User-Generated Spam
Junk injected through comment forms, forums, profile pages, or internal search URLs, filling a site with thousands of links to unrelated commercial destinations.
Analogy Mental model
Leaving the back door unlocked and the walls available for anyone to paint on. By morning the building is covered in ten thousand flyers for fake services, and the authorities close the shop.
In practice What you actually do
The most damaging modern variant is internal search injection. If a search URL echoes the query into the title and the page is indexable, an attacker can generate millions of links pointing at it and the crawl queue fills with garbage within days.
Where people get burned Pitfalls
Two controls prevent nearly all of it: exclude search result pages from the index and block them in the robots file, and require verification plus moderation on any open submission form. Both are configuration, not development projects.
This entry was written in English from the Chinese original, not machine-translated. Read the Chinese version →