Alright, first: olsonraymond is gone, and his posts are gone. Which means the redirects should be gone too. I've searched the source code and DB to make sure the redirect wasn't there by some other means and came up empty. The question I have is does this forum software allow for javascript or something else to be embeded. I'm not up on intrusion methods like I should be so if anyone has some suggestions feel free to pass them on.
Second: reCaptcha wasn't working, and the internal captcha system is weak too, but the number of new signups is decreased compared to before I started mucking with the captcha to begin with. We've had 3 new members and I'm not convinced that they are bots. (1 so far seems legitimate.) If they were, I think I'd be seeing the consequences already. IF something does happen I still have a trick up my sleeve.
If anyone finds a post that is malicious send me a PM and I will take a look right away and nail down whatever it is that's allowing the code to exist.
