Tag Archives: wp

Interesting WP Spam Hack

A really interesting spam hack popped onto my radar today. Here’s the post from the LITABlog, as seen in browser:

LITABlog Spam Hack

Here’s the bottom of the post. Nothing unusual, right?

LITABlog Spam Hack

Here’s the same post in Google Reader:

LITABlog Spam Hack

Spamolicious! Where the hell did all that come from? From this little piece of code in the post:

LITABlog Spam Hack

A hidden bit of code in the bottom of the post. I hadn’t seen this before, but Joshua M. Neff told me it happened to him as well. In the comments there was a link to the wordpress developer’s blog about a similar issue…but not an identical issue. I don’t think this is necessarily a SQL injection issue.

So: anyone have any thoughts? How did that code get put into an existing post? LITABlog is running the latest version of WordPress, so it’s not that. I don’t see any more of them, but I won’t unless I look through the code manually or whip up some SQL-fu that greps for the hidden css string. Which I will do if I must, but I thought maybe someone out there had a better idea. 🙂

A week between posts

It’s been a week since I last got up the gumption to post here, mostly due to the ongoing issues with WP2.1. I’m a HUGE WordPress fan, and have been using it for this very blog since 1.3 or so. The additions to 2.1, for the most part, are welcome and needed, especially the auto-save feature. But it required far too much of my time figuring out how to get my links back into shape (they killed certain php calls in the code), and I still haven’t gotten my byline happy.

The byline on my site was being ran by having a random named link called from the links function of WP…things like “where no one notices the contrast of white on white” and “it’s the one that says Bad Motherfucker on it” were randomly inserted below my title. But now, because they’ve broken the title_li php function in their code, I can’t surpress the “Byline” heading of the category when I try and place the links there.

In all, it’s been very frustrating.

But, good things are coming. I’m on the way (tomorrow!) to Vegas, Baby!, for a much-needed vacation. So expect some pics and stories (well…some stories). Also, I’m working on an interesting analysis of the first foray into Podcasting by myself and my buds over at LITABlog…some cool stuff there as well.