warning to wordpress users - GoFuckYourself.com

fris · 07-04-2010, 05:35 PM

do not install any themes from

http://www.themes2wp.com/

i just finished cleaning up a clients wordpress multisite, pain in the ass, each theme when activated, adds nasty code to your themes functions file, not just the activated one, but it cycles through every theme you have in your wordpress folder, so even if you remove the code from one, once you activate another theme it will repeat the process over and over.

just a tip, when downloading any theme, check the header footer and functions file for anything nasty.

hope this saves some people from headaches.

PGR · 07-04-2010, 05:49 PM

Crap... I use them. Main reason is they usually include .PSD file for logo.

JBlack · 07-04-2010, 05:50 PM

Oh I hearya! .... I've dealt with shit like this before. Shady encoded shit in the footer or header... the next thing you know u have to throw away your dedicated box... nahh kidding but seriously, the thing here is to get in the habit of scrutinizing theme files before they are used.

Cyber Fucker · 07-04-2010, 05:52 PM

No worries, I make all themes by myself for every script but thx anyway!

PGR · 07-04-2010, 05:54 PM

Fris: Can you tell me what I should be looking for? An example of this "nasty code" would be very helpful.

PGR · 07-04-2010, 06:04 PM

Just found a hidden link in one. Motherfucker. Thanks for the heads up fris

bloggerz · 07-04-2010, 06:07 PM

fris · 07-04-2010, 06:07 PM

Quote:

Originally Posted by P.G.R.

Fris: Can you tell me what I should be looking for? An example of this "nasty code" would be very helpful.

check your themes functions file the very bottom, if you activated one theme, then it will add it to every theme you have in your themes dir, as it cycles through them, so you will need to manually edit every functions.php file in every theme in that current installation.

http://pastebin.com/j3uVF6u1

fris · 07-04-2010, 06:11 PM

it goes through all your comments and adds him as the owner ([email protected])

PGR · 07-04-2010, 06:30 PM

Going through themes right now and deleting code, but even after doing so, the hidden links are still there near the bottom of the page when I view source. They all go to pirated movie sites like this : http://www.alfamovie.com/download-fu...ies/years/2009

Highest Def · 07-04-2010, 06:33 PM

Thanks for the info. I'm surprised this isn't a much larger problem with so many fly-by-night free theme sites out there. Almost 40K downloads of malicious themes from that site. Geez

AdPatron · 07-04-2010, 06:52 PM

Hack the planet!

slayer69 · 07-04-2010, 06:52 PM

thanks for the heads up. Was about to use them

PGR · 07-04-2010, 06:57 PM

Hidden links are in sidebar.php at the bottom. Believe it's the same for each theme.

adult-help · 07-04-2010, 06:57 PM

thanks for this. Good to know to be more careful!

sortie · 07-04-2010, 07:03 PM

Free shit..................

devine · 07-04-2010, 07:09 PM

that's the cost of 'free'

PGR · 07-04-2010, 07:28 PM

Lesson learned

dav3 · 07-04-2010, 07:55 PM

Thanks for the heads up.

cambaby · 07-04-2010, 07:59 PM

Say Fris you dont happen to know a plugin that will make custom seo urls for each media gallery image?

BigRod · 07-04-2010, 08:12 PM

Jesus... I guess thats what free gets

fris · 07-04-2010, 08:19 PM

Quote:

Originally Posted by cambaby

Say Fris you dont happen to know a plugin that will make custom seo urls for each media gallery image?

try this one http://wordpress.org/extend/plugins/seo-image/

EliteWebmaster · 07-04-2010, 10:07 PM

Thanks for the heads up Fris

Any recommendations on some good sites for templates in terms of quantity and non messed up codes?

Nikitos · 07-04-2010, 11:31 PM

Thank for the heads up. I was about to use them. Now i won't.

Matyko · 07-04-2010, 11:54 PM

Thanks a lot for the warning.
Peace

raven1083 · 07-05-2010, 01:14 AM

Thank you for sharing it here

pradaboy · 07-05-2010, 02:09 AM

Thanks for the heads up fris. Do you have any experience with WP Remix btw?

