I've been getting script insertions on my site lately and I'm trying to narrow down their entry point. Obviously the forum has to be looked at too.

Sometimes the script insertions are to YAF ASPX files.

I'm trying to figure out though if my database could have gotten hacked and a back door created that way.

One thing I noticed is that when I do "view source" on the YAF support forums I'm getting 4 Scripts that call /scriptresource.axd.

On my boards, I have 11 scripts calling /forum/scriptresource.axd

Is that normal? Or is that a possible problem there? I know the support forums are 1.9.4Beta so I'm not sure how much those line up or not.

I am running YAF 1.9.3.

Yup; basically any includes JS from our code will appear as a scriptresource.axd file. The differences the long hash behind them poitns to the various different files. So thats perfectly normal.

Hope you find out where the problem lies.

---