Security issues in a WordPress Plugin

[raman2572]

I am using Strx Magic Floating Sidebar Maker plugin on my blog [www.designrapid.com](http://www.designrapid.com “Design Rapid”) , yesterday i opened by blog in college library, i was surprised to see my blog was showing unknown ad banner on sidebar to some Jewelery and fashion website. All this happened after i installed this plugin.

[DustinWoods]

I tried to get this plugin to work, but I didn’t have much luck. But, I think I found where the author put their own ads in the plugin.

Go to your plugins->Strx Magic Floating Sidebar Maker, click “edit.” Look in the source code for

`$rv.='

src="http://pagead2.googlesyndication.com/pagead/show_ads.js">

';`

Deleting this should get rid of the ads. I don’t know what the license is for this plugin though, the author may frown upon you.

[raman2572]

gosh, how can they do this, i found a 300*250 ad banner on my blog

[raman2572]

gosh now i found this
function strx_floating_sidebar_affiliates(){
return array(
//Elegant themes affiliate program http://www.elegantthemes.com/affiliates/
‘‘,
‘‘,
//Envato refer program http://themeforest.net/wiki/referral/basics-referral/referral-program/
//logos http://themeforest.net/wiki/referral/basics-referral/banners-and-logos/
//Themeforest
‘‘,
‘‘,
//Videohive
‘‘,
//Graphicriver
‘‘,
//Activeden
‘‘,
//Audiojungle
‘‘,
//3docean
‘‘,
//Codecanyon
‘‘,
//Tutsplus
//’‘,
//Woothemes
‘‘,
‘‘,
‘‘,
‘‘,
//Mojothemes
‘‘,
‘‘
);
}

There are too many unwanted ads

[raman2572]

this plugin have, a twitter link, a feedburner link, donate us link, 8 affiliate links, an adsense ad banner and much more. How this can be available on wordpress plugin repository!!!! its not safe

[raman2572]

it was too much, wrote a post on this issue check out [here](http://www.designrapid.com/wordpress-plugins-security-issue/ “wordpress threats”)

[DustinWoods]

I’ve never seen someone so heated about this. Hahaha. You seem very passionate about ethics of free software. I’m glad to see someone voicing their opinion about it though. I’m very surprised it got a 4.5/5 star rating. You would think some users would have noticed and gave it a bad review.

[raman2572]

Every developer should describe on shelf about his intenstions

[Author]

Posts