The Duck · 07-05-2010, 02:20 AM

Thanks for the heads up.

M0nk · 07-05-2010, 02:21 AM

Good info fris, thanx a lot!

babymaker · 07-05-2010, 02:52 AM

Thanx for the info

Dtothex · 07-05-2010, 02:54 AM

Thanks for tip! V useful.

Denny · 07-05-2010, 03:29 AM

Thanks for the heads up

seeandsee · 07-05-2010, 03:44 AM

397710 WordPress Themes was downloaded

Jesus, they can serve true that all the shit

ottopottomouse · 07-05-2010, 05:19 AM

Quote:

Originally Posted by devine

that's the cost of 'free'

Quote:

Originally Posted by sortie

Free shit..................

Quote:

Originally Posted by BigRod

Jesus... I guess thats what free gets

Not always, there are a lot of people that do a free theme and it's fine. It's really the cost of free themes from a site that has them all in one place. Funny thing too is quite often they have a quite strict license on not changing the code

Konkan · 07-05-2010, 05:51 AM

Thanks fris. This was very helpful !!!

Si · 07-05-2010, 06:46 AM

Thanks for the heads-up

fris · 07-05-2010, 07:12 AM

Quote:

Originally Posted by ottopottomouse

Not always, there are a lot of people that do a free theme and it's fine. It's really the cost of free themes from a site that has them all in one place. Funny thing too is quite often they have a quite strict license on not changing the code

just make sure you check your header footer and functions file for any nasty code, im not talking about encrypted footer links, im talking really nasty code like this one how it edits all your theme files and inserts his own email address in comments.

I know people dont think twice about downloading a good theme and activating it, nothing it stopping someone from adding code to the theme to send your mysql pass and admin user and pass to them on activation, its only about 5 lines of code, or even create an admin account and email it to them on theme activation.

so be careful what theme(s) you use.

pornguy · 07-05-2010, 08:01 AM

Now that really sucks.

Fris I believe you have put out some nice themes or someone here has.. I know Czarina does them as well.

Bump for good info.

fris · 07-05-2010, 11:25 AM

Quote:

Originally Posted by pornguy

Now that really sucks.

Fris I believe you have put out some nice themes or someone here has.. I know Czarina does them as well.

Bump for good info.

Ive not given away or sold any themes myself, most of the ones I do are for clients and arent publically available.

pradaboy · 07-05-2010, 01:35 PM

fris, any experience with wp remix?

fris · 07-05-2010, 07:12 PM

Quote:

Originally Posted by pradaboy

fris, any experience with wp remix?

ya ive used it, not my style though, other options available, depends what you need/want

evolmachine · 08-24-2010, 07:47 AM

this is why i look through the code to make sure nothing is in there that will screw everything up... first take a look at the functions.php file then cycle through all the other files... takes 5 mins and leaves me much more comfortable with pushing it to the blog.

V_RocKs · 08-24-2010, 11:21 AM

That sucks!

07-04-2010, 05:35 PM	#1
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	warning to wordpress users do not install any themes from http://www.themes2wp.com/ i just finished cleaning up a clients wordpress multisite, pain in the ass, each theme when activated, adds nasty code to your themes functions file, not just the activated one, but it cycles through every theme you have in your wordpress folder, so even if you remove the code from one, once you activate another theme it will repeat the process over and over. just a tip, when downloading any theme, check the header footer and functions file for anything nasty. hope this saves some people from headaches. __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

07-04-2010, 05:52 PM	#4
Cyber Fucker Hmm Industry Role: Join Date: Sep 2005 Location: On an endless road around the world for rock and roll. Posts: 12,642	No worries, I make all themes by myself for every script but thx anyway! __________________

07-04-2010, 06:07 PM	#7
bloggerz Too lazy to set a custom title Industry Role: Join Date: Dec 2006 Posts: 16,256	__________________ I SELL ADULT BACKLINKS! Email: eroticweb>gmail SKYPE: gfybloggerz $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$

07-04-2010, 06:11 PM	#9
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	it goes through all your comments and adds him as the owner ([email protected]) __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

07-04-2010, 06:30 PM	#10
PGR Confirmed User Industry Role: Join Date: Jul 2004 Location: Ontario Posts: 1,753	Going through themes right now and deleting code, but even after doing so, the hidden links are still there near the bottom of the page when I view source. They all go to pirated movie sites like this : http://www.alfamovie.com/download-fu...ies/years/2009 Last edited by PGR; 07-04-2010 at 06:31 PM..

