googlemonster
Supreme Member
- Nov 15, 2008
- 1,422
- 527
Weird Backlinks (new backlink tricks?)
- Thread starter googlemonster
- Start date
BlackDiamondfast
Newbie
- May 24, 2010
- 9
- 1
They look fine whats the problem?
googlemonster
Supreme Member
- Nov 15, 2008
- 1,422
- 527
lol what's fine about them? Go to the TLD.
googlemonster
Supreme Member
- Nov 15, 2008
- 1,422
- 527
Entrepreneur
BANNED
- Oct 12, 2007
- 439
- 391
I have to say I have absolutely no idea what you're on about. Maybe you should be more clear. Are these links pointing to you? Are you puzzled by the links of those pages? From what you've said and shown I see nothing strange - beyond the useless spammy sites anyway.
i second this
googlemonster
Supreme Member
- Nov 15, 2008
- 1,422
- 527
^ what he said, no the links aren't pointing to me, but other sites in my niche I see a few patterns: zen cart, phpmyvisites and oscommerce, all these pages are sat on top of random domains such as car tuning, some condom site and a DJ site, a lot are a mishmash of yah00 answers and blogs, heavy outlinking to certain sites. I presume this is automated so wanted to know more.
yahoo answer is for content and I am more than 100% sure it is a RFI because of this:
found at:
This is no longer BH this is hacking read more if you want:
Code:
This content is located in the file at: /languages/english/html_includes/classic/define_main_page.php
You can quickly edit this content via Admin->Tools->Define Pages Editor, and select define_main_page from the pulldown.
NOTE: Always backup the files in /languages/english/html_includes/your_template
Code:
http://www.skirnir.net/test/zen/index.php/?bqlp=family+watch+dogThis is no longer BH this is hacking read more if you want:
Code:
http://en.wikipedia.org/wiki/Remote_File_Inclusion
googlemonster
Supreme Member
- Nov 15, 2008
- 1,422
- 527
I presume multiple file includes :s
googlemonster
Supreme Member
- Nov 15, 2008
- 1,422
- 527
Just a mismash of sites thought thats what I dont get the sites with these links are ranking 1st and 2nd
- May 24, 2010
- 1,024
- 480
absolutely RFI ,
an attacker can search for security fixes on the net , find a security update that literally announce the world that this system have a security hole in it
(google define_main_page.php vulnerability) and now the race begins ... who will strike first ? you can guess it ...
BTW 1 - updating after someone triggered a RFI attack against you is not enough , because even if the hole is sealed the file is already injected. you should restore from a backup .
BTW 2 - there's almost no way of avoiding this (as a webmaster) simply because when you're using a software it might have a security hole , and when it is found - it will get reported and hackers will found out about this (usually when there's a fix)
so the really good way of avoiding this is to be quick to respond and keep your software/platform/web modules updated.
an attacker can search for security fixes on the net , find a security update that literally announce the world that this system have a security hole in it
(google define_main_page.php vulnerability) and now the race begins ... who will strike first ? you can guess it ...
BTW 1 - updating after someone triggered a RFI attack against you is not enough , because even if the hole is sealed the file is already injected. you should restore from a backup .
BTW 2 - there's almost no way of avoiding this (as a webmaster) simply because when you're using a software it might have a security hole , and when it is found - it will get reported and hackers will found out about this (usually when there's a fix)
so the really good way of avoiding this is to be quick to respond and keep your software/platform/web modules updated.