Website search result link redirects to porn sites

[archaugust]

How is it that search engine result links to some sites redirect to porn sites?

Right now I have this problem on one of my sites, <removed>. Try searching it on Google, Yahoo or MSN. Clicking on the link redirects to a porn site. However the site has no problems getting accessed through other search engines (ask, altavista, etc.).

How do I fix this? Please help, thanks.

[ctabuk]

Just a word of caution. We don't object to the question in principle. But if you do follow the link through - it may have reprocussions on your viewing history. So I suggest replies should be generalised. David

[archaugust]

Ok so should I say take my word for it that clicking on the result link to my site from the top 3 SEs redirects to a porn site so don't click. This is embarrassing for us since we have some executive people searching the site and this is what they get.

Anyone here familiar with this problem and how to fix it? Is this a problem on the top 3 SE's side?

[wige]

First, NOBODY TRY THIS!

DO NOT FOLLOW THE LINK!

Forget the porn, its the viruses that'll get you.

Second, archaugust, bad news. Your site/server has been hacked.

The way I know this is I have seen this exact attack before. The way the attack works is as follows:

If someone comes directly to your site, the site works fine. If someone follows a link to your site, the site works fine. If someone follows a link from a search engine, they are redirected to the malicious site. This is an attempt to prevent the attack from being detected - how many webmasters actually search for their own site? This attack is based on the HTTP_REFERER - if the referer tag contains google.com or yahoo.com, the visitor is redirected. I tested this by blocking my referer tag and clicking your site in the SERPS - using that method I was not redirected.

Fixing this is your top priority, because Google and Yahoo are very likely to detect this issue quickly. When they do, your site will be penalized, and may get marked as a malware site.

Generally, the attack uses .htaccess. That should be where the compromise code is. However, there is probably a virus on the server that will simply reapply the attack code when you correct the issue. My first step would be to delete the entire site and restore from a known good backup if possible. Then, get someone very familiar with the server and network security to fix the problem and plug whatever exploit was used to accomplish the attack.

[archaugust]

Thanks a lot, wige. Been looking everywhere for an answer since I wasn't sure where to start. Seems there haven't been many reported cases like this. I'll contact my host again with your suggestions.

And sorry about how I asked about this I didn't think there'd be a lot of considerations when there's porn involved.

[TrafficProducer]

redirect to porn sites?

I had a simular problem some time ago, about last year.

Check the source HTML of the page, and see if it has been hacked to include a redirect to the porn site in the head.

The only way I fixed it, (the host was no help), was:-

a) Change hosts

b) Increase password length, strength, to 25 characters, mixed.. That is something like ;j8Tyi786%&^%76t