[Imc-cleveland] suspicious script on cleveland indymedia website

mtoups at indymedia.org mtoups at indymedia.org
Mon May 14 20:06:43 UTC 2007


Hi Cleveland IMC,

I was checking out the great radio show "Community Matters" the other day 
and the NoScript firefox extension in my browser noticed that the site was 
trying to load some javascript code.  I looked closer and it turns out 
that this line is included in every article page (but not the front page):

<script src="http://lesbians-porn-free.1us-search.org/partner/V8853PC3I2PC0699P.js"></script>

This occurs in the file article_header.inc which is included in every 
article page.  As far as I know the only way to change that include is 
through the admin interface "CSS,INCLUDE, TEMPLATE" section, or by editing 
the file on the server side.  Did someone do this on purpose?  From what I 
can tell the script is just doing some referrer tricks to boost the 
pagerank of some prescription drug sites, essentially a type of spam.

As one of the folks in Pittsburgh maintaining the server hosting 
cleveland.indymedia.org, I can remove this line, but I wanted to check 
with yall about how it got there.  Any ideas?

thanks,

Matt Toups
Pittsburgh Indymedia


More information about the Imc-cleveland mailing list