RPGWatch Updates, Bug reports and Feature requests

[Kordanor]

Had no problemse for a couple of days. Today the page was getting blocked again.

 

[Myrthos]

Yes, Google again has listed RPGWatch for some reason. It only detected something on the forum pages.
The ads processing is differently on the forums (via javascript) than on the front page (through PHP). I will convert the forums processing to PHP, but it means changing the forums source files to accomplish that, which isn't too great on updating software.
I have no clue why this happens. It has worked for years and now all the sudden Google finds it is suspicious and presents some real cryptic messages as to why it thinks it is suspicious.

 

[Menigal]

Anything to do with this?

 

[Myrthos]

No it hasn't. We are running the ad server on our own physical server and the ads are created by us as well.
I'm not sure how Google tries to detect this, but what happens is that a version of JQuery is downloaded from Google (only once) and that a piece of javascript using functionality from JQuery is executed. That accesses mediarpg.com (which is on our server) for the banner and the redirection to GOG.
That has worked for years. On Thursday it didn't anymore and Google flagged RPGWatch, MediaRPG and LocusInn as sources of malware as it redirected links. The messages Google provided are very odd, mentioning that malware was detected in links to 0 sites with no malware. So, I do not know what has happened.
Tried to fix it, although I did not know what to fix really, but I updated the ads software and asked Google for a review. Google mentioned everything was OK and 3 days later is thinks otherwise, nothing changed in the meantime though and the messages are still confusing.

It appears to be related to the ads on the forums, so I removed those for now and will see what happens.

 

[pibbur who]

Got no warning when accessing the watch now.

pibbur who did get warnings earlier today.

EDIT: That didn't last long. Warnings now.

 

[lostforever]

I just got warning from google now.

 

[Cm]

So did I.....

 

[Toff]

I know my LoTRO characters are pretty leet but thats no reason to try to grab my logon and password.

 

[aries100]

I, too, have just gotten a warning from google when using firefox.

It says this (in Danish):

"Dette websted (rpgwatch.com) er blevet anmeldt som et angrebswebsted og
er blokeret jævnfør dine sikkerhedsindstillinger."

Translation:

"This webplace/site has been reported as an attack web site and has been
blocked according to your secury settings."

I hope this issue will be resolved soon...

 

[Deleted member 18181]

for about a week every time i access the site i get that malware shit

 

[Thrasher]

I am still getting the google warning page. But can click through it to reach RPGWatch.

 

[Myrthos]

Yes, Google is still busy verifying things.

 

[jhwisner]

Here's what the google report says currently

Safe Browsing
Diagnostic page for rpgwatch.com

What is the current listing status for rpgwatch.com?
Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 6 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 307 pages we tested on the site over the past 90 days, 73 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-09-23, and the last time suspicious content was found on this site was on 2014-09-23.
Malicious software is hosted on 1 domain(s), including mediarpg.com/.

This site was hosted on 3 network(s) including AS6724 (STRATO), AS15830 (TELECITY-LON), AS200130 (DIGITALOCEAN-ASN-1).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, rpgwatch.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
Yes, this site has hosted malicious software over the past 90 days. It infected 4 domain(s), including avui.it/, vilas.altervista.org/, sanremo.it/.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:
Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

 

[Couchpotato]

It's affecting me now also as I get blocked every time I visit the site now. I have never got a warning from my anti-virus or other security programs either.

Damn you Google.

 

[Aubrielle]

"In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message."

It does make me wonder...

 

[Myrthos]

Yes I know about that and know about all the other things Google reports about. No malicious software was downloaded however, unless the Google bot think Google's hosted JQuery software is malware.

 

[Myrthos]

just to show you how silly all of this is, here is a piece of code, Google thinks is suspicious:

<img src="http://www.mediarpg.com/ads/banners/banner-16.jpg" alt="Register at GOG through us"/>

Can't fight this really, so for the moment all ads are removed.

 

[Thrasher]

Mediarpg.com is suspect? Why?

 

[jhwisner]

Mediarpg.com is suspect? Why?

According to AVG, which blocks that link automatically, it's because of malformed URL/html. According to Securicheck site scanner - the same thing. Basically it seems the mediarpg servers are serving up something garbled/garbage that is causing scanners to freak out.

 

[Thrasher]

So it's a bug with the virus scanners?