Proxyutza blog » Wordpress

WordPress hacked with Zend encoded script

ProXy — Wed, 26 May 2010 10:29:27 +0000

This time happened on Hostgator, I found the following code in my footer.php file:

1 2	@include_once(ABSPATH . "/wp-includes/wp-vars.php"); ?> @get_wp_results('f');?>

This totally screwed my footer section and above that it made my website traffic go to zero. I immediately removed the code and discovered two files:
wp-includes/wp-vars.php encoded with Zend which I am unable to decode. It would be great if someone could decode this so we can see the malicious code.
wp-includes/wp-version.php encoded with base_64 and decoded to :
file_put_contents(‘wp-common.php’,base64_decode($bb) )

I deleted both of these files and everything seems ok now. I was unable to find wp-common.php so I assume it wasn’t created yet.
wp-includes/wp-vars.php encoded with Zendwp-includes/wp-version.php

Downloads:
wp-vars

wp-admin/post-new.php redirects to blog index

ProXy — Wed, 30 Dec 2009 23:25:28 +0000

After I upgraded the blog to wordpress v 2.9 I noticed something went wrong, both my post-new.php and edit.php pages were redirecting to the blog index with a 302 redirect (HTTP/1.x 302 Moved Temporarily). The first thing I did was to check the htaccess file from the index and from the wp-admin directory but the problem wasn’t coming from there. Next thing I disabled all of my plugins to see if one of the plugins was causing the problem but it wasn’t the case. Finally I thought I should reinstall wordpress because this was most likely a wordpress glitch. So if you find yourself in the same situation here is what you need to do to fix the redirect:

from the admin panel go to Tools> Upgrade > Re-install automatically , next wordpress will re-install the same version automatically. This fixed my problem and I can use the pages now.

Remove WordPress version tag from header

ProXy — Mon, 10 Nov 2008 17:09:19 +0000

Since version 2.5 WordPress inserts the version meta tag automatically without you having the possibility to remove it from the header file. WordPress now uses a function that if you remove you’re removing more than just the wordpress version. So the solution is to add something to your themes functions.php file.

Place this code: remove_action('wp_head', 'wp_generator'); right before the closing php tag ?> . Now check your source code, the wordpress version is not disclosed any more.

WordPress 2.6.3 is available!

ProXy — Fri, 24 Oct 2008 07:35:15 +0000

WordPress just launched a new version, thank god i have the automatic upgrade plugin because they launch new versions every month. I’m just a click away of the new wordpress. Hmmm lets see what this new wordpress brings to the table.

late update: I’ts curious though that my other wordpress blogs think their up to date

Automatic plugin upgrade from wordpress 2.5 is neat

ProXy — Tue, 01 Apr 2008 16:27:07 +0000

As i was saying in the title the automatic upgrade function is cool, no more manually downloading files and overwriting them, you just press “automatic upgrade” and everything is done by wordpress. For example i tried automatic upgrading for Sociable plugin, here is the result:

Downloading update from http://downloads.wordpress.org/plugin/sociable.2.6.2.zip

Unpacking the update

Deactivating the plugin

Removing the old version of the plugin

Installing the latest version

Plugin upgraded successfully

Attempting reactivation of the plugin
Plugin reactivated successfully.

Yeah, you’ve guessed, its done!

Upgrading to wordpress 2.5

ProXy — Mon, 31 Mar 2008 15:31:06 +0000

Actually the title is not to good, because i didn’t upgrade to WordPress 2.5, i just installed this new version on a new gadgets blog i launched today and i have to tell you, if you consider upgrading you might be surprised, in the negative way, about the new interface. I mean i love the new features, but the new interface just sucks, the colors are too bright, the text is too small, basically it will make your eyes red. I don’t know why they choose that orange color in the menu… But what else can i do ? eventually i will have to upgrade all my blogs to wordpress 2.5. I think the reaction i have is common among other bloggers, so maybe the wordpress team will release an update with colors a bit more acceptable.

WordPress 2.5 launched

ProXy — Sat, 29 Mar 2008 21:54:55 +0000

Finally wordpress 2.5 was launched. I haven’t made the upgrade yet, since i’m not in the mood for upgrading 12 blog’s but i will do it tomorrow for sure. I think the most interesting features of the new wordpress are : the dashboard widgets, the multi-file upload with progress bar and the few click plugin upgrades. Ofcourse all the new features are cool, but we will have to see if they prove useful or not. As i wrote in my previous post, you have to be careful when making the upgrade because you can’t revert it with a simple rewrite of the files. So make sure you backup before you start.

Change your permalink structure and keep the old one too

ProXy — Mon, 24 Mar 2008 17:58:32 +0000

After researching a bit i made up my mind to change the permalinks structure on my Electronics Blog. I ran the blog for about 8 months with the default permalinks structure which is /%year%/%monthnum%/%day%/%postname%/ . The reason i wanted to change the permalinks structure is pure SEO. I noticed that many other blogs are using only the /%postname%/ as permalinks structure, so i figured they must know why, and as a plus it also looks nicer, i don’t really like long URLs, they are better shorter.

But as i was thinking at making the change a problem appeared in my mind: Google has all my pages indexed with the old permalinks structure which means when someone will try to access a result page from Google they will get a “not found” page on my blog, not to mention the loss of all my back-links on the articles, this will be like killing my blog, if I’d do this my traffic will go down with about 80 %. Not a good idea indeed.

So i did a little research on Google about permalinks migration, and i found a great plugin, The Permalinks Migration Plugin. The plugin makes use of a directive named the “301 Redirect”. This redirect is acknowledged by all the search engines including Google, and what it does, is to redirect search engines and any user trying to access the old structure link to the new structure. And you wont loose a visitor, not even one.

You can download The Permalinks Migration Plugin from here. After unzipping you upload the files to your WordPress plugins directory and then you activate the plugin trough the admin panel. After you activated the plugin you need to go to Options > PermalinksMigration : and set your old permalinks structure or it should be already set. Next you have to go to Options > Permalinks and make the change to your new desired permalinks structure, i recommend the /%postname%/ as structure or /%category%/%postname%/ , apply the new settings and its done, your post will now show with the new permalinks, but every old link will be redirected to the new one. Isn’t this great ?

After seeing how easy it was to change the permalinks structure i also did it here, on this blog.

WordPress v 2.5 has some issues

ProXy — Wed, 19 Mar 2008 11:26:38 +0000

After i read what some bloggers who updated their wordpress to the beta version, have said about it, im not thinking of upgrading, not a chance. They said that the new interface its not like it should be with warm colors, actually the combination of colors is not so good. And after you’ve upgraded you cant downgrade with a simple rewrite. Another issue is that xmlrpc.php is not compatible with windows live writer, the post is published on the blog, but in windows live writer it generates errors. And it seems that the admin interface for comments is missing the AJAX interface.

I am sure I’m gonna wait before upgrading

New wordpress v 2.5

ProXy — Tue, 18 Mar 2008 20:00:18 +0000

WordPress has released a new version for testing, and if everything goes well it should become the new stable version. The new version should load faster and contain a new interface that will allow you to work faster while keeping the wordpress classic simplicity. A few of the new features are : A customizable dashboard, multi-file upload, built-in galleries, one-click plugin upgrades, tag management, built-in Gravatars and full text feeds. We just have to wait a few days for the feedback from the testing users to be processed and once everything is ok, we should enjoy the new WordPress 2.5