Bug Redirects can cause huge problems with external links!

[MHB]

I was not aware of this for a long time but the external redirect logic in DB SEO makes it such that anyone can use your site to redirect a URL and it will work. There are hundreds of porn sites that have done this and now Google has made the association. The way to stop it is through htaccess. You need to add this:

RedirectMatch 404 ^/redirect-to/.*$

I'm writing to tell others to search Google for your website like this: "website.com/redirect-to/" and see what you get. You might be shocked. This should be fixed immediately and could have already permanently hurt my site's rank on Google.

 

[Fillip H.]

This is not a bug. Your version is vastly out of date, and there is an option to disable this feature in a newer version of this add-on: https://www.dragonbyte-tech.com/store/dragonbyte-seo.303/release/1617/

 

[3dpoder]

Where this option is changed.
Where to remove the redirect to?

 

[3dpoder]

Its correct?

 

[Fillip H.]

No that is not the right option. I don’t recall exactly which settings page it appears in.

 

[MHB]

This is not a bug. Your version is vastly out of date, and there is an option to disable this feature in a newer version of this add-on: https://www.dragonbyte-tech.com/store/dragonbyte-seo.303/release/1617/

Hi Filip. I saw that you have semi-addressed this with an update, so that's great news. I think it's something that could easily slip through the cracks though and if you highlighted that admins should check for this exploit, they would really benefit from it. The "redirect-to" style links for my site are so numerous and I had no idea about them at all until today. I was able to patch it but what about those who don't know? Isn't an email about this the right thing to do, especially since you can turn it off now with your product?

I would still say that the ability to use this functionality without using the base forum is a flaw. What this is effectively is a stand alone redirect function for any site. Ideally it would only work if the link exists on the forum URL. Anywhere else it wouldn't work.

Imagine I blasted the internet with "dbtech.com/redirect-to/TERRIBLE_SITE_1" and did that 100,000 times. You'd be upset right?

 

[3dpoder]

What do you not remember?
And who do I have to ask?

 

[3dpoder]

is this option?
Is it correct like this?

 

[Fillip H.]

That is the correct setting to change, yes

 

[DragonByte Technologies]

Hello @MHB,

We hope your ticket regarding DragonByte SEO has been addressed to your satisfaction. This ticket has now been scheduled to be closed.

If your ticket has not been resolved, you can reply to this thread at any point in the next 7 days in order to reopen the ticket, afterwards this thread will be closed.

Please do not reply to this thread if your ticket has been resolved.

Thank you.


- DragonByte Technologies, Ltd.

 

[DragonByte Technologies]

Hello @MHB,

As we have not heard back from you, your ticket regarding DragonByte SEO has now been closed.

If your ticket has not been resolved, please feel free to start a new support ticket and link back to this ticket.

Thank you.


- DragonByte Technologies, Ltd.