How can spammers do this redirect via my domain?

3 replies
Hi,

How is it possible for a spammer to do this redirect to their shop:

mydomain / myblog /?action=shop

via my domain?


How does this work: ?action=shop

Could it be using an existing script on my site/blog?

How can I prevent it from redirecting?

Could someone have slipped in code via my blog comment forms?

Thanks!
#domain #redirect #spammers
  • Profile picture of the author Adam Struve
    If your comment system doesn't filter out javascript or xss attacks that could very well be what is causing it.
    {{ DiscussionBoard.errors[3591766].message }}
  • Profile picture of the author P3 Marketing
    If you've manually coded it in PHP, you can just use htmlspecialchars() to sanitize all html that is passed through your comment form.
    {{ DiscussionBoard.errors[3591840].message }}
  • Profile picture of the author 1babywarrior
    yup, could very well be a php or java inject via the comment box. Akismet is an awesome filter for all form spam and is a free plugin, consider installing it if you haven't already done so. Also you can just delete/flush the spam from the admin section of course...
    {{ DiscussionBoard.errors[3592762].message }}

Trending Topics