Here is how you can create a WordPress plugin with a shortcode to display the user’s IP address: <?php /* * Plugin Name: IP * Plugin URI: https://wpxss.com/application/ip * Description: Provides a shortcode to display the user’s IP address. * Version: 1.0 * Author: Stefan Pejcic * Author URI: https://pejcic.rs */ function ip_shortcode( $atts ) … Read full article →
WordPress is an awesome content management system. You can install it in one click, you can find professional-looking themes for as little as a few dollars, and you can use a wide range of plugins for added functions and features. Nonetheless, WordPress websites can become sluggish sometimes, chasing impatient visitors away. This article is going … Read full article →
Here is a handy snippet that displays a random post, so each time a user refreshes the page a different post will appear. The snippet should be saved as a PHP template for pages and a page has to use it. Step 1. Create a new file random.php inside your active theme folder and put … Read full article →
File inclusion vulnerabilities allow an attacker to read (and sometimes execute) files on the WordPress website, gain unauthorized access to sensitive information and inject malicious files through the “include” functionality. This can be very dangerous because if the webserver is misconfigured the attacker may gain access to sensitive user information and even execute arbitrary commands. There … Read full article →
To put a string after the price of WooCommerce product and cart pages, use the WooCommerce filters woocommerce_cart_item_price and woocommerce_get_price_html Add the following code to your active theme functions.php file. Make sure to change <span class=”price-suffix”>TEXT AFTER THE PRICE</span> with your text or HTML code. NEXT: How to Add text before the price in WooCommerce
IDBTE4M BOT V87 is a PHP shell that has a rarely good mailer function which is hard to detect because it uses random [email protected] for sending SPAM: source code: when accessed publically the IDBTE4M BOT V87 shell gives a blank page, but with a POST request containing the random password, the shell looks like this: … Read full article →
First and first, I must stress that this is a bad idea and that I do not recommend it. Why? Because you’ll remove all of Cloudflare’s protection for the wp-admin dashboard. Cloudflare waits 100 seconds for an HTTP response. If the origin doesn’t respond in that time, Cloudflare closes the connection and you’ll see “Error … Read full article →
wp-admin/plugins.php displays the plugins list table using the array $plugins_all which contains information on all installed plugins. We can use pre_current_active_plugins hook to perform actions before the plugin information is displayed on this page. TIP: The best way to understand what a hook does is to look at where it occurs in the source code. … Read full article →
In this guide, I talked about adding WP-CLI to your system, but if you use cPanel with CloudLinux, you also need to include it in CageFS so that all users can access the wp command. First, download the WP-CLI command inside /usr/local/bin Add WP-CLI path to CageFS: and inside add: save the file, then update … Read full article →
A straightforward PHP script called R4gn4r0 Mailer is used to send bulk emails from WordPress websites that have been hacked. It offers capabilities like email address filtering, mass emailing, and blacklist checking and is essentially a clone of the LeafMailer. The malware is often discussed as a wp-active2.php file. Simple login form, the password is … Read full article →