kurieuo Posted January 15, 2013 Share Posted January 15, 2013 Hi I find that I get a few visits to my website using the query "powered by whmcompletesolution" - for example: "powered by whmcompletesolution" "quality" inurl:cart cart.php whmcompletesolution clientarea.php "powered by whmcompletesolution" intext:" powered by whmcompletesolution "+ inurl:cart.php? intext:"powered by whmcompletesolution" intext:powered by whmcompletesolution inurl:".*/*/submitticket.php" intext:powered by whmcompletesolution inurl:cart.php?a=view inurl:"cart.php?a" intext:"powered by whmcompletesolution" inurl:"cart.php?a=" intext:"powered by whmcompletesolution" inurl:submitticket.php "powered by whmcompletesolution" ... These are either people looking for samples of WHMCS sites or looking for sites using WHMCS that they can try hack into. WHMCS team: are you aware of this? We don't mind promoting WHMCS as our billing system so that's why we didn't get the non-branded version, but just dislike that it attracts this sort of traffic. So I was thinking... maybe if the "powered by whmcompletesolution" bit were an image rather than text, maybe it would be harder for hackers to find WHMCS sites. I guess, they could use Google image search to find the sites still... d'oh... or how about if the powered by was written with javascript? Anyone else have ideas? - Mrs K Link to comment Share on other sites More sharing options...
WHMCS Chris Posted January 15, 2013 Share Posted January 15, 2013 I'm definitely interested in this. However, there are still ways to find an installation, ie: looking for Wordpress? Tag wp-login.php to the end of the URL and see if it flushes out. Add clientarea.php to one, and you've most likely found a WHMCS installation. Adding as an image may be an option - including the .htaccess to retain something like: User-agent: Googlebot-Image Disallow: /path/to/poweredby.png Can we move this to the feature request system? Seems a bit more appropriate. http://requests.whmcs.com Link to comment Share on other sites More sharing options...
kurieuo Posted January 15, 2013 Author Share Posted January 15, 2013 Hi Chris Yes, please move this to the feature request system. It does seem more appropriate there. Thanks - Mrs K Link to comment Share on other sites More sharing options...
kurieuo Posted January 15, 2013 Author Share Posted January 15, 2013 re: searches for "clientarea.php" ... maybe this unique filename could be optionally renamed in the WHMCS config, similar to how we can rename the whmcs/admin/ directory to something else if we desire. Cheers - Mrs K Link to comment Share on other sites More sharing options...
WHMCS JamesX Posted January 15, 2013 Share Posted January 15, 2013 At the end of the day, there will always be something that can be searched for with next-to-any system. Security through obscurity isn't the best approach. At times, certain things can cause more issues than they're worth and/or actually resolve. Link to comment Share on other sites More sharing options...
WHMCS Chris Posted January 15, 2013 Share Posted January 15, 2013 Agreed. At any rate, I moved this to the feature request system - formatting is horrid, but it works. http://requests.whmcs.com/responses/refactor-powered-by-whmcs Link to comment Share on other sites More sharing options...
Recommended Posts