Bug Redirects can cause huge problems with external links!

Status
Not open for further replies.

MHB

Customer
I was not aware of this for a long time but the external redirect logic in DB SEO makes it such that anyone can use your site to redirect a URL and it will work. There are hundreds of porn sites that have done this and now Google has made the association. The way to stop it is through htaccess. You need to add this:

RedirectMatch 404 ^/redirect-to/.*$

I'm writing to tell others to search Google for your website like this: "website.com/redirect-to/" and see what you get. You might be shocked. This should be fixed immediately and could have already permanently hurt my site's rank on Google.
 

Fillip H.

Staff member
Owner
Developer
No that is not the right option. I don’t recall exactly which settings page it appears in.
 

MHB

Customer
This is not a bug. Your version is vastly out of date, and there is an option to disable this feature in a newer version of this add-on: https://www.dragonbyte-tech.com/store/dragonbyte-seo.303/release/1617/

Hi Filip. I saw that you have semi-addressed this with an update, so that's great news. I think it's something that could easily slip through the cracks though and if you highlighted that admins should check for this exploit, they would really benefit from it. The "redirect-to" style links for my site are so numerous and I had no idea about them at all until today. I was able to patch it but what about those who don't know? Isn't an email about this the right thing to do, especially since you can turn it off now with your product?

I would still say that the ability to use this functionality without using the base forum is a flaw. What this is effectively is a stand alone redirect function for any site. Ideally it would only work if the link exists on the forum URL. Anywhere else it wouldn't work.

Imagine I blasted the internet with "dbtech.com/redirect-to/TERRIBLE_SITE_1" and did that 100,000 times. You'd be upset right?
 

DragonByte Technologies

Company Information
Staff member
Company Info
Hello @MHB,

We hope your ticket regarding DragonByte SEO has been addressed to your satisfaction. This ticket has now been scheduled to be closed.

If your ticket has not been resolved, you can reply to this thread at any point in the next 7 days in order to reopen the ticket, afterwards this thread will be closed.

Please do not reply to this thread if your ticket has been resolved.

Thank you.


- DragonByte Technologies, Ltd.
 

DragonByte Technologies

Company Information
Staff member
Company Info
Hello @MHB,

As we have not heard back from you, your ticket regarding DragonByte SEO has now been closed.

If your ticket has not been resolved, please feel free to start a new support ticket and link back to this ticket.

Thank you.


- DragonByte Technologies, Ltd.
 
Status
Not open for further replies.

DragonByte SEO

vBulletin 3.8.x vBulletin 4.x.x
Seller
DragonByte Technologies
Release date
Last update
Total downloads
7,141
Customer rating
5.00 star(s) 1 ratings
Top