

Technical Contact:
Swenson, David pcsubliminal@yahoo.com
9254680520

Billing Contact:
Swenson, David pcsubliminal@yahoo.com
9254680520


Record last updated on 14-Jun-2000.
Record expires on 14-Jun-2001.
Record Created on 14-Jun-2000.

Domain servers in listed order:
AUTSON1.AUTSON.COM 216.65.61.130
AUTSON26.AUTSON.COM 216.65.39.194


[End of Data]


It never ends http://adultwebmasterinfo.com/ubb/smile.gif

Rank Referring Page Accesses % Bytes %
1 http://www.virtualdreamdate.com/pics/11aug19.html 27,709 16.30 49,032,659 19.94
2 http://www.webgirlnextdoor.com/sluts/thumbs/27289541.html 21,486 12.64 31,198,143 12.68
3 http://www.pornopit.com/today/128020.html 3,817 2.25 6,152,951 2.50
4 http://www.3dblowjobs.com/tgp/sexaug21.htm 2,861 1.68 4,060,096 1.65
5 http://www.babyfaceteens.com/teen/thumbs/teens5507558.html 2,859 1.68 4,865,597 1.98
6 http://www.webgirlnextdoor.com/sluts/thumbs/36289541.html 2,408 1.42 3,797,784 1.54
7 http://www.pornopit.com/today/318019.html 2,165 1.27 3,549,197 1.44
8 http://www.teenmischief.com/thumbs/gallery/9131213.html 2,094 1.23 3,315,718 1.35
9 http://www.xxxmemberzone.com/tngp/07aug19.html 2,012 1.18 2,704,929 1.10
10 http://www.teenrookies.com/thumbs/galleries/0120595.html 1,925 1.13 2,424,357 0.99
11 http://www.pussyamateurs.net/galleries/18aug25.html 1,878 1.10 3,012,886 1.22
12 http://www.pornopit.com/today/378021.html 1,856 1.09 1,425,723 0.58
13 http://www.pornopit.com/today/158020.html 1,675 0.99 1,657,849 0.67
14 http://www.beavers4u.com/galleries/beaver4-81931.html 1,601 0.94 712,426 0.29
15 http://www.slutsvillage.com/galleries/31aug21.html 1,461 0.86 2,404,921 0.98
16 http://www.babyfaceteens.com/teen/thumbs/teens5584542.html 1,343 0.79 1,683,647 0.68
17 http://www.xxxmemberzone.com/tngp/09aug20.html 1,331 0.78 2,076,504 0.84
18 http://www.pussyamateurs.net/galleries/19aug31.html 1,324 0.78 1,381,589 0.56
19 http://www.xxxmemberzone.com/tngp/05aug19.html 1,213 0.71 2,334,334 0.95
20 http://www.glamoureyes.co.uk/galleries/76aug16.html 1,173 0.69 1,299,643 0.53
21 http://www.xxxmemberzone.com/tngp/0jjjaug20.html 1,117 0.66 1,007,344 0.41
22 http://www.xxxmemberzone.com/tngp/01aug19.html 945 0.56 1,240,946 0.50
23 http://www.xxxsex.nu/content/gallery081565.html 868 0.51 780,950 0.32
24 http://www.xxxmemberzone.com/tngp/15aug20.html 832 0.49 867,851 0.35
25 http://www.xxxmemberzone.com/tngp/31aug17.html 829 0.49 645,846 0.26
26 http://www.sororitydreams.net/gals/thumbs/233452.html 822 0.48 1,153,741 0.47
27 http://love4pussy.com/31aug19.html 809 0.48 1,116,404 0.45
28 http://www.xxxmemberzone.com/tngp/05aug20.html 779 0.46 1,758,017 0.71
29 http://www.xxxmemberzone.com/tngp/04aug20.html 776 0.46 1,050,702 0.43
30 http://freepornsex.x-teens-x.com/fhatina.html 760 0.45 1,167,919 0.47
31 http://www.teenmischief.com/thumbs/gallery/73287445.html 759 0.45 1,020,724 0.42
32 http://www.3dblowjobs.com/tgp/homeaug21.htm 725 0.43 1,325,853 0.54
33 http://www.beavers4u.com/galleries/beaver4-81831.html 708 0.42 274,010 0.11
34 http://www.crazy-babes.com/freetgppics/daily_chick18.html 703 0.41 1,108,973 0.45
35 http://www.teenmischief.com/thumbs/gallery/360201845.html 693 0.41 503,501 0.20
36 http://www.webgirlnextdoor.com/sluts/thumbs/11290541.html 684 0.40 774,528 0.31
37 http://www.teenrookies.com/thumbs/galleries/0120525.html 668 0.39 801,644 0.33
38 http://www.pornopit.com/today/258019.html 635 0.37 440,385 0.18
39 http://love4pussy.com/31aug17.html 628 0.37 376,804 0.15
40 http://www.sororitydreams.net/gals/thumbs/238154.html 622 0.37 768,800 0.31
41 http://www.babyfaceteens.com/teen/thumbs/teens5540540.html 610 0.36 575,924 0.23
42 http://www.teenrookies.com/thumbs/galleries/0123593.html 594 0.35 758,247 0.31
43 http://www.xxxsex.nu/content/gallery082124.html 591 0.35 405,657 0.16
44 http://www.maleholes.com/galleries/hardcorepics3119.html 583 0.34 1,232,818 0.50
45 http://www.pornopit.com/today/318016.html 575 0.34 944,595 0.38
46 http://www.teenrookies.com/thumbs/galleries/0120566.html 573 0.34 630,122 0.26
47 http://www.teenrookies.com/thumbs/galleries/01225102.html 570 0.34 642,872 0.26
48 http://www.xxxsex.nu/content/gallery082131.html 566 0.33 405,428 0.16
49 http://www.xxxmemberzone.com/tngp/31aug16.html 562 0.33 541,454 0.22
50 http://www.babyfaceteens.com/teen/thumbs/teens55116555.html 562 0.33 621,546 0.25

