Theme by iThinkMedia.com footer - Beacon for Hackers?  Bottom

Go to page 1 - 2 [+1]:

  • Call me paranoid, but I like to keep a low profile when it comes to exposing my CMS on google. Mainly because I had a major spam problem in the past with our earlier comment system.

    I have a fairly popular site, so google indexes me at the top for a few things. One being the footer for the Zikula template Seabreeze just after two days.

    I come up #2 on google for a search for the footer message.

    http://www.google.co…earch&aq=f&oq=&aqi=

    I don't mind entering a link in my web links area to give iThinkMedia credit. In fact that's what I would like to do so I can re-word the message and make it harder for my site to pop up so easily. Can anyone point me to the HTML file location to edit the footer?

    I'm new to CSS and it seems that my editing of certain files within the theme directory didn't give me any results - so I think I'm looking in the wrong place. Any help is greatly appreciated. wink
  • the file you want to edit is

    /themes/SeaBreeze/lang/eng/global.php

    the last line (probably)
  • Excellent, thank you Craigh - edited it and fixed it. Will make the permanent change later icon_smile
  • Ha! My site comes up first on that list :D

    Hasn't been hacked since the .714 days...
  • bronto

    Ha! My site comes up first on that list :D

    Hasn't been hacked since the .714 days...


    That's good to know icon_lol
  • Personally, I think Seabreeze should be revamped or removed from the next release of Zikula. It suffers from major bloat.
  • Looks like this thread is #1 on that list now....
  • Too funny. Well, one good thing about that is that others will quickly find out how to modify the footers. As for Seabreeze being bloated, for me it is the only theme that's worked well with the upgrade to Zikula. The other themes I've tried made most of the inserted block images show up in crazy positions, have borders etc.

    Seabreeze ended up working best for me, but I'm definitely up for trying something new if it is easy enough for me to work with.

    Got any suggestions for nice 3 row themes Darryl?
  • one of the latest and nice themes IMHO is KeepItSimple:
    http://www.blanktheme.org/KeepItSimple

    You can download it here.

    --
    - Mateo T. -
    Mis principios... son mis fines
  • How on earth is a backlink a "beacon for hackers" exactly? Hackers can only exploit vulnerable software, so if you have a spam issue or whatever then you need to lock down your site and make sure you have everything up to date. If there are issues report bug with the authors of whatever you are running.

    To be quite clear about it, spammers don't search for backlinks to find vulnerable software, they search URL patterns using search engines and by URL patterns I mean the top link entered into the browser. There are other ways of harvesting vulnerable sites too, but really, they don't involve searching backlinks on a site simply because it's not a reliable method. Spammers use completely automated methods and just pulling backlinks to www.ithinkmedia.com would pull plenty useless results. Spamming is a science, they make tremendous amounts of money doing so and believe me, the hackers behind exploits aren't careless or inefficient in the slightest.

    Hope this help clarifies the matter.

    Drak

    --
    Zikula Lead Developer
    Board Member of the Zikula Foundation
    Follow me on twitter.com/zikuladrak
  • animateclay

    Seabreeze ended up working best for me, but I'm definitely up for trying something new if it is easy enough for me to work with.

    Got any suggestions for nice 3 row themes Darryl?


    If you want a web 1.0 theme "from the 90's" with bonus animated "e-mail me" icons, then I'm your guy.

    There's a plethora of well done themes in the downloads section of this web site.
  • OT: @Darryl - Nice looking box of cigars!

    --
    Zikula Lead Developer
    Board Member of the Zikula Foundation
    Follow me on twitter.com/zikuladrak
  • drak

    How on earth is a backlink a "beacon for hackers" exactly? Hackers can only exploit vulnerable software, so if you have a spam issue or whatever then you need to lock down your site and make sure you have everything up to date. If there are issues report bug with the authors of whatever you are running.

    To be quite clear about it, spammers don't search for backlinks to find vulnerable software, they search URL patterns using search engines and by URL patterns I mean the top link entered into the browser. There are other ways of harvesting vulnerable sites too, but really, they don't involve searching backlinks on a site simply because it's not a reliable method. Spammers use completely automated methods and just pulling backlinks to www.ithinkmedia.com would pull plenty useless results. Spamming is a science, they make tremendous amounts of money doing so and believe me, the hackers behind exploits aren't careless or inefficient in the slightest.

    Hope this help clarifies the matter.

    Drak


    Well not being a spammy person myself, my guess is if you have some sort of code to insert spam messages into a zikula/postnuke based site, you could sniff out sites based on the footers that they all have in common. I see that I'm probably wrong in my way of thinking because I don't understand it too well.

    The reason for me being paranoid was my site got hit super hard by comment spam, I see now with EZ Comments they implimented the new Akismet spam filter which is great! I am using it now and just from an initial test it's working out perfect.
  • As Drak already stated, the vast majority of spam comes from professional organizations, who employ top programmers and adapt their tools (viruses, malware, rootkits, bot nets, ...) every day. Hiding type and version of your operating system, PHP, MySQL and Zikula is useless, but unfortunately the "security" myth is still spread among admins that you should do so. Avoiding back links falls into exactly the same category.

    Greetings,
    Chris

    --
    an operating system must operate
    development is life
    my repo
  • I have to disagree on that obfuscation is useless.

    Most hackers who want to use some 0-day exploit will scan the net for versions.
    Obfuscation can give you the 2 or 3 days time you need to upgrade your system, for example if you've just been away for the weekend.
    It will not work in the long run, but it gives you a small chance of not being hacked in the first hours, and it is easy to do.



    edited by: manarak, Jul 06, 2009 - 10:40 PM

Go to page 1 - 2 [+1]:

  • 0 users

This list is based on users active over the last 60 minutes.