View Single Post
Old 06-22-2009, 03:47 PM  
Tempest
Too lazy to set a custom title
 
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
Quote:
Originally Posted by V_RocKs View Post
I think I just stumbled upon the best theory... Thanks to http://www.scarecrowmovies.com/ for posting his logs online.

There are a lot of pharmacy spammers that are using st.php to get to their URL's...

Example:
http://www.scarecrowmovies.com/st/st.../mirror/32238/

So I believe Google decided to screw anyone with st.php and url on the page. This doesn't mean other scripts are not susceptible to this same attack. It just means some Russian idiot decided to target ST since it is the most widely available script.
If true then that sucks as there's no good way to block it. i.e. if you use mod_rewrite to only allow your domain as the referer then you loose all the people surfing with no referer. Everyone could rename st.php to something random I suppose. Or perhaps a "session" key inserted into the url but that would have to come from smart scripts.
Tempest is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote