Ace of Spades Game Forums » Topic: Ben -> code injection on the site by theme

StackOverflow on "Ben -> code injection on the site by theme"

StackOverflow — Sun, 19 Jun 2011 10:52:05 +0000

Just found another one on this page underneath the bbcrumb class. Just like before, it's in a hidden <span> tag. Here's a screenshot.

MegaDeuce on "Ben -> code injection on the site by theme"

MegaDeuce — Sun, 19 Jun 2011 01:11:51 +0000

Sooooo, it turns out "oral jelly" is exactly as horrible as it sounds.

bcoolface on "Ben -> code injection on the site by theme"

bcoolface — Sat, 18 Jun 2011 22:59:28 +0000

Thanks, I just removed that span from from the forum theme... it does look like an underhanded SEO trick but nothing malicious.

danhezee on "Ben -> code injection on the site by theme"

danhezee — Sat, 18 Jun 2011 22:55:15 +0000

"www.kamagraoraljelly.org" is the number one result for oral jelly. Our culprit doesnt rank on the first page

StackOverflow on "Ben -> code injection on the site by theme"

StackOverflow — Sat, 18 Jun 2011 22:51:22 +0000

@danhezee, exactly. It seems it's working to a pretty good extent too.

danhezee on "Ben -> code injection on the site by theme"

danhezee — Sat, 18 Jun 2011 22:46:11 +0000

I think this is blackhat SEO tricks

Morthor on "Ben -> code injection on the site by theme"

Morthor — Sat, 18 Jun 2011 22:42:08 +0000

The creator of the theme is trying to make the link appear lots of times, making it more valuable to search engines.

StackOverflow on "Ben -> code injection on the site by theme"

StackOverflow — Sat, 18 Jun 2011 22:34:34 +0000

It's not malicious per se, considering the entire span is hidden, but it's a bit suspicious. It seems the original creator of the default theme (Scoun) inserted it in there.

KwF_10se1ucgo_x on "Ben -> code injection on the site by theme"

KwF_10se1ucgo_x — Sat, 18 Jun 2011 22:33:11 +0000

@Morthor
its pronounced TEN-s-e-1-u-c-GO
@Both
Err then how is that malicious?

StackOverflow on "Ben -> code injection on the site by theme"

StackOverflow — Sat, 18 Jun 2011 22:32:24 +0000

@Lexsym, maybe that's how the game is still free.

Lexsym on "Ben -> code injection on the site by theme"

Lexsym — Sat, 18 Jun 2011 22:31:50 +0000

I bet ben just wants us to buy oral jelly >.>

StackOverflow on "Ben -> code injection on the site by theme"

StackOverflow — Sat, 18 Jun 2011 22:31:22 +0000

The <span> tag is an HTML tag that essentially has no value on it's own, but can be styled with CSS.

Edit: Morthor beat me :P

Morthor on "Ben -> code injection on the site by theme"

Morthor — Sat, 18 Jun 2011 22:31:02 +0000

It was Stackoverflow that found it.
@10se1ucgoreallywierdnicknametospell:
the span tag is used mostly to give certain CSS styles to parts of text (font, color, size, etc.).

KwF_10se1ucgo_x on "Ben -> code injection on the site by theme"

KwF_10se1ucgo_x — Sat, 18 Jun 2011 22:28:01 +0000

forgive me for being stupid but what is the < span > tag?

StackOverflow on "Ben -> code injection on the site by theme"

StackOverflow — Sat, 18 Jun 2011 22:22:16 +0000

I won't post a direct link, but here's a screenshot.

Kaede-chan (かえでーちゃん) on "Ben -> code injection on the site by theme"

Kaede-chan (かえでーちゃん) — Sat, 18 Jun 2011 22:17:02 +0000

Was it doing anything malicious?

StackOverflow on "Ben -> code injection on the site by theme"

StackOverflow — Sat, 18 Jun 2011 22:00:41 +0000

I found it while looking through the source while working on my custom forum theme.

Datel on "Ben -> code injection on the site by theme"

Datel — Sat, 18 Jun 2011 21:28:56 +0000

how did you find this lol

Morthor on "Ben -> code injection on the site by theme"

Morthor — Sat, 18 Jun 2011 21:25:58 +0000

Vheck the source code of the forum and notice there's a <span> injected with a link.