wordpress admin security

It may be coming from theme or plugin you are using. Sometimes developers forget to remove any echo statement (or any other debugging approach) which they use while developing. You can first disable all plugins. If this still comes up, then it is somewhere there in the active theme. If this goes away after you … Read more

How can I reference external attachments without breaking core WordPress files?

Pay attention to the comments along the snippet. <?php /** * Filters the attachment URL. * * @param string $url URL for the given attachment. * @param int $att_id Attachment post ID. * * @return string $url Custom URL for the given attachment. */ function wp_get_attachment_url_callback( $url, $att_id ) { // Instead of keeping full … Read more

malware undetectable by multiple scans

There are many ways to infect a site – and many ways to hide that infection from the ‘popular’ security plugins. One way to detect malicious code is via a file-hash-compare function. You may need to write your own though (I did, but it’s not perfect). That function would compare each file’s hash with a … Read more

how to activate a plugin inside a theme

TGM Plugin Activation Class looks awesome!* […] the TGM_Plugin_Activation class can automatically install and activate multiple plugins that are either pre-packaged with a theme or downloaded from the WordPress Plugin Repository. And here’s an introduction to it: http://wp.tutsplus.com/articles/intro-to-tgm-plugin-activation-class-for-wordpress/ *Disclaimer: I haven’t had a chance to try it out for myself… yet.

security issue in wordpress?

You can force all visitors to log in before they are allowed to see the pages. This will not work for attachments. But … if that already is a problem for your site – why did you install WordPress in a publicly accessible directory? You should plan visibility first, then run the installation. Consider HTTP … Read more

Trying to get variables in hacked category dropdown

The dot . in your code is evaluated as string litral, and not concatenation. Meaning if $inpCnt was equal to 5 for example, php will search for name=”scrape[“.5.’][sponsors]’ id= and will fail to find it. You can either remove the dots while still using the double quotes: $sponsors = str_replace( “name=”scrape[“$inpCnt’][sponsors]’ id=”, “name=”scrape[“$inpCnt’][sponsors][]’ multiple=”multiple” size=”19″ … Read more

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)