Fetish Hits
Choose from various programs like $35-$40 pay per signup, 60%-70% revenue share.

Silvercash
Winner of the 2005 and 2006 X-Biz “Affiliate of the Year Award”. Featuring 8 programs, and over 100 sites.

LB-69
Finally there is a shemale megasite built by fans who know how to make a site worth time spent..

SexSearch
The best converting adult personals site on the net! Converts 2-3 times better than the top adult paysites.

AWMOpen
We are happy to invite you to our conference for Adult Webmasters, the AWMOpen..

xPeeps
The adult industry has direct contact with consumers in an environment that was built to market adult products..

Real-Bucks
24 high-quality niche sites with great conversion and all necessary promo materials.

VIXEO
Earn big from our revolutionary site Vixeo.com. Vixeo is a new concept in paysites, offering access to over 1000 DVD titles with one password.

AdultCamDollars
Every customer you send us is tracked down to the latest possible method. Never loose a potential customer with our cascading billing.

Spacash
60/40 revshare or $25pps with hosted galleries and free sites.

Platinum Bucks
Multiple trial prices with payouts up to $40, or 80% recurring.

Sunny Dollars
Sunny Dollars has been providing money making programs since 1999.

AEBN
50 niches of content for your Pay-Per-View sites. AEBN offers the largest selection of content feeds.

Club-Xstream
Legal adult content providers with many categories of legal web-based content.

ManagedFiber
Try ManagedFiber.com for all your hosting needs.

Topbucks
Offering 10 on demand niche sites plus our ever-popular Best Movies to promote. Earn $25 PPS or 25% lifetime.

MrSkinCash
MrSkin.com sets the standard in adult celebrity entertainment.

TitanBucks
Our program pays you 55% of initial sales and lifetime recurring.

TastyDollars
Titanbucks quality niche sites are designed to not only convert but retain.

SlickCash
Up to $35 per sale or 60% revshare, $25 per sale on $1 trial sites. Over 30 niches!

WebCamCash
Nothing retains like live webcams!

GenBucks
A unique and profitable pharmacy program that you can earn major money with.

BadAssFeeds
The internets largest selection of adult movies from over 100 manufactures.

PEcash
Add an online adult store to your existing website while earning 35% commission.

Sexy City Cash
Sexy City Cash is the hardest working small sponsor program on line and we want to prove it to you.

Kinky Dollars
50/50 Revenue Sharing Program with five of the webs premiere fetish sites.

Adult Paymaster
Up to $40 per signup, $25 free trials, with over 35 niche sites!

On The Bench With MrMaryLou
Come on folks come and shoot the breeze with MrMaryLou at Greenguy and Jims On The Bench MrMaryLou every Saturday at 3PM EDT. Find out what's going on in the wonderful world of webmastering.

To connect using your favorite IRC client, simply use the following information:
irc.greenguysboard.com
#greenguyandjim
port: 6667
Or, just use our Java Chat Here

Greenguy And Jim Radio Show (Update)
Live Tuesdays From 8-9 PM EDT

I am taking a little time off from the Radio Show. But in the interim, Greenguy will be having special co-hosts.

Timely Topic: TBA

Listen LIVE on the Greenguy and Jim Radio Network!

Just Click Here
(or Copy & Paste this URL - http://radio.greenguysboard.com:8000/ggaj- into your media player)

Chat LIVE with us in the Greenguy and Jim Chat Room
To connect using IRC:
irc.greenguysboard.com
#greenguyandjim
port: 6667

Search Engine Chat With Bill
Don't forget to come to Bill's Search Engine Chat Wednesday Nights at 11:00 PM EDT..

To connect using your favorite IRC client, simply use the following information:
irc.greenguysboard.com
#greenguyandjim
port: 6667
Or, just use our Java Chat Here

~ GreenguyandJim's Hot Topics ~

Dam Cash damcash.com WTF!!!!!!!!!!!!
Who is this Dam Cash MF'ers....

Comment spam: What a fucking annoyance
I have one particular spammer right now whacking a non-adult site of mine...

Virus Being Added to Blogs
This is the third time I've seen this on various blogs...

As always, if you have not been to Greenguy And Jim lately, click HERE to check us out.

Click Here For Up To Date Industry NEWS!!!

---

~ Don't Miss ~
The Greenguy And Jim Radio Show	Live every Tuesday from 8:00pm to 9:00pm EST
Search Engine Chat	Every Wednesday at 11:00pm EST
On The Bench With MrMaryLou	Every Saturday at 3:00pm EST

---

~ "Tips and Tricks From Around The Globe" ~

Security Advisories for multiple products
From our own cd34 (aka Sparky) of Colo-cation.com. Both Greenguy and I are very proud to have him as a member of GreenguyandJim.

