By brianmeert on

Just found a URL that had been created by an anonymous user on a page on my drupal site. The content was placed at the bottom of the page and linked to livecam.you-sexcam.com/.

When I searched the URL, I found a variety of other Drupal sites that had the same URL listed in the middle of normal content.

Any one else have this problem or know where to look when solving this?

⋅ Categories: Drupal 6.x

Comments

matt blaine’s picture

matt blaine commented

Was it in db content or tpl files. I've helped people with similar before and it was not a drupal flaw but their ftp account had an easy password and they edited the tpl files to add it to every page with one simple addition to the tpl file

bjordan’s picture

bjordan commented

Hello Matt,Sorry for the late response. I work on the same team as brianmeert btw. The only thing that was changed was a mailto link in a pages content, so it would be database content. My hunch is that there was a virus within our network that spammed the site. Nothing in any of the template files was affected, thanks again!