The Content Provided on HackClarify are Only for Security Awareness & Educational Purposes Only, Hackclarify is Not Responsible for any Harm Done!
Place Your Ads Here By Requesting Using The Contact Form
Steal/Copy a Wordpress website's Theme
Copying the whole wordpress theme is not easy task but not too difficult as you think. In this post, I’m going to teach you how to copy the wordpress theme using Firefox and Firefox plugin called Firebug. But I’m afraid that my guideness will lead you to be a thief. Keep in mind that you should consider copyright and respect other’s people work. This tutorial will helps you to improve your knowledge of XHTML, CSS and the wordpress coding.
Before you start you must have Wordpress runing on your local machine, knowledge of XHTML, CSS and programming. And your computer must has Firefox installed and it’s plugin called Firebug.
So, lets get started. First, make a theme folder (name it whatever you like) under /wp-content/themes/. Visit the blog you like to copy it’s theme. Here, I’m using Wordpress’s classic theme. Copy the CSS codes from CSS tab in Firebug Windows .
Select all of CSS codes and paste into text editor (notepad). Put the following codes at the beginning of CSS codes previously copied into notepad. The following codes are used for wordpress theme information.
/*
Theme Name: Your theme name
Theme URI: OpenDNS
Description: Your theme description blah blah blah
Version: 1.1
Author: Your name
Author URI: E-Commerce Hosting
*/
Save it as style.css into theme folder you created under wp-content/themes/.
Firebug’s HTML tab collasped the heading tag and body tag by default. Create a index.php under your theme folder. Write the following codes.
<!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”>
Before you start you must have Wordpress runing on your local machine, knowledge of XHTML, CSS and programming. And your computer must has Firefox installed and it’s plugin called Firebug.
So, lets get started. First, make a theme folder (name it whatever you like) under /wp-content/themes/. Visit the blog you like to copy it’s theme. Here, I’m using Wordpress’s classic theme. Copy the CSS codes from CSS tab in Firebug Windows .
Select all of CSS codes and paste into text editor (notepad). Put the following codes at the beginning of CSS codes previously copied into notepad. The following codes are used for wordpress theme information.
/*
Theme Name: Your theme name
Theme URI: OpenDNS
Description: Your theme description blah blah blah
Version: 1.1
Author: Your name
Author URI: E-Commerce Hosting
*/
Save it as style.css into theme folder you created under wp-content/themes/.
Firebug’s HTML tab collasped the heading tag and body tag by default. Create a index.php under your theme folder. Write the following codes.
<!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”>
<html xmlns=”http://www.w3.org/1999/xhtml”>
<head profile=”http://gmpg.org/xfn/11″>
</head>
<body>
</body>
</html>
<head profile=”http://gmpg.org/xfn/11″>
</head>
<body>
</body>
</html>
language_attributes() can be used to add lang, xml:lang and dir attributes to the html tag for your theme. Put this function after xmlns attribute in html tag.
<html xmlns=”http://www.w3.org/1999/xhtml” <?php language_attributes(); ?>>
Understanding BlogInfo functions
BlogInfo returns the information you set in User Profile and General Options from your Wordpress Administration panel. Following codes are the basic information of your wordpress needed for html. Those codes must be inside heading <head> tags.
BlogInfo returns the information you set in User Profile and General Options from your Wordpress Administration panel. Following codes are the basic information of your wordpress needed for html. Those codes must be inside heading <head> tags.
<meta http-equiv=”Content-Type” content=”<?php bloginfo(’html_type’); ?>; charset=<?php bloginfo(’charset’); ?>” />
<meta name=”generator” content=”WordPress <?php bloginfo(’version’); ?>” />
<link rel=”alternate” type=”application/rss+xml” title=”RSS 2.0″ href=”<?php bloginfo(’rss2_url’); ?>” />
<link rel=”alternate” type=”text/xml” title=”RSS .92″ href=”<?php bloginfo(’rss_url’); ?>” />
<link rel=”alternate” type=”application/atom+xml” title=”Atom 0.3″ href=”<?php bloginfo(’atom_url’); ?>” />
<link rel=”pingback” href=”<?php bloginfo(’pingback_url’); ?>” />
<?php wp_get_archives(’type=monthly&format=link’); ?>
<?php wp_head(); ?>
<style type=”text/css” media=”screen”>
@import url( <?php bloginfo(’stylesheet_url’); ?> );
</style>
<meta name=”generator” content=”WordPress <?php bloginfo(’version’); ?>” />
<link rel=”alternate” type=”application/rss+xml” title=”RSS 2.0″ href=”<?php bloginfo(’rss2_url’); ?>” />
<link rel=”alternate” type=”text/xml” title=”RSS .92″ href=”<?php bloginfo(’rss_url’); ?>” />
<link rel=”alternate” type=”application/atom+xml” title=”Atom 0.3″ href=”<?php bloginfo(’atom_url’); ?>” />
<link rel=”pingback” href=”<?php bloginfo(’pingback_url’); ?>” />
<?php wp_get_archives(’type=monthly&format=link’); ?>
<?php wp_head(); ?>
<style type=”text/css” media=”screen”>
@import url( <?php bloginfo(’stylesheet_url’); ?> );
</style>
Use Better Search Engine Optimization title
<title><?php wp_title(”); ?> <?php if(is_single() || is_page() || is_category){ _e(’»’);}?><?php bloginfo(’name’); ?></title>
Title tag must be inside heading tags.
