This is a jumbo post which I have contributed to Jon Waraas’ Blog so you’ll have to pop over there to read it. It’s a bit of a biggie (about 3,000 words).

I’ve also been working on that as well as the next part of Making Money With An Affiliate Empire series, so with a bit of luck that should be live by the end of the week..

I also have a special announcement later in the week, which you’ll like. That’s going to be first come, first served though

A few things before you read this:

1) This is blackhat
2) You do this at your own risk
3) I’m only writing it because I think it’s interesting
4) If you don’t like it, take it as the information it was meant as, not as a recommendation what you should do!

With all that said. There’s an exploit for PHP versions 4.4.3 > 4.4.6 lurking around in the phpinfo() files. You can find all of the affected sites by doing this Google search.

Basically, itâ??s an XSS vulnerability in the phpinfo() function which gives unescaped output for all user-submitted arrays in GET, POST and Cookies. (More info can be found here)

If you find one of the URLs and add this on the end:

?f[]=%3Ca%20href%3Dhttp%3A//WWW.YOURWEBSITE.COM/
%3EYOUR%20ANCHOR%20TEXT%3C/a%3E

Replacing the YOURWEBSITE.COM for your URL an entering YOUR ANCHOR TEXT (with %20 as spaces). Hit enter, then scroll down to “PHP Variables” and you’ll see you’ve injected two of your links on the page. All that you need to do then is get them indexed. Boom, there’s some backlinks.