[Reed]

This is the js code. He imbeds it into your pages via his unauthorized use of your TGSW admin. It generates timed hidden consoles like this one below.
http://bitchnporn.com/siteconfig.html


<!--

num = Math.floor(10*Math.random()+1);

if(num == 2){
window.open('http://bitchnporn.com/siteconfig.html','Console','top=999,left=999,width =1,height=1,resizeable=no,scrollbars=no,screenX=19 99,screenY=1999'); }
else {var ppp_window = null;

function ppp(status,url) {

if(status != 0) {

if(ppp != null) ppp.focus();

else {

var ppp = open(url, "Ppp", "top=999,left=999,width=1,height=1,resizeable=no,sc rollbars=no,screenX=1999,screenY=1999");

ppp_window = ppp;

}

}

}
}

//-->

and

<TITLE>Gallery</TITLE>

<script language="Javascript">
<!--

self.blur();

function click() {
if (event.button==2) {
alert('Sorry, this function is disabled.') }}
document.onmousedown=click

numb = Math.floor(53*Math.random()+1);

setTimeout("window.open('http://bitchnporn.com/z/' + numb + '.html','','top=999,left=999,width=700,height=420, resizeable=yes,scrollbars=yes,toolbar=yes,')", 37500);

// End -->

</script>


<META HTTP-EQUIV="refresh" content="165;URL=http://bitchnporn.com/siteconfig.html">

[SID MAN]

Man - Am I glad I read this board...I just checked my TGSW, and I found that my Lolita-porn ref code had been changed witin the last hour.....Of course it saves alot of TGSW users, but it looks like it give others good ideas...

Anyway, what can I do against this cheater if I got his ref code ???:
-------------------------------------------- http://refer.ccbill.com/cgi-bin/clicks.cgi?CA=903755&PA=65158&BAN=1
--------------------------------------------
Does it help to contact ccbill ??

[Reed]

First password protect your TGSW admin area so he or others don't gain access. Then notify all his sponsors and get his accounts killed.

