h4x3d.com

- h4x3d.com

Archive
Uncategorized

“If you’re good at something, never do it for free.” —The Joker

Or so he said!

Read More

update: f§*king wordpress mu won’t let me enter tags in my posts. I have tried the wordpress RAW plugin and other filters, but still. more updates on this tomorrow -> solution

There are different approaches to doing this (adding a paypal button to your wordpress page, or any html or php website):

You can copy&paste the code you find on most pages and wonder why you get really a lot of spam emails
or you can use the “secure merchant id” code from paypal
or you can grab a plugin at wordpress.org

To explain the first (revealing code)

<form name=”_xclick” action=”https://www.paypal.com/cgi-bin/webscr” method=”post”>
<input type=”hidden” name=”cmd” value=”_xclick”/>
<input type=”hidden” name=”business” value=”user@spam-me-please.com”/>
<input type=”hidden” name=”item_name” value=”Customer Service”/>
<input type=”hidden” name=”currency_code” value=”USD”/>
<input type=”hidden” name=”amount” value=”1.00″/>
<input type=”image” src=”http://www.paypal.com/en_US/i/btn/btn_donate_LG.gif” border=”0″ name=”submit” alt=”Make payments with PayPal - it’s fast, free and secure!”/>
</form>

While this has its advantages: you can easily specify the parameters, it also has the problem that your email address is very likely to be scraped and spammed by bots. So next time you receive one of those fake paypal “you need to click here to reactivate your account” emails… guess why you are receiving it.

I use the second version, the paypal secured id, because I am not too keen to exposing (any) email address to spam bots. The code below will generate a paypal button with my id in it. To change that or to get your code you need to login to paypal and get it from the merchant tab. Or you can enter “paypal button” in the search field top right of the page.

2) Click on Merchant services.
3) Click on websites payment standards.
4) Click on accept contributions.
5) Click on get donation button.

<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_s-xclick"/>
<input type="hidden" name="hosted_button_id" value="10155388"/>
<input type="image" src="https://www.paypal.com/en_US/i/btn/btn_donate_LG.gif" style="width: 100px; float: right;" border="0" name="submit" alt="PayPal - The safer, easier way to pay online!"/>
</form>

And now to the fun part actually: you will not be able to copy and paste the code(s) mentioned above, because wordpress will strip the input fields and nothing will display. So unless you are putting this code into your template (e.g. by including it in a separate php file), it won’t work, I believe.

You can however grab a wordpress plugin, like this paypal plugin to help you out.

Also of help – this support post at wordpress

hope this helps anyone,
best,
jez

Read More

Hello there,
I have a total of 16 Google Wave INVITATIONS to give-away. For free! It says 08 in the screenshot I made, which is the number of total invites you can give-away per account, but fortunately I have two accounts, which is why I can offer 16 Google Wave Invites for free

update! salem at technoheads is also giving away several invites, so unless this site gets hit by digg or something and I run out of invites, I am giving my remaining google invites to him and his audience

So if you care to get a Google Wave Invite, just leave a comment on this post (no need to put your email address in the comment field, I will get it when clicking on your comment) – if you feel like sharing, too, feel free to tell me what browser you are using and if the website (this) is displaying fine for you. If you are even more generous, you may even check out the fading animation part below this post and click&close.

Read More

Seems like either my server’s DNS management is entirely bust or WordPress/Automattic/Akismet changed something their end, because as discussed yesterday in my cannot resolve downloads.wordpress.org and dashboard (RSS) empty post, the fix is rather straight forward:

add the needed IPs and the corresponding hostname to /etc/hosts (on the server, not local client!),
you can see how to do it in the before mentioned post.

You can get the akismet IPs yourself by pinging rest.akismet.com or just check their website and FAQ at http://blog.akismet.com/akismet-hosting-faq

Just use the first one:
72.233.69.3
72.233.69.2
66.135.58.62
66.135.58.61

Read More

Cannot resolve downloads.wordpress.org ?
You are not alone!

I am running WordPress MU 2.8.4. and till today I have had no issues using the auto upgrade or auto update function of WordPress Plugins or WordPress MU Plugins until everything stopped working.

I pretty much googled for one hour and tried different solutions here and there, but nothing really worked, as the root/cause of the problem was literally at “root” level: I had to edit the /etc/hosts file on my server to reflect the correct IPs of wordpress.org

Open up the file /etc/hosts and add the following lines at the end:
You get to this file by ssh’ing into your server and typing “cd /etc/“.
On any unix server you can edit the hosts file by typing “vi hosts
In vi, press i to insert and paste (usual command+v) the lines below.
Press ESC briefly to exit the insert-mode. Then type in the following: :wq.
The : tells vi to change into command mode, the w to write to file and the q to quit the file.
Make sure to restart the httpd service by typing service restart httpd.
Some steps may be different depending on your setup, but this should in general work!

Below the IPs and the hostnames:

72.233.56.139 wordpress.org
72.233.56.138 downloads.wordpress.org
72.233.56.139 planet.wordpress.org
74.125.47.147 blogsearch.google.com
72.233.56.139 api.wordpress.org
72.233.56.142 codex.wordpress.org

(C/P’ed from http://mu.wordpress.org/forums/topic/14891)

Of course, if the IP addresses change in future, the ones entered before will have to be changed.
This can be done by simply pinging the domains from either command line (terminal on Mac OS X or cmd on Windows), using “ping”. On Mac OS X you will want to use “ping -c 5 wordpress.org” to limit the query to five pings. If you want to stop your pinging before, just break the operation by pressing Command + C.

