Roparadise
BANNED
- May 25, 2011
- 784
- 1,422
What do I look for in a theme,to see if there might be a modification that will allow someone to gain access to my site? I just downloaded CTR theme v1.4 nulled.
Wordpress theme security
- Thread starter Roparadise
- Start date
┼blackrat┼
Senior Member
- Jul 31, 2010
- 980
- 799
what do you look at? the theme files. check if there is no encrypted code.
What are you, nuts?
TogaPartee
Newbie
- May 5, 2011
- 42
- 14
templates have easter eggs hidden in them
usually they are obfuscated so they do not look obvious
download the template
do mass find in all template or plugin files for this string
base64_decode(
this is what usually prefixes encoded stuff that someone does not want you to read
there are some legit uses but really why hide stuff unless there is an alterior motiv!
usually they are obfuscated so they do not look obvious
download the template
do mass find in all template or plugin files for this string
base64_decode(
this is what usually prefixes encoded stuff that someone does not want you to read
there are some legit uses but really why hide stuff unless there is an alterior motiv!
oakley56fila
Junior Member
- Feb 14, 2011
- 108
- 32
These plugins might help:
WP Security Scan
Login LockDown
Take a look at them.
WP Security Scan
Login LockDown
Take a look at them.
┼blackrat┼
Senior Member
- Jul 31, 2010
- 980
- 799
Roparadise
BANNED
- May 25, 2011
- 784
- 1,422
There wasn't any code that could get the uploader of ctr thene nulled in my site. Thanks for the advice guys
Just install the wp file monitor plugin to send you alerts that check if some of your themes files have been changed over time (it's a signal of site injection/hacking).