Small tools with specific risks.
LEGITIMATE USES
Tracking campaign links Shortening long URLs for print or messaging Managing redirects for a site with many changed URLs
THE RISK
An open redirector, which will redirect to any URL supplied, is abused for phishing. Attackers use your trusted domain to disguise a malicious destination.
This gets domains blacklisted and hosting accounts suspended.
DOING IT SAFELY
Only redirect to destinations you have explicitly configured. Never accept an arbitrary destination from a URL parameter. Require authentication to create new links. Log what is created and where it points. Review periodically for anything you did not create.
SIGNS OF ABUSE
Links you did not create Unexpected traffic to the redirector Blacklist notices mentioning your domain Abuse reports
SIMPLER ALTERNATIVES
For a handful of redirects, cPanel > Redirects or .htaccess rules are adequate and carry none of this risk.
Use a script only when you genuinely need to create links dynamically.
