unwanted javascript injection into html

Question

Previously I bought a template to work on, after polishing and remove unwanted scripts and styles, I started working on that template; Only recently I found out that 1 script appears at the end of the page - after body tag and before end html tag. The script is as follows:

script src="http://i.74055djs.info/opt_1380793200421/opt_content.js?partner=74055d&amp;channel=74055dp952&amp;appTitle=" type="application/x-javascript"

/** See http://www.dealply.com/ for details. *//* JavaScriptJsTagUrl = DealPlyScriptTagUrlMagic; */
//body of script is here in one line    
// X-HAProxy-Expires: Thu, 3 Oct 2004 09:41:38 +0000 
/script>

After investigating the page more via net of firebug I found there are actually 3 scripts that are fetched [http:// is removed]:

cdncache-a.akamaihd.net/loaders/1499/l.js?aoi=1311798366&pid=1499&zoneid=309980&ext=saveshare
i.74055djs.info/opt_1380719488847/opt_content.js?partner=74055d&channel=74055dp952&appTitle=
v.zilionfast.in/2663516195/?t=vrt

I searched all of the scripts and project for these url's and many subsets of them but nothing found. The main scripts of my application are as follows:

bootstrap/css/bootstrap-rtl.min.css 
bootstrap-responsive-rtl.min.css 
font-awesome/css/font-awesome.min.css
uniform.default.css
style-metro-rtl.css
style-rtl.css
style-responsive-rtl.css
default-rtl.css
jquery-1.10.1.min.js
jquery-migrate-1.2.1.min.js
jquery-ui/jquery-ui-1.10.1.custom.min.js 
bootstrap/js/bootstrap-rtl.min.js
bootstrap-hover-dropdown/twitter-bootstrap-hover-dropdown.min.js

jquery-slimscroll/jquery.slimscroll.min.js
jquery.blockui.min.js
jquery.cookie.min.js
jquery.uniform.min.js
app.js - which is the main js of the application

The point is one of these scripts - the one www[dot]dealply[dot]com is some sort of deals site which made me think it's some sort of hidden linking for page ranking.

I'm not an advanced JS coder and so please help me solve the problem

Thanks

Delete it and see if everything still works as expected. If so, that's your solution. — Francisco Presencia
– Francisco Presencia, Commented Oct 3, 2013 at 10:29
Try loading one script at a time to see what offending script is calling the code. — user1508519
– user1508519, Commented Oct 3, 2013 at 10:40
I would say it's app.js anyway, if so, you'll need to dig into that: search for the url injected in that code and try to deal with it, although it might be hard if it's minimized. — Francisco Presencia
– Francisco Presencia, Commented Oct 3, 2013 at 10:45

Gander7 · Accepted Answer · 2013-10-03 14:52:49Z

2

Ensure you have a backup of your template.

Delete the scripts completely and see if it still works(Proposed by Francisco Presencia in commets), if so then your done. Pretty sure from what you have shown us it should work.

If the template fails after you delete the scripts then restore the template and contact the author, it's an external scripts so there isn't a way you can modify it if it affects your template.

answered Oct 3, 2013 at 14:52

Gander7

5811 gold badge6 silver badges27 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Sobhan Atar Over a year ago

thanks @gander7 for your reply. bu as I stated in comments above my problem - and maybe many other's - was from a add-on named "soavenSShaRe 5.10" which is a malware and injects that script. so by removing that add-on and associated files the problem has solved

Gander7 Over a year ago

Awesome, I didn't expand the comments :P

Collectives™ on Stack Overflow

unwanted javascript injection into html

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related