hello again,

many new information.

its not directly a dolphin problem but dolphin is the way to hack server. "allow_URL_fopen" is needed for orca forum and about this the hacker can heacked a server.

they are using this file:
plugins/safehtml/HTMLSax3.php

ip from hacker was this one:
http://private.dnsstuff.com/tools/ipall.ch?domain=189.56.100.76

our solution!
edit the .htaccess file add add this:

RewriteEngine On
RewriteCond %{QUERY_STRING} (.*)=http(.*) [NC,OR]
RewriteCond see more %{QUERY_STRING} (.*)urlx=(.*) [NC]
RewriteRule ^(.*) - [F]

with this they can not include a file which is not on the server.

and you can block the ip.

best regards