Wordpress Themes - WP Forum at BFA

Wordpress Themes - WP Forum at BFA (http://forum.bytesforall.com/index.php)
-   New Versions, & Updating (http://forum.bytesforall.com/forumdisplay.php?f=12)
-   -   [SOLVED] Website Defender Alert: Source code disclosure (http://forum.bytesforall.com/showthread.php?t=15782)

db65 Oct 26, 2011 01:37 PM

[SOLVED] Website Defender Alert: Source code disclosure
 
Hi,
First, thanks for a great theme. I've been using Atahualpa for a few years and enjoy how easy it is to build a good looking site. But, alas, I've recently been receiving a repeat warning from Website Defender and cannot figure out how to fix it (nor if it's actually a serious problem to worry about).

The error:
Quote:

Source code patterns were found on this page. The source code of server-side scripts helps an attacker to better understand the logic behind the Web application and may help him conduct further attacks.

Alert details
URL http://dailybayonet.com/?m=200702
Source code <?php bloginfo('template_directory');?>
There is a large number of these alerts, all pointed to items like Monthly post archives, Post categories etc.

I Googled for a solution (which led me here) and found an older thread that suggested the ATO settings for Configure CSS & JS should be set to inline, not external. I checked and mine is set to Inline. I tried switching the Debugging from No to Yes and back again, but am still getting the warning from Website Defender. So I'm out of ideas.

I've got Atahualpa 3.7.1 on a self-hosted Wordpress 3.2.1 with BlueHost. The url is shown in the error above.

I should note I'm not familiar with coding, if you could bear that in mind with any response, it'd probably reduce the number of times my head interfaces with the desk.

juggledad Oct 26, 2011 01:49 PM

go to ATO->Style POSTS & PAGES->POST Container: STICKY and change the line
HTML Code:

background: #eee url('<?php bloginfo('template_directory'); ?>/images/sticky.gif') 99% 5% no-repeat;
to
HTML Code:

background: #eee url(http://http://yourdomain.com/wp-content/themes/atahualpa371//images/sticky.gif') 99% 5% no-repeat;
where 'your domain.com' is your domain

db65 Oct 26, 2011 02:26 PM

Thanks for the swift response Juggledad.

I applied your fix, but noticed that the theme is now left-aligning pictures in posts and that the navigation tabs that were at the top of each page are now a horizontal list of links.

Is there a way to fix that?

juggledad Oct 26, 2011 02:36 PM

sorry get rid of the last single quote so you have
HTML Code:

background: #eee url(http://http://yourdomain.com/wp-content/themes/atahualpa371//images/sticky.gif) 99% 5% no-repeat;
ie sticky.gif') should just be sticky.gif)

db65 Oct 26, 2011 02:44 PM

Thank you, it's all back as it was now. Who knew a ' could be so pesky?


All times are GMT -6. The time now is 01:12 PM.

Powered by vBulletin® Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.