| Post By: member_237306 | Post Date: 2009-10-21 16:54:43 |
name: Wicks to Wax
location: Washington, United States

member since: 2009-04-24
member profile
 http://wickstowax.com homelife / products
(481 reviews)
add to favorites
review this site
topics started: 41 replies posted: 204 |
Hijacking
"I would like to know how you know if your website has been hijacked and how you can stop that from happening. Any advise?" |
| | Post By: lola | Post Date: 2009-10-23 08:49:25 |
name: Michael and Pamela
location: Georgia, United States

member since: 2007-05-15
member profile
http://www.dogecho.com homelife / pets
(2445 reviews)
add to favorites
review this site
topics started: 6 replies posted: 3255 |
Your site page/pages url would have a redirect attached/linked to them. Hijackers put a redirect onto your site, so when someone clicks onto your site, the redirect will direct the user to the hijackers page/site. This happened to my site in spring of 2008. The sneaking bas***ds placed encrypted encoded java script onto my site pages which redirected to their site. I had to hire a hijacker/hacker/cracker specialist to actually find the encrypted java script and to get rid of it. Sometimes it is easy to get rid of a hijacker and sometimes like in my case it is done in a very sophisticated way to were everything looks normal with the script, html and/or url of your site. After finding out who the offending site was, I contacted google and google banned the site within days and my site and SERP went back to normal. Hijacking is very common with sites that have a page one SERP for competitive keywords. Having good site security can help prevent this ( can help, but not always). Another good thing to have on all your site pages is a reliable stat meter. Being able to track the traffic and IP's of the traffic is a big help at times ( not always but can help) in actually tracking the hijacker if your site has been hijacked. Bottom line is, if they are determined to hijack,hack and/or crack your site, some are so good that no matter what you do, they can/will do it. That is one of the reasons why learning " Black Hat" tricks of the trade is very important for any serious administrator of a site. There are plenty of sites that will keep you up to date and keep you informed of the hows, whys and in's and out's of black hatting. It is also know as being a White Hat for administration purposes. Here is a link for actual courses you can take to learn how to keep your site safe from black hatters : http://www.blackhat.com
|
| | | Post By: Bada-boom | Post Date: 2009-10-23 15:21:32 |
name: s
location: California, United States

member since: 2006-07-28
member profile
http://www.squidoo.com/collegecash finance / general
(320 reviews)
add to favorites
review this site
topics started: 3 replies posted: 198 |
If your website has been hacked, you would know it. Contact your host and asked what they can do. Many times they have backups and can reinstall it quick. That is, if you are on a first name basis with your host. If not, you are probably out of luck. That's why cheap big hosts are not the best. The best are mom-and-pop ones that give personalized service. You can also go to your cpanel, download your site, then scan the files. But your best bet is your host. And if you are not doing backups yourself, shame on you. If you were, you could easily get back online quick.
|
| | | Post By: member_237306 | Post Date: 2009-10-23 16:11:28 |
name: Wicks to Wax
location: Washington, United States

member since: 2009-04-24
member profile
 http://wickstowax.com homelife / products
(481 reviews)
add to favorites
review this site
topics started: 41 replies posted: 204 |
| Quoted from: lola on 2009-10-23 08:49:25 Your site page/pages url would have a redirect attached/linked to them. Hijackers put a redirect onto your site, so when someone clicks onto your site, the redirect will direct the user to the hijackers page/site. This happened to my site in spring of 2008. The sneaking bas***ds placed encrypted encoded java script onto my site pages which redirected to their site. I had to hire a hijacker/hacker/cracker specialist to actually find the encrypted java script and to get rid of it. Sometimes it is easy to get rid of a hijacker and sometimes like in my case it is done in a very sophisticated way to were everything looks normal with the script, html and/or url of your site. After finding out who the offending site was, I contacted google and google banned the site within days and my site and SERP went back to normal. Hijacking is very common with sites that have a page one SERP for competitive keywords. Having good site security can help prevent this ( can help, but not always). Another good thing to have on all your site pages is a reliable stat meter. Being able to track the traffic and IP's of the traffic is a big help at times ( not always but can help) in actually tracking the hijacker if your site has been hijacked. Bottom line is, if they are determined to hijack,hack and/or crack your site, some are so good that no matter what you do, they can/will do it. That is one of the reasons why learning " Black Hat" tricks of the trade is very important for any serious administrator of a site. There are plenty of sites that will keep you up to date and keep you informed of the hows, whys and in's and out's of black hatting. It is also know as being a White Hat for administration purposes. Here is a link for actual courses you can take to learn how to keep your site safe from black hatters : http://www.blackhat.com |
Thank you Pam!! As always, very helpful and excellent information from one of the "BEST!" I appreciate all your help :)
|
| | Post By: lola | Post Date: 2009-10-23 16:14:49 |
name: Michael and Pamela
location: Georgia, United States