Let’s start copy the well-formed tag elements
Before you start this lesson, you must have the knowledge about html and wordpress coding. The idea is that we first copy the parent tag elements and then we copy it’s child elements. We repeat the process till all of the tags are copied.
Expand each tags and try to understand the functions used in the theme
It is important to know the wordpress functions used in the theme which you’re going to copy. First expand the tags and look up and determine what functions are used inside the tags.
An example for code shown in above,
Wordpress has bloginfo function that can generate the basic information of your wordpress I already mentioned. Right now, I’m going to change with the wordpress coding. The following codes will generate the result shown in above.
Let’s start copy the well-formed tag elements
Before you start this lesson, you must have the knowledge about html and wordpress coding. The idea is that we first copy the parent tag elements and then we copy it’s child elements. We repeat the process till all of the tags are copied.
Expand each tags and try to understand the functions used in the theme
It is important to know the wordpress functions used in the theme which you’re going to copy. First expand the tags and look up and determine what functions are used inside the tags.
An example for code shown in above,
Wordpress has bloginfo function that can generate the basic information of your wordpress I already mentioned. Right now, I’m going to change with the wordpress coding. The following codes will generate the result shown in above.
<h1><a href=”<?php bloginfo(’url’);?>“><?php bloginfo(’title’);?></a></h1>
<div class=”description”><?php bloginfo(’description’);?></div>
<div class=”description”><?php bloginfo(’description’);?></div>
Many of wordpress theme creators used default posts query in the theme except custom one. Some used query_posts to make custom query for some purposed. It doesn’t matter. All are in the loop.
Understand the basic structure of Post looping
The Loop is used by WordPress to display each of your posts. Using The Loop, WordPress processes each of the posts to be displayed on the current page and formats them according to how they match specified criteria within The Loop tags. This is the basic structure of the_loop. Inside this we normally put the_title(), the_permalink(), the_content(), etc.
Understand the basic structure of Post looping
The Loop is used by WordPress to display each of your posts. Using The Loop, WordPress processes each of the posts to be displayed on the current page and formats them according to how they match specified criteria within The Loop tags. This is the basic structure of the_loop. Inside this we normally put the_title(), the_permalink(), the_content(), etc.
<?php if ( have_posts() ) : while ( have_posts() ) : the_post(); ?>
<?php endwhile; else: ?>
<?php _e(’Sorry, no posts matched your criteria.’); ?>
<?php endif; ?>
<?php endwhile; else: ?>
<?php _e(’Sorry, no posts matched your criteria.’); ?>
<?php endif; ?>
If you’re doing programming, you can easily know that the following codes are generated from Loop.
The following codes will output shown above
The following codes will output shown above
<div id=”post-<?php the_ID(); ?>” class=”post”>
</div>
</div>
Expand that div you’ll see the following sub elements
Expand h2 tag element.
the_title and the_permalink
the_title returns the post title and the_permalink returns the permalink of your post. So rewrite with the
php code
Expand h2 tag element.
the_title and the_permalink
the_title returns the post title and the_permalink returns the permalink of your post. So rewrite with the
php code
<h2>
<a title=”Permanet Link to <?php the_title();?>” rel=”bookmark” href=”<?php the_permalink();?>”>
<?php the_title();?></a>
</h2>
<a title=”Permanet Link to <?php the_title();?>” rel=”bookmark” href=”<?php the_permalink();?>”>
<?php the_title();?></a>
</h2>
the_time or the_date
the_time returns the all the date of your post. and the_date only returns the date of first post which is published in same day. I prefer you to use the_time
the_time returns the all the date of your post. and the_date only returns the date of first post which is published in same day. I prefer you to use the_time
<small><?php the_time(’F d, Y’);?></small>
Check date time format from PHP.net
the_content
the_content returns the content of post. Optional parameter is used for showing read more link if the post used <!–more–>
the_content
the_content returns the content of post. Optional parameter is used for showing read more link if the post used <!–more–>
<div class=”entry”>
the_content (’Read the rest of this entry’);
</div>
the_content (’Read the rest of this entry’);
</div>
the_tags
the_tags function return the tags link of the post. It was implemented in wordpress 2.3. the_tags(’start’, ’seperate’,’end’);
the_tags function return the tags link of the post. It was implemented in wordpress 2.3. the_tags(’start’, ’seperate’,’end’);
<p class=”postmetadata”>
the_tags (”Tags:”, “, “, “<br />”);
</p>
the_tags (”Tags:”, “, “, “<br />”);
</p>
Wordpress uses header.php, index.php, single.php, page.php, category.php, search.php, comments.php, functions.php and footer.php for theme. Oh! you can use only index.php for your theme. But need to write more complicated codes when you’re using different style for different page. Let’s say, if you want main , single post and page different. You have to choose either conditional_tags or the page.
