warning to wordpress users

[fris]

do not install any themes from

http://www.themes2wp.com/

i just finished cleaning up a clients wordpress multisite, pain in the ass, each theme when activated, adds nasty code to your themes functions file, not just the activated one, but it cycles through every theme you have in your wordpress folder, so even if you remove the code from one, once you activate another theme it will repeat the process over and over.

just a tip, when downloading any theme, check the header footer and functions file for anything nasty.

hope this saves some people from headaches.

[PGR]

Crap... I use them. Main reason is they usually include .PSD file for logo.

[JBlack]

Oh I hearya! .... I've dealt with shit like this before. Shady encoded shit in the footer or header... the next thing you know u have to throw away your dedicated box... nahh kidding but seriously, the thing here is to get in the habit of scrutinizing theme files before they are used.

[Cyber Fucker]

No worries, I make all themes by myself for every script but thx anyway!

[PGR]

Fris: Can you tell me what I should be looking for? An example of this "nasty code" would be very helpful.

[PGR]

Just found a hidden link in one. Motherfucker. Thanks for the heads up fris

[bloggerz]

[fris]

Fris: Can you tell me what I should be looking for? An example of this "nasty code" would be very helpful.

check your themes functions file the very bottom, if you activated one theme, then it will add it to every theme you have in your themes dir, as it cycles through them, so you will need to manually edit every functions.php file in every theme in that current installation.

http://pastebin.com/j3uVF6u1

[fris]

it goes through all your comments and adds him as the owner ([email protected])

[PGR]

Going through themes right now and deleting code, but even after doing so, the hidden links are still there near the bottom of the page when I view source. They all go to pirated movie sites like this : http://www.alfamovie.com/download-fu...ies/years/2009

[Highest Def]

Thanks for the info. I'm surprised this isn't a much larger problem with so many fly-by-night free theme sites out there. Almost 40K downloads of malicious themes from that site. Geez

[AdPatron]

Hack the planet!

[slayer69]

thanks for the heads up. Was about to use them

[PGR]

Hidden links are in sidebar.php at the bottom. Believe it's the same for each theme.

[adult-help]

thanks for this. Good to know to be more careful!

[sortie]

Free shit..................

[devine]

that's the cost of 'free'

[PGR]

Lesson learned

[dav3]

Thanks for the heads up.

[cambaby]

Say Fris you dont happen to know a plugin that will make custom seo urls for each media gallery image?

[BigRod]

Jesus... I guess thats what free gets

[fris]

Say Fris you dont happen to know a plugin that will make custom seo urls for each media gallery image?

try this one http://wordpress.org/extend/plugins/seo-image/

[EliteWebmaster]

Thanks for the heads up Fris Any recommendations on some good sites for templates in terms of quantity and non messed up codes?

[Nikitos]

Thank for the heads up. I was about to use them. Now i won't.

[Matyko]

Thanks a lot for the warning.
Peace

[raven1083]

Thank you for sharing it here

[pradaboy]

Thanks for the heads up fris. Do you have any experience with WP Remix btw?

[The Duck]

Thanks for the heads up.

[M0nk]

Good info fris, thanx a lot!

[babymaker]

Thanx for the info

[Dtothex]

Thanks for tip! V useful.

[Denny]

Thanks for the heads up

[seeandsee]

397710 WordPress Themes was downloaded

Jesus, they can serve true that all the shit

[ottopottomouse]

that's the cost of 'free'

Free shit..................

Jesus... I guess thats what free gets

Not always, there are a lot of people that do a free theme and it's fine. It's really the cost of free themes from a site that has them all in one place. Funny thing too is quite often they have a quite strict license on not changing the code

[Konkan]

Thanks fris. This was very helpful !!!

[Si]

Thanks for the heads-up

[fris]

Not always, there are a lot of people that do a free theme and it's fine. It's really the cost of free themes from a site that has them all in one place. Funny thing too is quite often they have a quite strict license on not changing the code

just make sure you check your header footer and functions file for any nasty code, im not talking about encrypted footer links, im talking really nasty code like this one how it edits all your theme files and inserts his own email address in comments.

I know people dont think twice about downloading a good theme and activating it, nothing it stopping someone from adding code to the theme to send your mysql pass and admin user and pass to them on activation, its only about 5 lines of code, or even create an admin account and email it to them on theme activation.

so be careful what theme(s) you use.

[pornguy]

Now that really sucks.

Fris I believe you have put out some nice themes or someone here has.. I know Czarina does them as well.

Bump for good info.

[fris]

Now that really sucks.

Fris I believe you have put out some nice themes or someone here has.. I know Czarina does them as well.

Bump for good info.

Ive not given away or sold any themes myself, most of the ones I do are for clients and arent publically available.

[pradaboy]

fris, any experience with wp remix?

[fris]

fris, any experience with wp remix?

ya ive used it, not my style though, other options available, depends what you need/want

[evolmachine]

this is why i look through the code to make sure nothing is in there that will screw everything up... first take a look at the functions.php file then cycle through all the other files... takes 5 mins and leaves me much more comfortable with pushing it to the blog.

[V_RocKs]

That sucks!