Solved Spam in internal Kunena forum

Thank you for your configuration report. I would like to suggest a couple of small changes to the forum integration plugin settings (as indicated in red below):

Kunena - AlphaUserPoints Disabled
Kunena - Community Builder Disabled
Kunena - Gravatar Disabled
Kunena - JomSocial Enabled: Disabled
Kunena - Joomla Enabled: access=1 login=1
Kunena - Kunena Enabled: avatar=1 profile=1
Kunena - UddeIM Enabled: private=1

You have a lovely website and, I agree, it's not good when you get spam messages posted in your forum. I am still trying to find the source of the problem you seem to be having. The problem is not that someone posted a spam message; the problem is

hotch wrote:

When I edit the topic and delete the link it will still appear in the topic after saving.

The issue is not so much about "spam in the forum"; the issue is about how you how you "[edited] the topic and [deleted] the link and [the deleted information] still appears in the topic after saving".

It would be a great help if you could show me exactly which topic contains the message that you are trying to edit. I understand that your forum is restricted to logged-in members of your community but, if you have a test account that we could use, we could save a lot of time if we were able to see for ourselves this problem that you are trying to fix.

Therefore, I am asking if you can post here

1. the URL of the topic that contains the spam; and
2. username/password details of a test account that we can use to access this topic; you can use the following BBcode to post that information here:
   Code:

   [confidential]Username Password:[/confidential]

The sooner we get this information, the sooner we will be able to find why it seems you are not able to fix your problem.

I had a closer look at your website. The spam links - "buy v****a s*****s" (and there are others) - was not put there by Kunena.

This is not a Kunena problem.

The link appears on other pages on your website, too.

It appears that someone installed a module on your website that generates links at random on certain pages.

This module modifies the "About the club" menu item.

It looks to me that your website has been hacked.

@sozzled
You were right. The website was hacked.

The Joomla file /includes/application.php was modified and loaded joomla_rss.php with base64 encoded malicious code. Thus the links were generated.

A freelance helped me to get rid of all this stuff.