Delete malware warning counter-wordpress.com

There is a leak in old versions of TimThumb, read the article about it here. This week (started on august 22) many WordPress (with TimThumb) users encountered problems with there websites. Google marked there websites as a risk (including one of my websites).

The websites connected to counter-wordpress.com. The script/malware had the abbility to enter your database, create a database dump, play sounds (?), get your WordPress password and more.. With the curl_setopt function there were able to install php scripts on your server.
So for those who have problems, a quick guide to fix this. And for those who doesn’t have problems yet. Update TimThumb (latest version here)!

Fix this malware warning step by step:

Continue reading

TimThumb upscale fix: stop timthumb from upscaling small images

TimThumb is hosted on http://code.google.com/p/timthumb/, more documentation on the website of the author BinaryMoon.
I had problem with TimThumb, first off all with my multisite but i found a nice fix written by my Dutch colleagues on http://www.letuslook.nl/how-to-make-timthumb-work-in-wordpress-multisite/.

Then TimThumb was scaling up my small images!

I searched for a couple of hours for a fix but no good results. The only interesting result I found was about the same issue I had (over here). In the issue they refered to an older version of TimThumb which is located here (#69). Well with that version i was capable of fixing my upscaling problem.

Continue reading

Verve Meta Boxes – WordPress Multi Site Timthumb fix

Timthumb doens’t work with a WordPress multi site (MU), fortunately there is a fix for this problem on the Binarymoon blog (developer of Timthumb).

Update: This fix is now included in the new version of Verve Meta Boxes!

But I also had this problem with Verve Meta Boxes. I didn’t generate thumbnails within my multi site installation. That’s because Verve is using Timthumb too.

Based on the solution by Binarymoon I managed to fix the Verve timthumb problem to by editing the plugin.

I’m using Verve meta boxes 1.2.6

On line 435 of verve-meta-boxes.php you will find the following code:

echo '<div><img src="'.plugins_url().'/verve-meta-boxes/tools/timthumb.php?src='.$meta_box_value.'&w=180&zc=1&q=95" alt="" />';

Change this to:

$theImageSrc = $meta_box_value;
global $blog_id;
if (isset($blog_id) && $blog_id > 0) {
$imageParts = explode('/files/', $theImageSrc);
    if (isset($imageParts[1])) {
        $theImageSrc = '/blogs.dir/' . $blog_id . '/files/' . $imageParts[1];
    }
}
echo '<div class="verve-img"><img src="'.plugins_url().'/verve-meta-boxes/tools/timthumb.php?src='.$theImageSrc.'&w=180&zc=1&q=95" alt="" />';

And your Verve meta boxes will generate thumbnails again within your WordPress multi site!

Update: This fix is now included in the new version of Verve Meta Boxes!