For example, the following code will show excerpt post while browsing the category, search, tags and main page. It shows full content when browsing … ? ha ha single post
For example, the following code will show excerpt post while browsing the category, search, tags and main page. It shows full content when browsing … ? ha ha single post
<?php if (is_category() || is_search() || is_tags() || is_main()) {
the_excerpt();
}else {
the_content();
}
?>
the_excerpt();
}else {
the_content();
}
?>
This Post is completely for educational purposes, by no means you should copy someone else's personally made template, or steal something without paying for it! Please download a free theme if its that important!
Read More
Add your Comment
4
Replies
WP Scan- WordPress Vulnerability Scanner
Introduction
WPScan is a vulnerability scanner which checks the security of WordPress installations using a black box approach.
Download
Please download the latest WPScan from our Subversion (SVN) code repository by issuing the following command:
svn checkout http://wpscan.googlecode.com/svn/trunk/ ./wpscan
Details
Username enumeration (from author querystring and location header)
Weak password cracking (multithreaded)
Version enumeration (from generator meta tag and from client side files)
Vulnerability enumeration (based on version)
Plugin enumeration (2220 most popular by default)
Plugin vulnerability enumeration (based on plugin name)
Plugin enumeration list generation
Other misc WordPress checks (theme name, dir listing, ...)
Installing on Windows: (not tested)
gem install typhoeus ("Windows is not officially supported")
gem install xml-simple
Read More
Add your Comment
0
Replies
Secure your blog running on Wordpress
Hackers are the people like you and us but the only difference is that they use their skills for the negative and destructive purposes, they use their skills to break a website,but there is a term Ethical Hacker, which are the hackers who increase Security. they normally destroy all the stuff's, so if you are a admin of a website you should care about the security of the website .
As you know that the wordpress is a common and most popular plate form for blogging, but the security of the wordpress is always a hot discussion and it need more and more concentration because vulnerability discover everyday. Below are some tips to make your blog secure:
Secure WP-Admin By IP
Let suppose if someone can get the ability(username & Password) to enter into your website WP section, you can restrict this area by your IP. It prevent brute forcing attack and only you can able to control on your website because of IP restriction.
Order deny,allow
Deny from All
Allow from 123.456.789.0
You can allow and deny IP's from a range use this:
order deny,allow deny from all # allow my home IP address allow from XX.XX.XXX.XXX # allow my work IP address allow from XX.XX.XXX.XXX
Protect WP-Config.php File
WP-Config.php file has a great importance on wordpress plate form, it need more care and usually an attacker get the required information about the database of your website from WP-Config file. Basically if you use a strong database user-name and password while your WP-Config security is low than an attacker can get your strong user-name and password from wp-config file, because it contain all the information about the security and other things of your website.
Access .htaccess file is located at the root your WordPress installation open it and paste the following code.
order allow,deny
deny from all
Hide WordPress Version Number
You must hide the version of your wordpress because an attacker may find the available exploit by searching it on different exploit database by version number and it may cause a great harm for your blog so be care about it.
This tag is in the header.php file that displays your current version of wordpress
Copy and paste the code in the functions.php file of your theme and than you are done.
remove_action('wp_head', 'wp_generator');
Remove Error Message From Login Screen
This is your clever move to remove the error message that an attacker would not able to see if the user-name and password incorrect, update your function.php by this code.
add_filter('login_errors',create_function('$a', \"return null;\"));
Some Other Security Tips
Use your mind because mind is an essential part to secure yourself on the jungle of web.
Create strong passwords that are not easily be guess or crack.
Secure your own side(your computer) from different malware.
Make regular backup of your blog.
Update your wordpress to latest version
Use SSH instead of FTP
Avoid using your account on public places
You must be ware on different attacks to secure yourself.
Read More
Add your Comment
0
Replies