Recently, we've seen a huge number of exploits running through commonly installed software -- software that usually has already released a fix. However, you may not have even known that there was an upgrade.

If you are running any of the following software, take a few minutes to check and see that you are running the latest version.

Vbulletin, 3.5.4 (or, have applied the diffs to upgrade the two .php files that are exploitable)

PHPBB, 2.0.20 -- mostly bug fixes in the recent version. 2.0.19 released in December fixed an authentication leak. 2.0.18 was released in October 2005 which fixed a hole allowing remote scripts to be installed.

Invision Power Board - 2.15 - SQL Injection, Remote script execution, ability to upload images with malicious html/javascript code.

Autolinks -- ages ago, this had an issue with al_initialize.php being able to be used to launch attacks. This has been fixed, but, should be upgraded to the latest version.

phpmyadmin -- 2.8.0.4 is the most recent version and fixes a few issues allowing remote code execution.

phpadsnew -- 2.0.8, earlier versions allow remote code execution through adxmlrpc.php. Upgrading is rather straightforward. Make a backup of config.inc.php, upload the files, chmod 777 config.inc.php, log in, it'll run the upgrade automatically, chmod 644 config.inc.php. Even 2.0.7 released in March is able to be compromised.

wordpress -- if you are not running 2.0.2, there is a remote code exploit. The wordpress upgrade is pretty simple and straightforward.

awstats -- 6.6, 6.5 has an entry point that could allow remote code execution.

sitedepth -- ask them for an updated copy of constants.php. Special thanks to three people for forwarding that info -- if you want attribution, let me know and I'll modify the entry here.

--- Forwarded from 'someone'
I-RATER -- They emailed out a new "common.php" on April 26th. With spam filters and the php file being an attachment, it may not have made it to a lot of people.

The email body __________________________
"We have been made aware of a security vulnerability in ALL versions of I-RATER PLATINUM allowing a remote user to exploit the common.php "include_path" Parameter Remote File Inclusion.

Users should replace the attached common.php file immediately. Many thanks I-RATER DEV TEAM
________________________________________

phpBazar version 2.10 -- if you are running an older version there are numerous holes that allow remote code execution.

If you are using mailform software, verify that you are running the newest version. In recent months, scripts have been scanning machines for vulnerable mailform scripts. If you're seeing a lot of email from submission forms, you might want to take a look as you might be relaying spam unknowingly.

If your webhost runs apache without running setuid, have them run the following check on your web directories:

find . -name \*.php -user www-data -print > /tmp/webownedphp
replace www-data with the username that the webserver runs as. If you admin your own machine, try:
ps aux | grep http
or
ps aux | grep apache

in the first column, there should be a listing of usernames, perhaps nobody, or www or www-data.

Once you have done that, more /tmp/webownedphp, then, take a look to make sure those scripts look valid. If you see an ascii picture of a spider or a lot of cyrillic characters that you don't recognize, its probably a remote shell program. With that, they can get in and run remote scripts as the web user. Those scripts can attach to irc servers and launch denial of service attacks, they can launch spam engines, or, all sorts of other nasty things.

Another attack that we have recently seen is the inclusion of javascript on web pages. Some of these are scripts that are loaded that run remotely and try to change every file they can, while others actually log in with FTP, grab a file, modify it, put the file back in place and log out. There's no hunting around for the right file, no authentication errors, nothing that suggests that they don't have the exact username/password that you use.

What this says is either the person has used spyware or a keylogger to get the user/password, or, each of the people this has happened to has used the same user/password combination somewhere -- and the people were able to determine the connection of the user/password with the domain involved.

Tommy keeps an address book with each sponsor's site name and the unique user/pass for each of those sites tucked away. A different username/password combination is used for email, ftp, each server, each sponsor account, each online login that you have. Cleo uses a program on her mac that stores it away electronically behind a password.

Either way you do it, you need to make sure that you use different username/password combinations everywhere so that a single compromised password doesn't ruin everything you've worked towards. And passwords need to be strong. Easy to guess dictionary words are terrible. Letters, numbers, and punctuation (some sponsor programs don't allow this) all make it more difficult to guess. If you have trouble remembering passwords, refer to that black book. However, as one client of mine found out, after a nasty divorce, his house was broken into when he was out of town and his black book was stolen. Nothing else in the house was touched. Guard that book well as it is just as valuable as storing the passwords online.

Remember, if your site is hacked, that could directly affect your revenue and in some cases, jeopardize your site staying up. Many hosting companies will shut down a server that generates complaints -- making it impossible for you to fix remotely.

phpBazar -- if you're running classifieds using it, there are a ton of holes in the older versions.

Have a Great Day!
Greenguy and Jim