[Webpro] CSS as tracking tool
listadmin
info at webdesign-list.com
Wed May 26 15:15:58 EDT 2004
Hi all
Did you know that it's possible to track visited websites of users
just by applying some basic CSS? It doesn't need more than...
#1 A link to that site on a web page
#2 A background image assigned to the 'visited' state of this link
Voilà the little web bug (the server logs track the img requests :)
A malicious sniffer could include a bunch of hidden links on a page,
and instead of an image, one could easily set the url to a tracking
script, like...
background-image: url(tracker.php?user=username);
... especially interesting if the site requires login :(
Just saw that tip at sitepoint.com - not bad, eh?
Mike
More information about the Webpro
mailing list