[Imc-cleveland] suspicious script on cleveland indymedia website
mtoups at indymedia.org
mtoups at indymedia.org
Mon May 14 20:06:43 UTC 2007
Hi Cleveland IMC,
I was checking out the great radio show "Community Matters" the other day
and the NoScript firefox extension in my browser noticed that the site was
trying to load some javascript code. I looked closer and it turns out
that this line is included in every article page (but not the front page):
<script src="http://lesbians-porn-free.1us-search.org/partner/V8853PC3I2PC0699P.js"></script>
This occurs in the file article_header.inc which is included in every
article page. As far as I know the only way to change that include is
through the admin interface "CSS,INCLUDE, TEMPLATE" section, or by editing
the file on the server side. Did someone do this on purpose? From what I
can tell the script is just doing some referrer tricks to boost the
pagerank of some prescription drug sites, essentially a type of spam.
As one of the folks in Pittsburgh maintaining the server hosting
cleveland.indymedia.org, I can remove this line, but I wanted to check
with yall about how it got there. Any ideas?
thanks,
Matt Toups
Pittsburgh Indymedia
More information about the Imc-cleveland
mailing list