I had some time at lunch to kill, so I decided to see how Malware techniques were improving in the land of WordPress and free premium theme download sites. Enter the Darknet. A simple Google search got me a theme ZIP file pretty quickly. Now, it was time to see what malicious happenings this thing…
Read More Part 1: Analysis of a WordPress MalwareI installed Xoogu’s Simple Social Sharing Plugin and have been using it on my site for visitors to share content. I also use YOURLs to create shortlinks to my posts. In order to have Xoogu’s plugin work, the YOURLs plugin I have installed is YOURLs Link Creator which will replace the shortlink with the YOURLs…
Read More Use YOURLs Shortlink with Xoogu's Simple Social Sharing PluginA vulnerability has been discovered in the Disqus plugin for WordPress allowing for Remote Code Execution. The Disqus plugin is used on nearly 2 million WordPress blogs. Who is Vulnerable? A remote attacker could successfully execute remote code provided the following version of software are true: PHP <= 5.1.6 WordPress <= 3.1.4 Disqus Plugin <= 2.75 How…
Read More Disqus WordPress Plugin VulnerabilityI’m not really feeling blue. Blue just happens to be my favorite color. When someone asks me Rich, what is your favorite color?, I respond with #336699.
Read More Feeling BlueThis will add a Login or Logout (depending on state) to your WordPress navigation menu. I have one on mine now; makes it easy to quickly log in/out to test things. Put the following in your child theme’s custom functions PHP file. add_filter( ‘wp_nav_menu_items’, ‘add_loginout_link’, 10, 2 ); function add_loginout_link( $items, $args ) { …
Read More Add a Login/Logout Menu Item to WordPress Navigation MenuHere is an all-in-one solution for a portable WordPress. The creator packs MySQL, PHP, Apache and WordPress together and allows you to drop this folder onto a thumbdrive or network share, etc. It’s nice and small (<30MB) and works well. Wordpress Portable: http://wordpress-portable.webnode.com/ It also gives you a system tray icon with a right click…
Read More Portable WordPressI finished up a new linux server build tonight. Migrated WordPress, DNS, mail, FTP and a handful of other services to this new server as well as installing LXDE GUI front-end.
Read More New Linux Server BuildSo I spent a little bit of time tonight tinkering on Linux. I got interested in tty recording/playback after seeing some nethack things. I figured if I could find something that works well for playback of tty recordings it would be helpful on my blog. Enter: jsttyplay This is a nice little tool using Perl…
Read More ttyrec Playback using jsttyplay and WordPressI was annoyed by how the Top 10 plugin didn’t give me a better control of placement of the Visits/Visited string, so I got to work figuring out where to move things around. First, I found that the data is printed via a PHP function called echo_tptn_post_count() I edited my child-theme’s content.php file and modified…
Read More WordPress Top 10 Plugin: Place Counter in BylineThis is just a little tiny test. =) If you are here, it is because you followed a link from either Google+, Facebook, or Twitter. For some reason, the posting to Google+ doesn’t allow me to control the circle nor does it allow me to control any text input. The title of the post is…
Read More Social Cross Posting WordPress Plugins