Momcashblog.com Malware Attack

The relationship on “Reported Attack Site!” said I have a malware that hosted on momscashblog?!?!? WTF I have no link or relationship with this site before. I have scanned my whole files and can’t find any virus or trojan. Fortunately Google webmaster tool has a lab tool (this time) so I can see what is the malware!!!

My website must got some kind of hi-jack on wordpress that I was trying to update to the new version everytime, but for the plug-ins, you wouldn’t know which one has a good protection. The best of protection is.. make the file un-writeable on those plug-ins.

The malware look like this.

It was injected in plugin name “wp-polls” and I have the new version downloaded from developer site and couldn’t find that part of script in it. So this has been hi-jack by WordPress hole since November 2009, I am sure.

Once the javascript encode and write to the page look like this

So this will produce a hidden-iframe that point to momscashblog which has been reported Malicious software includes 3 trojan(s), 3 exploit(s), 1 scripting exploit(s).!!!! OMG

So, you must use Google Webmaster Tool or findout where is the suspicious javascript/iframe injected in your WordPress directory. I hope this help.

Tweeter to WordPress Comment

It was funny that people tweeted through my Tweeter box, but then all the comments from comment box are gone. Maybe they are lazy to put a comment at the end of the page (That I have it modified it to a forum. LOL)

So now I redirect both to tweeter and comment if readers put comment of them in Tweeter box. And my website will become more activities again.

Prodution time: 2 hours
Production cost: $50

Fun Web Application on FaceBook

I have created a fun application on FaceBook using FBML (Facebook Markup Language) and FBJS (you can guess of that… end with JavaScript)… Oh it was fun.

Above image show you it was a Google Map. I use my DX900 Acer phone which has GPS send the location through my server and then keep a location to generate the map by showing the markers and path. One of my friend is also crazy working on it just like I did. Haha.

This is an idea to apply for anything with GPS, FaceBook, Map. I just use static map so it does not load a memory of computer or phone browser. Also then you can post your location to your facebook wall and friend’s home live feed by clicking on the map.

It show the thumbnail map and the location of the latest spot you were at!!

So the programming on FaceBook is not difficult at all, but you need to learn their tags and API.

Project: eCommerce – Compass IT Almost Done

The only difficult part is Joomla component which is MVC. I never know MVC before and I have to learn to do it with Joomla document. So this took longer than I expected. This component is for
- Custom the homepage hilight banner and text.
- Custom category and sub category header

So I have to add a module for homepage and change Virtuemart template to display the banner and text.

The component has SWFupload to upload images for any category they want and also rich text editor for homepage. Once the project done, I will add more images.

A Demo of Work That Customer Didn’t Pick

I usually get the job here in Thailand without doing a demo. I hate doing it, but I need to do it sometimes when I got new potential customer. I also hate when I need to compete with the other programmer too. I most likely to get job from some source I know well so that I don’t have to do the demo and stuff since they know my ability so well already.

Here is the demo I did a while ago called OAS. I mean I am graceful to work on it, but they didn’t pick me. No problem, but here I bring it to show what my demo look like. The time report is quite useful because I make an auto complete ajax box, a time slot that can enter and see the result and save it easily which look like an excel sheet.

The Demo I am talking about is right here: Time Report