07-04-2010, 05:49 PM	#2
PGR Confirmed User Industry Role: Join Date: Jul 2004 Location: Ontario Posts: 1,753	Crap... I use them. Main reason is they usually include .PSD file for logo.

07-04-2010, 05:50 PM	#3
JBlack Confirmed User Join Date: Mar 2010 Location: Hollywood Posts: 399	Oh I hearya! .... I've dealt with shit like this before. Shady encoded shit in the footer or header... the next thing you know u have to throw away your dedicated box... nahh kidding but seriously, the thing here is to get in the habit of scrutinizing theme files before they are used.

07-04-2010, 05:54 PM	#5
PGR Confirmed User Industry Role: Join Date: Jul 2004 Location: Ontario Posts: 1,753	Fris: Can you tell me what I should be looking for? An example of this "nasty code" would be very helpful.

07-04-2010, 06:04 PM	#6
PGR Confirmed User Industry Role: Join Date: Jul 2004 Location: Ontario Posts: 1,753	Just found a hidden link in one. Motherfucker. Thanks for the heads up fris

07-04-2010, 06:33 PM	#11
Highest Def In the Cave of Gold Industry Role: Join Date: Jun 2010 Location: ONLINE Posts: 660	Thanks for the info. I'm surprised this isn't a much larger problem with so many fly-by-night free theme sites out there. Almost 40K downloads of malicious themes from that site. Geez __________________

07-04-2010, 06:52 PM	#12
AdPatron No commissions, no fees. Industry Role: Join Date: Apr 2003 Location: USA Posts: 17,706	Hack the planet!

07-04-2010, 06:52 PM	#13
slayer69 Confirmed User Join Date: Oct 2008 Posts: 626	thanks for the heads up. Was about to use them

07-04-2010, 06:57 PM	#14
PGR Confirmed User Industry Role: Join Date: Jul 2004 Location: Ontario Posts: 1,753	Hidden links are in sidebar.php at the bottom. Believe it's the same for each theme.

07-04-2010, 06:57 PM	#15
adult-help Confirmed User Industry Role: Join Date: Mar 2008 Posts: 2,450	thanks for this. Good to know to be more careful! __________________ Adult web templates, Adult WordPress Themes, TGP, MGP.. also Complete Wordpress PaySite Development - Adult WordPress Blog Themes - Free FHG Templates - Free PaySite Script - Adult Tutorials Directory - Adult Domain Marketplace - Adult Jobs

07-04-2010, 07:03 PM	#16
sortie Confirmed User Industry Role: Join Date: Mar 2007 Posts: 7,771	Free shit.................. __________________

07-04-2010, 07:09 PM	#17
devine Confirmed User Join Date: Jul 2006 Posts: 620	that's the cost of 'free'

07-04-2010, 07:28 PM	#18
PGR Confirmed User Industry Role: Join Date: Jul 2004 Location: Ontario Posts: 1,753	Lesson learned

07-04-2010, 07:55 PM	#19
dav3 Confirmed User Industry Role: Join Date: May 2007 Posts: 7,348	Thanks for the heads up. __________________ Webmasters :: Juicy Ads :: ACWM :: Crak Revenue :: Money Tree

07-04-2010, 07:59 PM	#20
cambaby So Fucking Banned Join Date: Feb 2003 Location: CR Posts: 3,141	Say Fris you dont happen to know a plugin that will make custom seo urls for each media gallery image?

07-04-2010, 08:12 PM	#21
BigRod Confirmed User Join Date: Apr 2005 Location: Vancouver, BC Posts: 3,685	Jesus... I guess thats what free gets __________________ Rod Macdonald Mainstream Ad Agency Owner ICQ: 607306

07-04-2010, 10:07 PM	#23
EliteWebmaster Confirmed User Join Date: Feb 2010 Posts: 3,983	Thanks for the heads up Fris Any recommendations on some good sites for templates in terms of quantity and non messed up codes?

