[Webpro] CSS as tracking tool

listadmin info at webdesign-list.com
Wed May 26 15:15:58 EDT 2004


Hi all

Did you know that it's possible to track visited websites of users
just by applying some basic CSS? It doesn't need more than...

#1   A link to that site on a web page
#2   A background image assigned to the 'visited' state of this link

Voilà the little web bug (the server logs track the img requests  :)

A malicious sniffer could include a bunch of hidden links on a page,
and instead of an image, one could easily set the url to a tracking
script, like...

background-image: url(tracker.php?user=username);

... especially interesting if the site requires login   :(

Just saw that tip at sitepoint.com - not bad, eh?

Mike



More information about the Webpro mailing list