Page with no links in admin section turns up in Alexa search

And sends 700 emails out!

[surfgatinho]

Yesterday I suddenly realised my mailing script in the (un-password protected) admin section of a relatively new site had been fired.
On looking at the logs I traced it to a search from Alexa for hotmail, yahoo etc.

What I am wondering is how the **** did it get there? I said the admin section wasn't password protected but there was an .htaccess rule that would redirect anything short of typing in the actual url of the script would be redirected.

And no I don't have an Alexa toolbar installed.

Something that has just occurred to me though is I do have a Alexa ranking bar installed on Firefox - I will be truly shocked if this is reporting data back though

[encyclo]

There are many bots looking for common file names of mailing scripts, they probably hit lucky with your site. Other than that, it's usually impossible to tell, it can come from public logs too when they show referrers.

The answer is to always password-protect, and to stop running spyware-esque toolbars. ;)