E-Mail 'Code Injection Follow Up' To A Friend

5 thoughts on “Code Injection Follow Up”

1. 
/**
* Add a Base url to relative links in passed content.
*
* By default it supports the 'src' and 'href' attributes. However this can be
* changed via the 3rd param.
*
* @since 2.7.0
*
* @param string $content String to search for links in.
* @param string $base The base URL to prefix to links.
* @param array $attrs The attributes which should be processed.
* @return string The processed content.
*/
function links_add_base_url( $content, $base, $attrs = array('src', 'href') ) {
$attrs = implode('|', (array)$attrs);
return preg_replace_callback("!($attrs)=(['\"])(.+?)\\2!i",
create_function('$m', 'return _links_add_base($m, "' . $base . '");'),
$content);
}


2. Yeap, I checked that out after that, but I have no use for it.

3. Pingback: Tweets that mention Code Injection Follow Up | Lester Chan’s WordPress Plugins -- Topsy.com
4. Pingback: The WordPress.org Commit Breakin – Evil Code | mtekk's Crib

5. So how does the exploit work?

Comments are closed.