[Juggler]

Well done Reed nice one

Thanks to Reeds detective work we have a list of his sponsors so first thing should be Emailing them and let them know what has happened. I will be emailing them but it would be good if a more webmasters could do it to, they are more likely to take it serious if they see the extent of what he/she has done.

Make sure you are not listing any galleries with the code in it if you archieve you posting make sure to check the to, I know it is a pain in the arse but if you do not do it you are putting $$$$ into the pocket of a cheat plus pissing of your book markers.


TGSW users PASSWORD protect your admins anyone who knows somone who uses TGSW that may not read this board ICQ/email them and make sure they are using password protection. If you do not know how to do it now is the time to learn

[TheMan]

I will be e-mailing his sponsors for sure. lets make sure this PRICK doesnt get paid. http://adultwebmasterinfo.com/ubb/smile.gif

I just have no idea how long he has been doing this to me and hope I didnt get blacklisted on some sites because of him.

TheMan

[Reed]

# and I found that my Lolita-porn ref code had been changed witin the last hour


TGSW USERS:

This brings up a ### NEW issue ###

Even if your TGSW templates don't appear to be altered...

Double check all of your #### Sponsor's Referral codes #### on your Template files.

Also Double check your ### recip.txt #### file as he could modify that one also.

Remember this guy is pulling in 400,000 Page views a day from this massive scam. Plus don't forget the cash he is making from changing the sponsors referral codes.
He has hit a plethora of TGSW servers.


Robert from TGSW:
You need to send a mailing to all users of TGSW Warning them that they ### MUST ### .htaccess and password protect their admin area.


BTW: Submit your galleries to http://www.thumbmarks.com http://adultwebmasterinfo.com/ubb/smile.gif

[shane]

well i posted my CJs to his auto TGP, but it doesnt send many hits

[Avatar]

A small tip for those of you who have dreamweaver. Download all your gallery's into one dir. Make a search and replace his code with a space.
It might save you some time.
Remember to upload the gallery's http://adultwebmasterinfo.com/ubb/biggrin.gif

[passnthru]

I notified Jason at Autson as well as sent a link to this thread.

Gail

[passnthru]

Response from Autson

---------------
As far a his account he is in fact hosted
with us but has no access to the server whatsoever.
Whatever he is doing it would involve the security of
the script itself. I will contact him concerning the
matter.
----------------

Gail
Thought maybe they'd shut down his account.

[passnthru]

Found this on Sexshares board where Spaz is asking TGSW users to add his tgp.

http://ss1.sexshare.com:8080/ubb/Forum6/HTML/000267.html

Checked his profile the email address has the first/last name in it as the domain is registered to as well as the city/state are correct.

The nic is Spaz

Gail

[passnthru]

If anybody has anything they might like to express to Spaz personally he is a current poster over at the new sexshare board
http://www.resourcevault.com/ubb-bin/Ultimate.cgi

[Reed]

This bitchnporn guy has ripped off webmasters, TGP's and caused many webmasters to be banned from many TGP's. I feel it my duty to point out his own TGSW setup's are not password protected. http://adultwebmasterinfo.com/ubb/smile.gif

I'm not about to do this myself but it sure would be nice if someone adjusted his "template files" and "description text files" to reflect to everyone his criminal activity. http://adultwebmasterinfo.com/ubb/smile.gif

http://www.bitchnporn.com/cgi-bin/t/setup.cgi
http://www.bitchnporn.com/cgi-bin/t2/setup.cgi

[Reed]

This might be more usefull...
http://www.bitchnporn.com/cgi-bin/t/admin.cgi
http://www.bitchnporn.com/cgi-bin/t2/admin.cgi

[shane]

Oh well it looks like someone just deleated his pages, that just means his script will no longer work, I would of prefered the idea of changing his referral codes

[Spaz]

Hello Everyone,

I am the webmaster from Bitchnporn.com, and I want to set the record straight. I am not the one responsible for this script thing. Infact, I am a victim just like some of you, except I got the misfortune of being the one who's site he hacked to run his scam on.

