I Love Proxys?

One thing I've noticed since writing my last I Love Horses blog entry is that when you search for I Love Horses on Google, Deagostini have a sponsored link on the side of the results.

The link itself is very interesting, if you click on it you end up at http://www.deagdev.co.uk/track/landing_page.php?url=http://www.deagostini.co.uk/ilovehorses/index.php&country=1&title=19&campaign=cpcv1&page=landing&prefix=http://www.deagostini.co.uk/ilovehorses/.

If you change the url attribute to another website their server will proxy your request, however the links are relative to the deagdev.co.uk server if they are not absolutely specified. Setting the prefix attribute to a site fixes that by making all the links absolute to whatever site you want. This only gets the body of the page, not any assets like images the page tries to include.

I think it's time to fire off an email to Deagostini's techies to warn them of this potential security hole, unless it's meant for horse loving dissidents in Iran to get to banned websites of course.