After looking at some site specific statistics for my media website (Everah Media Services Company) I noticed that a lot of my site users are being referred to us by search engines. The most noticeable search query, the words that people are searching for, is ipowerweb iframe hack.
So I began to think
It appears that because iPowerweb cannot seem to secure a server properly that I am now getting traffic to my web site. This same web site was moved away from their servers a few months because of a series of bad mishaps on their part. Let me go into some detail to help those out that may have found their way here by those beloved search engines.
A little background information
Up until a few months ago every web site I built was hosted on an iPowerweb server. Whether it was mine or a client, I called up iPowerweb and set up an account. For a while I had even looked at becoming a reseller of their services.
Then, last fall, users of a client site I developed started to report to the client that they were getting infected with a virus. At first no one knew what was happening. Then, after some investigation, it was realized that the main home page, the index page, had been modified so that at the very end of the page, after the closing HTML tag, there was an iFrame tag that had it’s source on another server (7sir7.com, I believe). The code on the other server was set to link to another web site that tried to place a piece of software on the users machine that would continuously download pornography to the user’s computer.
After a long wait time on hold with iPowerweb Tech Support it was determined that iPowerweb “does not know” how this happened or how to prevent it from happening again. They corrected the problem about 24 hours later and I was back in business. For a few weeks.
A few weeks later the same exact thing happened to the same web site. Except this time, someone had appended all web files (.html, .php, .asp, .html, .txt, etc) with the iFrame tag. I contacted iPowerweb tech support, and after a long wait time on hold again, I received the same diagnosis as before. They did not know how it happened and they weren’t sure they could stop it from happening again.
More information on iPowerweb complete inability to secure their servers can be found on the phpBB forums. Apparently some board users and members had the same problems I had. Their challenges and problems are pretty clearly described on their forums.
Fixed but not fixed
I am of the mind that if you tweak me once, shame on you. Tweak me twice, shame on me. Having learned that iPowerweb is a totally inept web hosting company I switched every one of my sites away from them. I also began to move my client sites away from them. If you haven’t yet, I would suggest you take your site away from them also. They are one of the worst hosts I have ever had the misfortune of dealing with and each day I get happier that I am no longer hosting with them.
The benefits of iPowerweb ineptitude
Of course, without their complete lack of security and total inability to manage a host server I would not get the search engine placement I enjoy today. However, if I had to choose I think I would rather be on the low end of the search results with no server problems instead of vice versa.
On a side note, I have set Everah Media Services up as a host now, so if you are looking for a new host we can help out. In fact, you can email me at robert [at] everah [dot] com if you want more information on what we offer.
Signing off
Until then, may your servers be kept clean and may iPowerweb stop selling junky crud.