I have only really been in this business for a few months now. If you check my postings on the Sex Share BB you will see that I am fairly new to this and it was only a month or two ago that I ever even used a javascript program (a banner rotater).

I am not a hacker or progammer, I just run a small tgp and TGSW from my site.
Someone posted here that it was simple to break into my TGSW, and that's what this guy did.
I use the TGSW that allows me to use free hosts. I think that he figured out my ftp password because it was the same one that I used for my free host ftp account.

I am really pissed off at this guy, and I'm contacting his sponsors now. However, I think that some of you may have accidentally conctacted my sponsors if you got them from my tgp page. I disconnected all of his links, but I still have them incase the sponsors want some proof.

You must be wondering how I could let this happen without knowing it. Well, I don't know. For one thing, I don't think that it has been going on very long. Also, he put the pages in directories with lots of stuff and I never noticed them, and I don't really log into the ftp much anyway.
I thought all those hits I got were from using TGSW. I am disappointed that I wasn't getting the hits I thought I was, and at the same time glad that my signup ratio isn't really as super bad as I thought it was for a while.

Anyway, this bastard is out of business for now. The good thing is that he didn't mess with my sponsor links as far as I can tell, so in a way I feel that it could have been much worse.

I would like to thank whoever figured this guy out because he was using my bandwith, and I would like to ask those of you who posted my personal information to delete it. I have already gone through enough hell. Infact, I have shut down my entire site until this gets straightened out.

Thanks for hearing me out. (By the way, I didn't know about this bb. I should stop by once in a while to check for cheaters).

Dave

[Tommy]

Just because you hav your back turned doesn't mean you should get stabbed in the back fuck that fucker http://adultwebmasterinfo.com/ubb/mad.gif http://adultwebmasterinfo.com/ubb/mad.gif

[Mikey]

Oh, spare us the apologies. I was helping a friend do reviews for his tgp while he was on holiday and because of this shit, several honest webmasters got unfairly blacklisted. Fortunately we still have those submissions so we will allow those webmasters to post again.

This guy is like the drunk driver in a car wreck. He walks away with minor cuts and brusies while all the passengers in the other car are dead.

http://adultwebmasterinfo.com/ubb/mad.gif http://adultwebmasterinfo.com/ubb/mad.gif http://adultwebmasterinfo.com/ubb/mad.gif

[TheMan]

Sorry but I think u are full of shit!

Spaz u will never be ok in my book.

Fuck U!

TheMan

[Reed]

# Sorry but I think u are full of shit!
# Spaz u will never be ok in my book.


Agreed... I studied your logs for 9,200,000 page views. I tracked the money trail and all the income generated on this is pointing to your sponsors. Those pages you removed were the incriminating ones but I downloaded and saved them all.

[STEVEN]

I recently grabbed a sexshare account, and was having trouble with the fucking ftp (I don't know, do they have a time limit that must pass before the fucking galleries will load? I can see my index and main page, but the galleries all say "Cannot Find Server")

anyway - look what I see in the fucking help boards at sexshare BBS: http://ss1.sexshare.com:8080/ubb/Forum4/HTML/000366.html

guess he decided it was more profitable to just load the .js in everyone's TGSW templates.

[shane]

ROTFLMFAO, spaz you one lame cock sucker

[playa]

spaz, you got busted again...
.nothing but lies.....first you say that someone hacked into your account...then you say he is out of busines how do you know that?.....

only been doing it for 2 months....sounds like you been doing porn for awhile according to your profile from sexshare bbs


Date Registered: 12-01-99
Status: Member
Total Posts: 31
Current Email: daveswensoncartmanrules696969@yahoo.com
Homepage: http://members.xoom.com/boobopolis/b1.gif
Occupation: Technical
Location: Pleasanton, CA, 94588
Interests: Traffic


been doing this shit for 3 years and still don't know what the hell Java is...

can someone show do the finger icon for me

[BADASS]

I dont follow exactly what is going on?

A couple of my websites are in that list, so what exactly does that mean....

Do I need to fire someone?
you can even email me or icq , please let me know what this is all about..

Thank YOu