Text Link Ads Exploit Allows You To Sell Ads in Unpublished WordPress Drafts

  • Comments: 4
  • Written on: August 17th, 2008

$100 In Free Links From Text Link Ads!One of the throw away blogs I maintain runs Text Link Ads and generates about $100 a month for me. A few days back I was writing a post for that blog when I was interrupted by my two year old son. I clicked Save and diverted my attention.

I returned to the post a few minutes later and found that I had received a new email.  It was an advertisement alert from TExt Link Ads telling me a new ad was sold on one of my posts.

I noticed that the link in their email was structured funny.  I use keywords in my post page names, but the TLA email said an ad was placed on http://www.URLNAMEHERE.com/?p863.

That didn’t make any sense.  I double checked to make sure I didn’t accidentally publish the post instead of saving it, and sure enough it was in my drafts folder.

This means that Text Link Ads lists unpublished drafts from your WordPress blog in the inventory they sell to their advertisers.  The exploit potential here for gaming the Text Link Ads system is huge.

I am not in the business of screwing over advertisers or advertising networks, but there are plenty of people out there who are.  Just look at the made for AdSense blog phenomenon.

Is the Exploit Scalable?

Imagine if some of the larger MFA players got their blogs into the TLA system and exploited this vulnerability.  It would add up fast for some quick money.  Many people don’t run Text Link Ads on their primary blogs because of the fear of a Google penalty for selling text links.  MFA blogs have already been slapped in most cases, and with Google now allowing visitors to opt out of seeing their ads and restricting the clickable areas within them, these automated content farms are just looking for another way to cash in.

How to Execute the Exploit

The exploit is simple and is actually automated by the TLA’s own plugin.

  1. Sign up for a Text Link Ads account with your highest ranking PR website.  Get approved, and then add all of your other websites added to the approved account.
  2. Once your blogs are approved, load up your drafts folder with fake posts that are loaded with sought after keywords and phrases (like Viagra, insurance, SEO, etc..)
  3. Wait a couple of days for all of your posts to get into TLA’s inventory and watch the money roll in.  The ad that was sold on my throw away blog was $5.70 a month for a single word that had not even been published!

Google won’t get on your case as long as you never publish the fake posts.  In the wild of the Internet the posts do not exist.  But to TLA and their advertisers, the words are bought and paid for.

This is obviously something that undermines the TLA system, and I have notifed MediaWhiz (TLA’s parent company) about the exploit.  Whether they patch it or not is a completely diferent story.

UPDATE 8-19-08

Text Link Ads has emailed me to let me know the exploit has been patched.

  1. Andy Crofford said on August 17th, 2008 at 9:47 pm

    You say “I am not in the business of screwing over advertisers or advertising networks” then go on and give detailed instructions on how to do it.

    I don’t know why but I find that quite funny (the haha kind not the strange kind).

  2. Thor Schrock said on August 17th, 2008 at 10:28 pm

    Yeah, well I did give them a week’s notice before I posted at least. And for the record, I did publish the draft they sold the ad on.

    Sometimes the only way to pressure a company into fixing something is to talk about it. If people start doing this on a large scale, the value to their advertisers will drop through the floor. They can’t let that happen.

    Unless they are planning on riding the receding wave of selling text link ads. Then they may just say oh well and let it fly. Who knows…

  3. James Wilcox said on August 17th, 2008 at 11:24 pm

    i don’t even use Adsense on my main blogs anymore because the revenue has never been good, but TLA produces a steady $50 a month for me. As far as exploits go, it’s in their best interest to patch this up ASAP and I’m surprised it hasn’t come up sooner. Thanks for the heads up!

  4. Thor Schrock said on August 18th, 2008 at 7:35 am

    Yeah James, I still have a little AdSense on this blog, and its good for some lunch money every month, but not much more than that.

    If TLA and MediaWhiz are making good money selling ads, they will get it patched

What do you think? Join the discussion...

How do I change my avatar?

Go to gravatar.com and upload your preferred avatar.

Subscribe to My RSS Feed

Subscribe Form Click to Subscribe or

      TwitterCounter for @thorschrock

Ed Wunder Loves Schrock's Service

Top Commentators

Schrock Innovations' New Ride

Revolution Wraps Rocks!

Geek Squad Hires Anyone!

Other Recent Videos


We're on the Morning Blend answering your Lincoln Nebraska computer repair questions regarding warranties


Need your computer repaired in Omaha? If you're never visited Schrock Innovations before (1st time client), stop by for a FREE hour of repair

Our Open Adoption

    Kim and I are seeking to adopt another child through Open Adoption. If you know of a birth mother seeking a stable, loving family in Nebraska, please direct her to our website at nebraskaopenadoption.com.

Thor's Sponsors

    Computer Repair Lincoln NE
© Thor Schrock 2009