Sponsorship contribution hack

[marokech]

There is a very serious probleme in contribution sponsorship email v1.0. Especially with SmartHome contribution. I think this guy thinks that he's really smart, but I'm sure he's gonna be banned;

 

Here is the probleme:

Open files account_sponsorship.php and invitation.php, you'll notice that our friend has put this code that has nothing to do with oscommerce in those files. Please be carefull when using contributions.

 

<title>Smart Home 24 Worldwide</title>

<meta name="DC.Title" content="Smart Home 24 Worldwide">

<meta name="DC.Creator" content="Knut Eric Wingsch">

<meta name="DC.Publisher" content="Knut Eric Wingsch">

 

<meta name="DC.Identifier" content="http://www.smarthome24.eu">

<meta name="DC.Identifier" content="http://www.smarthome24.biz">

<meta name="DC.Identifier" content="http://www.smarthome24.asia">

<meta name="DC.Identifier" content="http://www.smarthome24.mobi">

<meta name="DC.Identifier" content="http://www.smarthome24worldwide.com">

<meta name="DC.Identifier" content="http://www.smarthomeeurope.com">

<meta name="DC.Identifier" content="http://www.smarthomegermany.com">

<meta name="DC.Identifier" content="http://www.smarthomeusa.mobi">

<meta name="DC.Rights" content="Knut Eric Wingsch">

<meta name="page-topic" content="Smart Home 24 Worldwide">

<meta name="description" content="Smart Home 24 Worldwide">

 

<meta name="author" content="Knut Eric Wingsch">

<meta name="robots" content="index,follow">

<meta name="revisit-after" content="2 days">

<link rev="made" content="mailto:[email protected]">

<meta name="publisher" content="Knut Eric Wingsch">

<meta name="copyright" content="Knut Eric Wingsch">

[germ]

The author merely used the files directly from his server for the contribution without removing the site specific content, whether by chance, design, neglect, inexperience, haste, or just plain stupidity.

 

I personally wouldn't refer to it as a "hack".

[marokech]

Hello Jim,

I found this strange because the additionnal code does not exist in the original contribution and is completely useless. It also sends information to the author's email. Furhermore, it's clear that the links present in the contribution are very bad for the website indexation.

[marokech]

Hello Jim,

Thanks for the prompt answer. I found this strange because the additionnal code does not exist in the original contribution and is completely useless. It also sends information to the author's email. Furhermore, it's clear that the links present in the contribution are very bad for the website indexation.

Cheers

[germ]

You've expressed your opinion as have I.

 

Neither one is more valid than the other.

 

They're just opinions.

 

I won't waste my time and forum resources in pointless debate.

[burt]

DC = Dublin Core.

 

http://www.tutorialsonline.info/Common/DublinCore.html