member since: 2007-05-15
member profile
http://www.dogecho.com homelife / pets
(2445 reviews)
add to favorites
review this site
topics started: 6 replies posted: 3255 |
| Quoted from: Bada-boom on 2009-10-23 15:21:32 If your website has been hacked, you would know it. Contact your host and asked what they can do. Many times they have backups and can reinstall it quick. That is, if you are on a first name basis with your host. If not, you are probably out of luck. That's why cheap big hosts are not the best. The best are mom-and-pop ones that give personalized service. You can also go to your cpanel, download your site, then scan the files. But your best bet is your host. And if you are not doing backups yourself, shame on you. If you were, you could easily get back online quick. |
Stephen C - there is a difference between being hacked and being hijacked. Matter of fact there is a big difference in hijacking, hacking and cracking. The Op is asking about HIJACKING, NOT Hacking !Alot of times newbie webmasters can not tell if their site has been hijacked till it is to late. Man, you sure do give out some really bad advice here on LR - advice that has nothing to do with the topic! Back up files will not help your site if your site has been HIJACKED !!!! And don't bring out all your LR squidoo alias's to concur with your post. Leave then under the LR troll bridge !
|
| | Post By: member_261407 | Post Date: 2009-10-23 16:44:09 |
name: Go Green
location: United States

member since: 2009-09-18
member profile
http://www.wickstowax.com shopping / home
(109 reviews)
add to favorites
review this site
topics started: 2 replies posted: 59 |
| Quoted from: lola on 2009-10-23 16:14:49 Stephen C - there is a difference between being hacked and being hijacked. Matter of fact there is a big difference in hijacking, hacking and cracking. The Op is asking about HIJACKING, NOT Hacking ! Alot of times newbie webmasters can not tell if their site has been hijacked till it is to late. Man, you sure do give out some really bad advice here on LR - advice that has nothing to do with the topic! Back up files will not help your site if your site has been HIJACKED !!!! And don't bring out all your LR squidoo alias's to concur with your post. Leave then under the LR troll bridge ! |
LOL Pam, I am sure everyone knows by now that "S" aka: Steven C is on the "WALL OF SPAMMERS" by now and that you are one of the many few to take advice from here on LR.At least...let's hope so. If not, they DO need to pay attention!!
|
| | Post By: kozziebear | Post Date: 2009-10-23 17:57:37 |
name: marie
location: Michigan, United States

member since: 2008-02-29
member profile
http://www.angeltreasuresonline.com shopping / gifts
(888 reviews)
add to favorites
review this site
topics started: 15 replies posted: 968 |
Oh trust me, you will know. I had a webmaster managing my site (until I learned how - and got the help and guidance of someone who knows what he is doing)....who 'forgot' to lock down my site. So, my site got hacked three times. Once we finally got that taken care of - my hosting company got hacked and that is when my site got hijacked - a total redirect to some Japanese basket weaving site. My previous webmaster had told me the hosting company was US based, when in actuality it was based in Georgia (the Country). Guess he didn't understand the difference between the two. It was uuuggglllyyyyy.
|
| | Post By: member_245572 | Post Date: 2009-10-23 18:50:12 |
name: Connie
location: California, United States

member since: 2009-06-16
member profile
http://www.squidoo.com/how-to-be-a-... education / general
(87 reviews)
add to favorites
review this site
topics started: 0 replies posted: 47 |
Hijacking and hacked are one in the same in this thread. A hijacked site would have needed a "hack" of a line of code on your site, either through a mysql injection or some sort. Before you spout off, you need to really know what you are talking about. Hacked to hijack. You cannot hijack a site without some sort of hack. They need to get a line of raw code on your site. Normally done via a weak server or lack of security in the mysql/php code. Going to a website is not going to help. You need an expert to slam the door. Very easy if you are using a newer server and a new version of apache. But some scripts still have holes. But these holes would be plugged by a new server and security precautions. Nobody can "hijack" your site with hacking. Period. The hacking is done automatically using various PROGS. Those of you from the old AOL days probably encountered someone "hijacking" your your session. Again, this hijack was tantamount to hacking. They injected a line of code into a security breach and "hijacked" your session. One and the same. Again, no reason to mix up people with semantics. Bottom line, get a new server, plug the holes. You cannot do this will the big people. They don't care. You need a personal webhost who is an expert on attacks. I guarantee you that LR gets attacked all day long with various ways. But there server has been solid. People need to realize that the internet is constantly barraged by hackers. It keeps people rich coming up with ways of protecting them. There are other ways. Doing a server onslaught does the same thing. Bottom line, hijacking requires injecting a line of code, hence hacked. Your website has now been hacked and a new line of code has been added.
|
| | Post By: member_178646 | Post Date: 2009-10-23 19:02:19 |
name: Mary
location: Colorado, United States

member since: 2008-07-04
member profile
http://www.brush-it-on.com shopping / gifts
(1295 reviews)
add to favorites
review this site
topics started: 10 replies posted: 1607 |
Hi Connie, aka doc, s, tiger, surftiger, Frodo, Sarah, Stephen C. and many others!!! Wondered when one of your alias' was going to show up.....LOL!!! I would never in a million years follow your advice....most of the time it's just soooooo wrong.
|
| | Post By: member_241669 | Post Date: 2009-10-23 19:18:18 |
name: Sgt.
location: California, United States

member since: 2009-05-22
member profile
http://www.squidoo.com/support-for-... homelife / personal
(51 reviews)
add to favorites
review this site
topics started: 0 replies posted: 49 |
Don't follow the advice. Could care less. We are talking words. You cannot hijack a site without hacking into the server. Period. There are many ways. Scripts are vulnerable. But, since you do not own any domains or even care to get real websites, obviously you know nothing. If you have been in this biz for 15+ years, you would know a little something about security exploits. You have to. every site is vulnerable. You rely on your host and server to protect you. Sometimes you win, sometimes you lose. Happens daily. Again, can't hijack without some sort of a hack, either with an exploit that will hack into your server or some other way. All the big sites get hacked and go down. That's why sometimes you swear you were just at a site and now it's down. But just for a second as they clean it up and get back up. Most of the time it happens in the blink of an eye and you never notice. Small websites on public servers are most vulnerable for not getting back up.
|
| | Post By: member_241669 | Post Date: 2009-10-23 19:25:37 |
name: Sgt.
location: California, United States

member since: 2009-05-22
member profile
http://www.squidoo.com/support-for-... homelife / personal
(51 reviews)
add to favorites
review this site
topics started: 0 replies posted: 49 |
For you people who can't focus, here's an easy way. Someone can purposely "hack" into your site, change the code (normally php) and "hijack" your site to whatever they wish. Someone else, normally a group in a foreign country, loves sending out automatic exploits to inject the mysql/php code, hence "hacking" your vulnerable script and or server, adding the code, and "hijacking" your site, all done automatically and blindly as they are just phishing around. So simple a kindergartner could understand it. Lock down your script and server, and voila! No worries.
|
| | Post By: lola | Post Date: 2009-10-23 21:18:25 |
name: Michael and Pamela
location: Georgia, United States

member since: 2007-05-15
member profile
http://www.dogecho.com homelife / pets
(2445 reviews)
add to favorites
review this site
topics started: 6 replies posted: 3255 |
| Quoted from: member_245572 on 2009-10-23 18:50:12 Hijacking and hacked are one in the same in this thread. A hijacked site would have needed a "hack" of a line of code on your site, either through a mysql injection or some sort. Before you spout off, you need to really know what you are talking about. Hacked to hijack. You cannot hijack a site without some sort of hack. They need to get a line of raw code on your site. Normally done via a weak server or lack of security in the mysql/php code. Going to a website is not going to help. You need an expert to slam the door. Very easy if you are using a newer server and a new version of apache. But some scripts still have holes. But these holes would be plugged by a new server and security precautions. Nobody can "hijack" your site with hacking. Period. The hacking is done automatically using various PROGS. Those of you from the old AOL days probably encountered someone "hijacking" your your session. Again, this hijack was tantamount to hacking. They injected a line of code into a security breach and "hijacked" your session. One and the same. Again, no reason to mix up people with semantics. Bottom line, get a new server, plug the holes. You cannot do this will the big people. They don't care. You need a personal webhost who is an expert on attacks. I guarantee you that LR gets attacked all day long with various ways. But there server has been solid. People need to realize that the internet is constantly barraged by hackers. It keeps people rich coming up with ways of protecting them. There are other ways. Doing a server onslaught does the same thing. Bottom line, hijacking requires injecting a line of code, hence hacked. Your website has now been hacked and a new line of code has been added. |
Stephen C you troll go back under the LR bridge you don't know crap
|
| | Post By: lola | Post Date: 2009-10-23 21:20:12 |
name: Michael and Pamela
location: Georgia, United States

