Found Bad Link while looking at my Page Source

Discussion in 'Security' started by kjh-08, Oct 14, 2010.

  1. #1
    Wondering if anyone could help me figure out how to find and get rid of a Bad link. I just happened to look at my site's page source and found a link to a Viagra site in it. Don't have a clue how long it's been there or how to find it and get rid of it.

    Any help would be greatly appreciated.
    Thanks
     
    kjh-08, Oct 14, 2010 IP
  2. GWiz

    GWiz Peon

    Messages:
    359
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Well you need to access the file in question, and then remove the links manually if they are hardcoded. So you will need some kind of FTP program to connect to your server where the files are hosted and then download the file and make the changes, then reupload.
     
    GWiz, Oct 14, 2010 IP
  3. ramsarvan

    ramsarvan Greenhorn

    Messages:
    59
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    16
    #3
    ya,
    first download your file and open it in dreamweaver. Then find for that link,

    remove it. And finally save your file and upload it.
     
    ramsarvan, Oct 14, 2010 IP
  4. mcfox

    mcfox Wind Maker

    Messages:
    7,526
    Likes Received:
    716
    Best Answers:
    0
    Trophy Points:
    360
    #4
    There's a security hole somewhere. Bottom line is that unless you can close it, the bad link will be back almost as soon as you upload a clean version of the page.

    What type of site is it? Wordpress? eCommerce? Simple html? What?
     
    mcfox, Oct 15, 2010 IP
  5. kjh-08

    kjh-08 Well-Known Member

    Messages:
    980
    Likes Received:
    92
    Best Answers:
    11
    Trophy Points:
    130
    #5
    It's a Wordpress site. I've looked in files for it but can't find it.
     
    kjh-08, Oct 15, 2010 IP
  6. mcfox

    mcfox Wind Maker

    Messages:
    7,526
    Likes Received:
    716
    Best Answers:
    0
    Trophy Points:
    360
    #6
    Probably a Base64 thing going on - this is injected into your core WP files. As I said in my PM, if you are running any warez, e.g. a ripped template or a cracked autoblogging plugin this can be a source of this type intrusion. Not sure if you are or not, just saying for anyone reading this.

    Obviously, you have to be running the latest version of WP, etc.
     
    mcfox, Oct 15, 2010 IP