Fending off spammers
Sunday, January 21, 2007 | Permalink
If you visited this site this morning or yesterday night and found that you was redirected to another site, please do a virus scan on your system.
Apparently a spammer was able to squeeze in a javascript into his name tag in the comments. Unfortunately, I didn't have the security check for the name field as I have for the comment field. Thus the script was included in the regular html code, causing all visitors to the main page to get redirected to the spammer's site. As I got redirected this morning my antivirus program immediately alerted me as I arrived at the spammer's place and it tried to plant a virus on my machine. For those of you that don't have a antivirus program or don't have it configured to continuously guard your files, you probably got infected if you went there.
I have now fixed the security hole and as a further step to fend of spammers you'll now have to enter a code when you comment. This should be very quick and not be a problem for regular posters and hopefully block most spam bots.
[
8 comments |
Last comment by SqR00T (2007-02-05 12:10:49) ]