member since: 2007-05-15
member profile
http://www.dogecho.com homelife / pets
(2445 reviews)
add to favorites
review this site
topics started: 6 replies posted: 3255 |
| Quoted from: member_241669 on 2009-10-23 19:18:18 Don't follow the advice. Could care less. We are talking words. You cannot hijack a site without hacking into the server. Period. There are many ways. Scripts are vulnerable. But, since you do not own any domains or even care to get real websites, obviously you know nothing. If you have been in this biz for 15+ years, you would know a little something about security exploits. You have to. every site is vulnerable. You rely on your host and server to protect you. Sometimes you win, sometimes you lose. Happens daily. Again, can't hijack without some sort of a hack, either with an exploit that will hack into your server or some other way. All the big sites get hacked and go down. That's why sometimes you swear you were just at a site and now it's down. But just for a second as they clean it up and get back up. Most of the time it happens in the blink of an eye and you never notice. Small websites on public servers are most vulnerable for not getting back up. |
Stephen C you nasty troll go back to your hide out under the LR bridge !
|
| | Post By: lola | Post Date: 2009-10-23 21:22:29 |
name: Michael and Pamela
location: Georgia, United States

member since: 2007-05-15
member profile
http://www.dogecho.com homelife / pets
(2445 reviews)
add to favorites
review this site
topics started: 6 replies posted: 3255 |
| Quoted from: member_241669 on 2009-10-23 19:25:37 For you people who can't focus, here's an easy way. Someone can purposely "hack" into your site, change the code (normally php) and "hijack" your site to whatever they wish. Someone else, normally a group in a foreign country, loves sending out automatic exploits to inject the mysql/php code, hence "hacking" your vulnerable script and or server, adding the code, and "hijacking" your site, all done automatically and blindly as they are just phishing around. So simple a kindergartner could understand it. Lock down your script and server, and voila! No worries. |
Go away you nasty, nasty troll !
|
| | | Post By: member_237306 | Post Date: 2009-10-23 21:25:30 |
name: Wicks to Wax
location: Washington, United States

member since: 2009-04-24
member profile
 http://wickstowax.com homelife / products
(481 reviews)
add to favorites
review this site
topics started: 41 replies posted: 204 |
| Quoted from: member_241669 on 2009-10-23 19:25:37 For you people who can't focus, here's an easy way. Someone can purposely "hack" into your site, change the code (normally php) and "hijack" your site to whatever they wish. Someone else, normally a group in a foreign country, loves sending out automatic exploits to inject the mysql/php code, hence "hacking" your vulnerable script and or server, adding the code, and "hijacking" your site, all done automatically and blindly as they are just phishing around. So simple a kindergartner could understand it. Lock down your script and server, and voila! No worries. |
GO AWAY TROLL!!!
|
| | Post By: member_237306 | Post Date: 2009-10-23 21:26:17 |
name: Wicks to Wax
location: Washington, United States

member since: 2009-04-24
member profile
 http://wickstowax.com homelife / products
(481 reviews)
add to favorites
review this site
topics started: 41 replies posted: 204 |
| Quoted from: member_241669 on 2009-10-23 19:25:37 For you people who can't focus, here's an easy way. Someone can purposely "hack" into your site, change the code (normally php) and "hijack" your site to whatever they wish. Someone else, normally a group in a foreign country, loves sending out automatic exploits to inject the mysql/php code, hence "hacking" your vulnerable script and or server, adding the code, and "hijacking" your site, all done automatically and blindly as they are just phishing around. So simple a kindergartner could understand it. Lock down your script and server, and voila! No worries. |
Get to steppin TROLL!! We can't hear you!!
|
| | Post By: lola | Post Date: 2009-10-23 21:33:03 |
name: Michael and Pamela
location: Georgia, United States

