There Is A Bug In 'adsense For Search' Requires working knowledge of Javascript and HTML

[sanjay0828 0]

I am sure many of you would have used Adsense for Search.

 

You include Google Search in your site. Someone comes along and does a search for some XYZ. He finds an ad interesting among those results and he clicks. Voila!!! You get paid!!!

 

Very convenient!!!

 

I have been using this for sometime now and yesterday, I discovered a bug.

 

Remember the code, that Google asks you to paste in your site in order to use Adsense Search

 

<!-- Search Google --><center><form method="get" action="google.com/custom&%2334; target="_top"><table bgcolor="#ffffff"><tr><td nowrap="nowrap" valign="top" align="left" height="32"><a href="www.google.de/?gfe_rd=cr&ei=BwkjVKfAD8uH8QfckIGgCQ&gws_rd=ssl;<img src="google.com/logos/Logo_25wht.gif&%2334; border="0" alt="Google" align="middle"></img></a><label for="sbi" style="display: none">Enter your search terms</label><input type="text" name="q" size="31" maxlength="255" value="" id="sbi"></input><label for="sbb" style="display: none">Submit search form</label><input type="submit" name="sa" value="Search" id="sbb"></input><input type="hidden" name="client" value="pub-0000000000000"></input><input type="hidden" name="forid" value="1"></input><input type="hidden" name="ie" value="ISO-8859-1"></input><input type="hidden" name="oe" value="ISO-8859-1"></input><input type="hidden" name="hl" value="en"></input></td></tr></table></form></center><!-- Search Google -->

If you know HTML, the above code will be very easy to understand.

If you don't, you better do.

 

Ok. Let's leave that.

This is what we do now.

 

Substitute <form method="get" action="https://www.google.com/custom; target="_top">

with <form method="get" action="http://forums.xisto.com/no_longer_exists/; target="_top">

 

This code will work just the same and you will still earn money from those clicks

 

Originally, the search results page would have had an URL starting with https://www.google.com/custom.....

Now, the URL would start as http://forums.xisto.com/no_longer_exists/.....

 

NOTE: 72.14.235.104 is an IP mapped to https://www.google.de/?gfe_rd=cr&ei=BwkjVKfAD8uH8QfckIGgCQ&gws_rd=ssl i.e. both mean the same (almost)

 

What is the bug here?

 

Have you heard of Google cache?

It is that nice little thing which maintains a copy of every page (almost) on Google's index.

 

If your page (e.g. https://xyz.xyz/) is listed on Google, then the cached version of your page can, most probably, be accessed through http://forums.xisto.com/no_longer_exists/

 

The best part - the cached version can include javascripts too.

 

Now anyone knowing javascript will also know that two pages on the same domain (in our e.g. 72.14.235.104) can access each other - e.g. one can click on the other's links etc.

 

Our next step is to create a page which does the same.

A little javascript knowledge can help you with this.

 

Next step - wait till this page is cached by Google.

 

Last step - your talent. How you can get people to visit both these pages (the cached site and the results page) simultaneously is up to you. Once that is done, the script on your cached site could <- snipped -> on the search results page.

 

Remember:- the code given by Google is just HTML. Using javascript, you can control anything on a HTML page (for dummies - the viewer needn't actually search. with javascript, you could write a code that automatically submits the form)

 

I am not sure how many understood what I wrote.

Any doubts? Post 'em

 

P.S. This is purely for educational purpose and I don't want anyone misusing it

[nummell 0]

Thanks for sharing the info...This is probably the 5th way I?ve heard how to cheat google...Don?t forget google tracks clicks on their ads/searches...I guess you?ll be OK until google finds you...That?s one easy way to get banned from adsense...That?s just my opinion

[sanjay0828 0]

Thanks for your opinion.If you don't mind, could you please tell me what the other 4 ways are?Might be useful.

[Liam_CF 0]

Dont do it, google will find out and you'd get banned from adsense.

[sanjay0828 0]

I am not going to try it. I am satisfied with my earnings.I posted this article just to show that Google's Adsense can be broken too.No system is entirely secure.With enough time, some knowledge and a hell lot of patience, anyone can break a so-called secure system.

[bhavesh 0]

Changing code is always dangerous, one might see final bye-bye from google. One of the way to cheat Adsense, which is used by many is to click on own ads (if you won't use static IP).

This is probably the 5th way I´ve heard how to cheat google...

nummell is this one of the 4 ways you have mentioned, if yes then please tell the other three.

[sanjay0828 0]

One of the way to cheat Adsense, which is used by many is to click on own ads (if you won't use static IP).

This technique used to work, but not any more

Changing the IP (i.e. by logging in and out of ISP) will fool Adsense if this is done once or twice
But on repeating this, Adsense will detect a pattern and block them all (Each ISP's IPs follow a pattern)

I have been using this for sometime now and yesterday, I discovered a bug.

The technique described above CURRENTLY cannot be detected by Adsense
But it is only a matter of time before they get smart and block this too
Edited October 28, 2007 by sanjay0828 (see edit history)