Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Backlinks injected in code

Status
Not open for further replies.

Tiffc0922

Technical User
Mar 27, 2014
15
US
Hello,

We've had quite the issue with websites that have injected their backlinks into the code of our webpage. As of right now, we haven't been able to remove them so a new website was built from the framework up, however we still have the name domain name, just a new ip. Is there any way to remove the backlinks so they don't keeping causing our site to be marked as spam? Would a 3010 redirect help?

Tiffany
 
Would a 3010 redirect help?

Nope, how do you hope to redirect URLs that do not actually point to your website?

If code is being 'injected' to your documents, then your site or the server has an exploitable flaw, so the "right" way is to prevent them being injected in the first place, prevention is far better than cure.

How and where are the links being placed in the code?

Chris.

Indifference will be the downfall of mankind, but who cares?
Time flies like an arrow, however, fruit flies like a banana.
Webmaster Forum
 
Chris,

Thanks for the quick reply... here's the thing. We used to outsource our website, seo, marketing, etc. since bringing it in house, our web guy has told us that over the course of years and many hands, each programmer has left a back door open, allowing them to link off our page. Now I can't confirm that this is true or if our guy has maybe caused some of the turmoil trying to get us top rankings on google. We had an issue a few weeks back where, all our company emails were being rejected as spam, the fix was supposed to be releasing our new website, which only changed the ip and not the domain.. it seems like this did fix our issue but I'm guessing for only so long.

I'm not familiar with website programming and such, I'm just trying to determine if what we are being told is true and what the best option for our company to do. I appreciate all any insight you can provide. Thanks!!! :)

Tiffany
 
Forget about chasing "rankings", what you see is NOT what anyone else sees, and by faffing about with what YOU think is the cause, is more likely to harm than help.

We had an issue a few weeks back where, all our company emails were being rejected as spam,
Absolutely nothing at all to do with search traffic or search engines, but if the exploit was allowing the "crackers" to sent emails via your server could cause such a problem. Most email provider do not block using domain name as it is all too easy for spammers to "spoof" the domain name.

since bringing it in house, our web guy has told us that over the course of years and many hands, each programmer has left a back door open,
Unless your site uses some badly written server-side code or the hosting company is one of the bigger providers with a less than perfect record of security I would not be overly concerned, it's one of these 'scare tactics' that 'techies' like to throw in to conversations with humans, it is supposed to engender "trust" when really it means they have nothing useful to offer as to what the problem actually is so they try to cast blame elsewhere.
Unless you were really unlucky or "out sourced" the work without due diligence as to whom you were hiring as developers, it is more likely the exploit was in the hosting control panel.
Crackers and spammers very rarely 'break' bespoke software, simply because they do not have the code to test for a weakness, exploitable flaws or 'back doors', so they would rather go for the easier targets of code that is freely available for 'testing'.
Changing IPs probably also means changing servers which has "left behind" the exploit, so you should be looking at your server logs to see what URLs are being access by IPs from countries which are not really in your target market, South America and South East Asia are where the majority of attacks are from currently.

The other cause of the "rankings" drop is probably because your site URLs have all changed, this is where you should be redirecting old URLs to the equivalent new ones.


Chris.

Indifference will be the downfall of mankind, but who cares?
Time flies like an arrow, however, fruit flies like a banana.
Webmaster Forum
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top