member since: 2007-05-15
member profile
http://www.dogecho.com homelife / pets
(2445 reviews)
add to favorites
review this site
topics started: 6 replies posted: 3255 |
| Quoted from: member_241669 on 2009-10-23 19:18:18 Don't follow the advice. Could care less. We are talking words. You cannot hijack a site without hacking into the server. Period. There are many ways. Scripts are vulnerable. But, since you do not own any domains or even care to get real websites, obviously you know nothing. If you have been in this biz for 15+ years, you would know a little something about security exploits. You have to. every site is vulnerable. You rely on your host and server to protect you. Sometimes you win, sometimes you lose. Happens daily. Again, can't hijack without some sort of a hack, either with an exploit that will hack into your server or some other way. All the big sites get hacked and go down. That's why sometimes you swear you were just at a site and now it's down. But just for a second as they clean it up and get back up. Most of the time it happens in the blink of an eye and you never notice. Small websites on public servers are most vulnerable for not getting back up. |
You are one true web troll, I own my own domain - matter of fact I own 15 domains. Plus, I built 15 websites and none of my sites are hosted for free, nor are they with any cheapo server/host. You do not know what you are talking about !Stephen Carr you are nothing but a nasty trash talker - you talk the talk, but can't walk the walk - you are the biggest bully troll on LR and nobody like YOU !!!! You understand that, little squidoo man !!!!!
|
| | Post By: member_266275 | Post Date: 2009-10-24 01:10:09 |
name: Robert
location: Australia

member since: 2009-10-24
member profile
http://www.selfgrowthgiveaway.com/?... health / products
(2 reviews)
add to favorites
review this site
topics started: 0 replies posted: 1 |
I have a simpler solution if we are talking about the same problem. I suspected that one of my blogs was having it's traffic siphoned as I had tracked (through using Statcounter) where my hits were coming from. I got suspicious when all of a sudden my traffic shot up from about 100 a day to about 500 a day overnight! All the traffic was coming from a particular server and all from IPs with consecutive numbers. Then all of a sudden it would drop to 20 to 30 a day with no traffic from Google at all. This is on a PR4 site! So I got a paid service (pretty cheap) that I installed on my computer, with which i was able to block whole swathes of IP addresses and since then, not only has my traffic returned to where it was, it has grown since then quite dramatically and is now consistent. I have subsequently had emails from a person who I had been in touch with just chatting about my site and who had offered articles for me to post. Guess what? His is one of the IP adresses I had blocked! Now I even know who the culprit is!
|
| | Post By: member_144892 | Post Date: 2009-10-24 22:30:33 |
name: Asmodeus
location: Nova Scotia, Canada

member since: 2008-01-14
member profile
http://www.adegreeofsuccess.com money making opportunities / work-at-home
(221 reviews)
add to favorites
review this site
topics started: 47 replies posted: 1657 |
Don't forget that you can block ip's through cpanel as well. There are places on the web with huge free lists of known mass spammers and their IP addresses that you can simply paste into the IP deny manager at cpanel. It got rid of 90% of my referral spam too!
|
| | | Post By: member_257975 | Post Date: 2009-10-25 11:17:50 |
name: Mosaic Adventure
member since: 2009-08-25
member profile
http://trekntour.com/Nepal/Trips/Tr... travel / general
(102 reviews)
add to favorites
review this site
topics started: 21 replies posted: 27 |
| Quoted from: lola on 2009-10-23 08:49:25 Your site page/pages url would have a redirect attached/linked to them. Hijackers put a redirect onto your site, so when someone clicks onto your site, the redirect will direct the user to the hijackers page/site. This happened to my site in spring of 2008. The sneaking bas***ds placed encrypted encoded java script onto my site pages which redirected to their site. I had to hire a hijacker/hacker/cracker specialist to actually find the encrypted java script and to get rid of it. Sometimes it is easy to get rid of a hijacker and sometimes like in my case it is done in a very sophisticated way to were everything looks normal with the script, html and/or url of your site. After finding out who the offending site was, I contacted google and google banned the site within days and my site and SERP went back to normal. Hijacking is very common with sites that have a page one SERP for competitive keywords. Having good site security can help prevent this ( can help, but not always). Another good thing to have on all your site pages is a reliable stat meter. Being able to track the traffic and IP's of the traffic is a big help at times ( not always but can help) in actually tracking the hijacker if your site has been hijacked. Bottom line is, if they are determined to hijack,hack and/or crack your site, some are so good that no matter what you do, they can/will do it. That is one of the reasons why learning " Black Hat" tricks of the trade is very important for any serious administrator of a site. There are plenty of sites that will keep you up to date and keep you informed of the hows, whys and in's and out's of black hatting. It is also know as being a White Hat for administration purposes. Here is a link for actual courses you can take to learn how to keep your site safe from black hatters : http://www.blackhat.com |
thanks for good information
|
| |