Vulnerability Development mailing list archives

Re: The Hazard of using 'printer friendly' functions on commercial sites


From: xm <xm () while1 org>
Date: Mon, 29 Apr 2002 20:09:01 -0400 (EDT)

On Mon, 29 Apr 2002, Max Kennedy wrote:

I first noticed www.worldnetdaily.com and www.drudgereport.com doing this
to yahoo news.

Both of these sites are high volume sites that make their money by linking to
stories.  By adding '&printer=1"  to links, about 90% of yahoo's ads are
removed.  This means that yahoo serves the stories, but doesn't get paid.

I'd be pretty easy to redirect to the original story with ads if the
referer is anything besides the original. Here's a perl thing that should
check for bad referers

if(($ENV{HTTP_REFERER} ne '')&&(!($ENV{HTTP_REFERER} =~ /^http:\/\/($host).*/)))

where $host is the domain of your site.

-- 
xm () while1 net           (http://while1.net/)


Current thread: