Just kinda interesting.... web2feel.com spaming themes

3 replies
I was helping a fellow member with an error in his theme.
This caused me to spend some time looking through the code.

There is a base64 encode function in the header, that is called from the sidebar.

If the visistor is NOT logged in as admin, a bunch of spam links are dumped in the sidebar. The links are from nolimitswebdesign.com a link share site.

Neat scam, and a great way to get your blog banned from google.

The code is rather well written and hard to find. But... Google will see it.
I recomend you do not use any themes from web2feel

Just some friendly advice.
#interesting #kinda #spaming #themes #web2feelcom
  • Profile picture of the author andreaskam
    Whilst I'd always personally recommend people stay away from free themes and instead opt for something on themeforest or by WooThemes it's a little too quick to point the blame at web2feel. In fact any site that was using an old version of TimThumb could be attacked. I had a site by WooThemes that was hacked in the same way and didn't figure it was my TimThumb that was causing a problem until the last stage. Thousands of wordpress blogs were hacked in this way by the end of 2012 so you should always be updating your theme to the latest version and subscribe to the developers blog to hear about updates.
    {{ DiscussionBoard.errors[5407198].message }}
  • Profile picture of the author frenchsquared
    theme was not active on the site, installed fresh that way.
    The version he download came that way.

    But yes... I feel kinda bad about the post after talking to the themes coder.
    It was not his fault.
    {{ DiscussionBoard.errors[5407269].message }}
  • Profile picture of the author kokopelli
    Yep, (almost) all of their themes contain obfuscated code and hidden links, and they "phone home" - I wouldn't touch them with a barge pole ...
    Signature
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    {{ DiscussionBoard.errors[5408075].message }}

Trending Topics