Watch out for weird code in your pages
August 5th, 2008 by Andreas from Xavier MediaOn the first of August the Xavier Media blog mention a hack of a Swedish online bookstore that caused the web site to distribute malware.
Since most of us are extremly dependent on our web sites it’s important to check out your own web site to make sure it’s not scarying your visitors away. This is when the tips mentioned in Keep an eye on your site comes in handy for any web site or blog owner:
- Make sure you always update your blog software and other scripts you got on your site to the latest version when a new security fix is released.
- Secure your own PHP code so you’re not going to end up as a victim for SQL injections.
- Test your site at Google’s Safebrowsing site to see if they’ve found something suspicious: http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-EN&site=http://www.sampleaddress.com/
Replace www.sampleaddress.com with your own site. - Check your site at for example McAfees SiteAdvisor.com every now and then
You should also check your static HTML pages (or any other page including HTML code) for javascript codes you haven’t added yourself because today I found this piece of code in one of my customers pages:
<!– o –><script language=’JavaScript’>
Some weird characters here
</script><!– c –>
This code was found directly after the first <BODY> tag and notice the <!– o –> and <!– c –> tags found around the javascript code.
Popularity: 15% [?]
No related posts
September 5th, 2008 at 9:37 am
[...] and other ways that may destroy your site or make your site function in an unwanted way (like the Bokia.se case). Rate this: 3.5 You may also be interested in… Back-up your data before it’s too [...]
September 10th, 2008 at 6:21 am
Yes, great article/blog post. My site was hacked about 2 years ago when some strange code was injected and a unknown.html file strangely appeared on my server. This file contained viruses, scaring away millions of visitors and spreading unwanted viruses. Luckily I had a nice old backup I backed up the day before (Luckily!!!) and so I restored everything. I also lost a lot of great comments and trust by my visitors.
I explained everything to everyone and I’m now picking up the peaces. My advice is BACKUP!! If you post a lot and have a lot of visitors commenting every day then you should backup your databases and site every single day. Spend some time on it, it really does not take that long.
The viruses was backdoors (those things that allows hackers to enter your computer, its like a invitation), most users (hopefully) has a great anti-virus like Bitdefender, Kasperksky or various others, those also helps.
Good Luck and Thanks for the great post.
By the way here is my site: http://www.blackslash.net