Forum Moderators: phranque

Message Too Old, No Replies

Hardening a site against page jacking

How to do it?

         

martingale

8:01 pm on Mar 7, 2005 (gmt 0)

10+ Year Member



So there are lots of threads about what to do once you have been page jacked. My site has not been page-jacked, and I'd like to keep it that way. What can I do to harden my site against this kind of attack?

I have heard I should ban all of China, but that seems like a stopgap solution. I've also heard that some randomly varying content on every page will stop it by making sure your page never looks exactly the same as the page jacker's copy of it.

What works best?

jdMorgan

10:19 pm on Mar 7, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



The problem with the 302-page-jacking we've discussed here is that there is no good solution that does not depend on the search engines 'geting it right' as to the real 'owner' of a page.

About all you can do at this time, until all of the major search engines perfect their algorithms, is to keep an eye on your search terms. If you find a page that's being page-jacked, then change its name and the links to it on your site, and hope for the best.

The problem is that this 'page-jacking' is in fact a result of the search engines doing exactly what the HTTP specification says they should do -- When they find a 302, they keep the URL they got the 302 redirect response from, but index the contents of the URL given in that 302 response. This is why its up to the search engines to resolve the problem; the originators of the HTTP protocol did not foresee link-popularity or PageRank, and so could not envision possible abuses of the 302 redirect.

Jim