Comments on: Top Commentators Link Hijack Vulnerability

By: A Joyful Path » Blog Archive » I DID get hacked

A Joyful Path » Blog Archive » I DID get hacked — Sun, 25 Oct 2009 15:16:45 +0000

[...] Jen about it. She asked me again which widget this was I’d recently installed and pulled up Top Commentators Linked to Hijack Vulnerability to show [...]

By: Lori

Lori — Sun, 23 Aug 2009 13:20:04 +0000

Thanks for that I think that the issue is fixed in the new version of the plugin
.-= Lori´s last blog ..?????? ? ????? "??????? ????? 2009" =-.

By: drivelocity

drivelocity — Thu, 11 Jun 2009 13:56:13 +0000

You’re welcome! I’m glad I could help. To be honest, the other plugin may have been updated since this post & the issue may be resolved. If I find the time, I’ll try it on a test blog…

By: Lithiummind

Lithiummind — Thu, 11 Jun 2009 09:37:04 +0000

Thanks for the GREAT TIP. I installed the first plugin and then stumble upon your blog. Now I have switch my plugin to the one by SarahG Lithiummind´s last blog post..Google Adsense Payment In More Countries

By: drivelocity

drivelocity — Wed, 22 Apr 2009 18:25:59 +0000

Thanks for the update Lorna! I noticed my link had been hijacked on someone else’s blog recently, so hopefully they’ll update their plugin!

By: Lorna

Lorna — Wed, 22 Apr 2009 05:18:02 +0000

I only stumbled on your post today, so I apologize for the late feedback. The link hijack issue caused by using the plugin is solved in the widget IF you're using version 1.0 or later, AND have the comments grouped by e-mail, instead of user names (which is selected by default). I gave this an option in case other users feel uncomfortable doing so. In any case, it''s great to know that the other fix is able to address your problem. Cheers! Lorna´s last blog post..giuk.net: It’s alive… IT’S ALIVE!

By: drivelocity

drivelocity — Thu, 08 Jan 2009 16:41:53 +0000

No problem. Thanks for the comment Jay!

By: Jay

Jay — Wed, 07 Jan 2009 23:48:19 +0000

Man, I hate all this coding stuff. Thanks for the heads up though, and at least making it easier for someone like me to understand. Jay´s last blog post..AN OLD FLAME

By: drivelocity

drivelocity — Mon, 05 Jan 2009 16:44:42 +0000

Thanks for the comments Atniz!

If, on the plugins page of your site, it reads, “Show Top Commentators (SarahG Version)” you’re good to go. If not, you probably have the other one called “Top Commentators Widget” from WebGrrrl.net, which is the one that’s vulnerable to the link hijacking.

You can also test this for yourself by logging out, posting a comment as someone on your Top Commentators list and see if it changes the link to the URL you specify. You can then delete your comment and it will go back to their URL.

By: Atniz

Atniz — Mon, 05 Jan 2009 08:56:52 +0000

I'm not sure my plugin is from whom. But, it works good for me. Atniz´s last blog post..Happy New Year with Page Rank Update 12/31/2008