07-04-2010, 11:31 PM	#24
Nikitos Confirmed User Join Date: May 2009 Posts: 372	Thank for the heads up. I was about to use them. Now i won't. __________________ IdolBucks.com - the best Asian affiliate program

07-04-2010, 11:54 PM	#25
Matyko PsyHead Industry Role: Join Date: Aug 2005 Location: Hungary Posts: 8,671	Thanks a lot for the warning. Peace __________________ -=- Register with our ref link and we help you with the setup! -=- AdSpyglass.com - Double your profit from brokers

07-05-2010, 01:14 AM	#26
raven1083 Confirmed User Join Date: Jul 2007 Posts: 7,687	Thank you for sharing it here __________________ Femdom Stories \| Bound BBW Blog and Videos \|Bondage Sex Videos and Pictures Hardcore Japanese Bondage \| BDSM Movies And Galleries Mistress Cuckold CBT

07-05-2010, 02:09 AM	#27
pradaboy sell me your banners Industry Role: Join Date: Dec 2003 Location: on the tubes Posts: 12,931	Thanks for the heads up fris. Do you have any experience with WP Remix btw? __________________ Media Buyer - Sell me your traffic! FREE to register domains... Better than 99% of the crap sold here!

07-05-2010, 02:20 AM	#28
The Duck Adult Content Provider Industry Role: Join Date: May 2005 Location: Europe Posts: 18,243	Thanks for the heads up. __________________ Skype Horusmaia ICQ 41555245 Email [email protected]

07-05-2010, 02:21 AM	#29
M0nk Confirmed User Industry Role: Join Date: Feb 2007 Location: uruguay Posts: 3,502	Good info fris, thanx a lot! __________________ No! I don´t work for SPACash anymore so stop asking. ICQ: 458651805

07-05-2010, 02:52 AM	#30
babymaker Confirmed User Industry Role: Join Date: Jan 2004 Location: philly Posts: 4,751	Thanx for the info __________________ $99mo Hosted CMS From ElevatedX! ICQ 293125596

07-05-2010, 02:54 AM	#31
Dtothex Registered User Join Date: Jun 2010 Location: UK Posts: 49	Thanks for tip! V useful.

07-05-2010, 03:29 AM	#32
Denny Too lazy to set a custom title Industry Role: Join Date: Feb 2005 Posts: 17,280	Thanks for the heads up __________________

07-05-2010, 03:44 AM	#33
seeandsee Check SIG! Industry Role: Join Date: Mar 2006 Location: Europe (Skype: gojkoas) Posts: 50,945	397710 WordPress Themes was downloaded Jesus, they can serve true that all the shit __________________ BUY MY SIG - 50$/Year Contact here

07-05-2010, 05:51 AM	#35
Konkan Confirmed User Industry Role: Join Date: Jun 2008 Posts: 3,537	Thanks fris. This was very helpful !!! __________________ Only one affiliate program for Pussy and Cash

07-05-2010, 06:46 AM	#36
Si Such Fun! Industry Role: Join Date: Feb 2008 Posts: 13,900	Thanks for the heads-up

07-05-2010, 08:01 AM	#38
pornguy Too lazy to set a custom title Industry Role: Join Date: Mar 2003 Location: Homeless Posts: 62,911	Now that really sucks. Fris I believe you have put out some nice themes or someone here has.. I know Czarina does them as well. Bump for good info. __________________ PornGuy skype me pornguy_epic AmateurDough The Hottes Shemales online! TChicks.com \| Angeles Cid \| Mariana Cordoba \| MAILERS WELCOME!

07-05-2010, 01:35 PM	#40
pradaboy sell me your banners Industry Role: Join Date: Dec 2003 Location: on the tubes Posts: 12,931	fris, any experience with wp remix? __________________ Media Buyer - Sell me your traffic! FREE to register domains... Better than 99% of the crap sold here!