WP Core hacking

I used this code recently to hack wordpress’s core to allow image uploads that have no file extension.

I was getting a invalid file type security error and had tried all sorts of httaccess trickery to get it to work when I finally resorted to hacking the core of WordPress MU 3.0. This is pretty easy as I found out and only required me to add one line of code. Some of the issues I’m having are that the file size isn’t reported and neither is the dimensions. Any advice or a way for me to make this into a plugin would be very nice, as I’ve never made a wordpress plugin before.

In wp-includes/functions.php find line #2359 and look for this code, and make it look like the code below.

function wp_check_filetype( $filename, $mimes = null ) {
	if ( empty($mimes) )
		$mimes = get_allowed_mime_types();
	$type = false;
	$ext = false;

	foreach ( $mimes as $ext_preg => $mime_match ) {
		$ext_preg = '!\.(' . $ext_preg . ')$!i';
		if ( preg_match( $ext_preg, $filename, $ext_matches ) ) {
			$type = $mime_match;
			$ext = $ext_matches[1];
			break;
		}
	}
// http://Green.cx (Allow Uploading of Images without Extension )
if ($ext==''){$ext='jpg'; $type='image/jpg';}
// End WordPress Core Hack
	return compact( 'ext', 'type' );
}

Related posts:

1. How to add FB Like to every post
2. Speedup WordPress Tip#2

In light of the recent ban of Facebook in Pakistan I’m going to show you how to bypass any web filter,maintain the highest form of privacy, on ANY computer, and without installing any software or visiting lame “proxy” websites! And it’s all thanks to Torfox, a derivative of Firefox and Tor mashed together! Tor uses multiple layeres of cryptography (hence the Onion routing analogy), ensuring perfect forward secrecy between routers (You and your destination). In short, TOTAL PRIVACY, and BYPASSES WEB FILTERS.

Simply go to http://torfox.org/ and download the portable Torfox Zipped package, and extract it to a folder, preferably on a flash drive.

Then run torfox.exe and it will open a slim looking version of Firfox. The first page won’t load right away, it could take up to three mins to connect, but then once it does, you can surf anywhere, without limits or worries!

Screencast coming soon!

No related posts.

Effectively blocking Comment Link spam in WordPress

A simple little wordpress setting can save you a lot of  headachs in regards to WordPress Spam Comments…

So I noticed about 330 Spam Comments that needed moderation in my WordPress the other day and that’s when I hit my limit. I hate spammers, and link spammers are the worst. They spam links in comments trying to “Steal” your page rank, or piggy back off of it or whatever. To boost their sites rank in Google. That is the dumbest thing they could do however, because if Google sees 1,000′s of blog comments linking back to your site overnight, Google will ban you. So what’s the point? Why do they do this?

They buy spamming software for hundreds, sometimes thousands of dollars, with the promises that Google will love their website and they will make ten times what the app cost. LOL If that were true, why would they DARE to sell their own software? Why wouldn’t they just dominate Google and rule the world? Because they already have! They used the software back when it worked, after the big “G” stopped them, they needed a new source of income. So they go fishing for suckers. It’s those poor dumb sheep that listen to what these “Black Hat SEO Elite” preach and buy into their crappy comment link spamming software.

So if it’s so rampant how do we fight back? Easy, NO links in comments. Period. Not this No Follow crap either. How easy is it to do this? In word press admin go to your Settings section in the lower left.  Then scroll down to the black list text box, and copy paste this in to it.

.a
.b
.c
.d
.e
.f
.g
.h
.i
.j
.k
.l
.m
.n
.o
.p
.q
.r
.s
.t
.u
.v
.w
.x
. y
.z

(One per line) And finally save your settings. This will block any comment that has a .com .cx .ru . anything

Yes, if someone types a sentence and doesn’t space between them it will block it, but IMO that’s worth the effort to effectively eliminate comment link spam. Can they still spam you? Yes, absolutely, but plain words aren’t as bad as them dragging your Page Rank down and making an association from your site to theirs.

Related posts:

1. Blocklist of Bad Facebook Apps.
2. Speedup WordPress Tip#2

Make your network safer, faster, smarter, and more reliable.

OpenDNS is a free service that works for networks of all sizes, from home networks to K-12 schools, SMBs and large enterprises.

Here is why I like OpenDNS and I use it on my networks, even at home!

It’s really easy to deploy, you only have to change your DNS Addresses to: 208.67.222.222 and 208.67.220.220

• Security

Industry-leading anti-phishing protects everyone on your network from fraudulent phishing scams.

Award-winning Web content filtering gives you the power to block up to 50 categories of content.

Detailed statistics empower you to understand your network traffic and spot trends before they become problems.

• Infrastructure

OpenDNS’s distributed network makes Web sites load noticeably faster on your network.

They use something called Anycast routing technology which is supposed to make your Internet more reliable.

• Navigation

Browser Shortcuts let your users map a short term to a long URL via the address bar.

Typo correction auto-corrects the most common typos in top-level domains.

OpenDNS Guide also provides helpful search results when your users try to visit a Web site that isn’t resolving. Ok, maybe that’s a little bit more for them to recoupe the costs of running those servers for us. But hey, at least I know they are not malicious…

No related posts.