If you cannot use any command line tool you may want to consider using Ping.eu the cute pingu that helped me out with several network related operations in the past.

I hope this article will spare you the useless hours of Googling :)

Searched for “cannot resolve downloads.wordpress.org”
Did help:
mu.wordpress.org/forums/topic/14891

Searched for “RSS Error: WP HTTP Error: name lookup timed out”
Did not help:
WordPress › Support » Dashboard issues: RSS Error:… – wordpress.org
wordpress.org/support/topic/293871

Searched for “An Unexpected HTTP Error occurred during the API request. “
Did not help:
WordPress › Support » Plugin API HTTP Error – wordpress.org
wordpress.org/support/topic/227430
WordPress › Support » Plugin Installer Bugs – wordpress.org
wordpress.org/support/topic/215527

Searched for “An Error has occured: name lookup timed out”
Did not help:
Case Study: RSS Error: WP HTTP Error: name lookup timed out … – bestwpthemez.com
www.bestwpthemez.com/…/case-study­-rss-error-wp-http-error-name-looku
How-to Fix WP HTTP Error: name lookup timed out « Roll Over – fatlabmusic.com
fatlabmusic.com/blog/…/how-to-fix-­wp-http-error-name-lookup-timed-o…

Searched for “Download failed. name lookup timed out”
Did not help:
WordPress › Support » name lookup timed out – wordpress.org
wordpress.org/support/topic/225535
Quick ‘n Dirty solution for wordpress: Download failed.:… – minkfarmen.net
sirmc.minkfarmen.net/…/quick-n-dirty­-solution-for-wordpress-download-­…

http://www.hart-empire.com/2009/03/26/download-failed-name-lo…

Read More

I figured out how to harden wordpress using ssh and some common sense.

I changed ownership (user) of the cache and uploads folder to apache by

chown apache uploads
chown apache cache

to enable apache to write to it

chmod was set to more restrictive value of 755 each instead of easily
exploitable (as it happened on solarvps and zone.net) chmod 777

chmod 755 uploads
chmod 755 cache

giving me the following structure

ls -l /wp-content/

drwxr-xr-x 2 apache psacln 60416 May 3 05:39 cache
-rw-r--r-- 1 comh4x3d psacln 30 Nov 14 03:26 index.php
drwxr-xr-x 83 comh4x3d psacln 3072 Apr 17 12:48 plugins
drwxr-xr-x 9 comh4x3d psacln 1024 Apr 17 12:37 themes
drwxr-xr-x 5 comh4x3d psacln 1024 Mar 25 07:04 upgrade
drwxr-xr-x 3 apache psacln 8192 May 3 05:38 uploads

by that wordpress can upload files to the uploads folder and files can
be created in the cache folder.

to restrict the folders even more I added a
.htaccess file with chmod 644 each

vi .htaccess

for uploads:

Deny from all
Allow from 72.249.95.104 # server IP address

Options -ExecCGI # disallow execution of below files
AddHandler cgi-scriptscript .php .pl .py .jsp .asp .htm .shtml .sh .cgi
# we dont want any dodgy pearl scripts or php to executed

Order Allow,Deny
Deny from all
# deny everything but the
image and text files
Allow from all

# deny
opening those files
Order Allow,Deny
Deny from all

similar file for the cache folder, but instead of the image and doc
files only meta and html are allowed, make sure to remove html from
execcgi line

I hope you appreciate this article,

best,
julian klewes
h4x3d.com

Read More

I could not resit NOT posting this, as someone has taken a lot of time and put a lot of effort into uploading all Simpsons episodes to date.

See below list:

http://rapidshare.com/files/282220712/The.Simpsons.S01E01.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282220962/The.Simpsons.S01E02.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282218581/The.Simpsons.S01E03.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282623225/The.Simpsons.S01E04.DVDRip.XviD.avi

http://rapidshare.com/files/282218638/The.Simpsons.S01E05.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282238507/The.Simpsons.S01E06.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282237059/The.Simpsons.S01E07.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282239505/The.Simpsons.S01E08.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282240014/The.Simpsons.S01E09.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282240384/The.Simpsons.S01E10.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282257002/The.Simpsons.S01E11.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282256992/The.Simpsons.S01E12.DVDRip.XviD-by_VINCENTUOS.avi

http://rapidshare.com/files/282258351/The.Simpsons.S01E13.DVDRip.XviD-by_VINCENTUOS.avi


Click “more” to view the entire list

Read More

We are making the transition to WordPress mu. All past 1200 posts should be available, please bare the limited functions and service at this point in time.

Read More

Do you know Iceweasel?
It is a browser on Linux that kind of looks and works like Firefox.
I have checked my website with Iceweasel and it doesn’t look too bad, does it?
See the below Thumb and click it for a full-preview.


h4x3d.com on iceweasel

Till Thursday,
jez

Read More

Download Simpsons Theme music (mp3s) songs that could be found in the Simpsons episodes (e.g. Mr. Plow, I love Candy, etc).. | Even more Simpsons music

Below you will find a list of updated Simpsons episodes, I was able to find additional links in forums that do work:
Also updated: The Simpsons s17
Season 17
Season 3

All Simpsons episode download links archived

Virtual Springfield game found!
Simpsons Hit and Run 3D game spotted!

Read More