how to detect website leaking data [closed] - wordpress

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 6 years ago.
Improve this question
I have recently built a website based on WordPress. I got a free theme from a source in Pakistan.
I have to use this theme because it perfectly serves my purpose. But I want to know that if this theme is quietly establishing a connection with another server and sending my data.
How can I detect that my website is internally sending some codes to the server of developer of theme? Also, I need to know what servers are being communicated with — like, if any image is getting loaded from their server, any code is imported from their server, or anything else is being fetched from their server to run.

Since you have the source code, then you can simply look what this theme does - basically theme should only be HTML and CSS (or mostly it). If there is too much suspicious PHP of Javascript I wouldn't use it.
If you want to see if it connects to some outside sources, run it in your controlled environment and use some network sniffing tool like Wireshark for example.
Generally speaking - if you don't trust the source where you got your theme and you are not good enough in programming to check for malicious code yourselves, don't use it!
I would recommend downloading some of themes provided directly by wordpress.org - those should be safe.

Related

How do I create a Minecraft fabric mod that spoofs a resource pack [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed last month.
Improve this question
I am attempting to create a Minecraft fabric mod (or jarmod) that, when sent a server resource pack, sends back a packet acknowledging that it has loaded the resource pack, while it actually has not. This is intended to be used to bypass the way some servers require the use of a custom texture pack, which has to be loaded every single time. A similar system is used in Minecraft Console Client (code), which doesn't even load textures. Is there a way to do this? I can't understand the Fabric Networking Tutorial, none of the code or advice seems relevant to what I am trying to do. Also, I don't use java. Is there anyone more knowledgeable on the subject who can help?

static site to a dynamic with javascript node.js [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 6 years ago.
Improve this question
I created a webpage with html5/css and some javascript (jquery). Now i want to extend my page with some functionality (server side ways), but i dont want to use php. I searched for an alternative and found node.js, now i want to use it.
But honestly i dont unterstand how it works (in the context to extend my page, i do unterstand javascript). I began to read some tutorials, but they always start explaining stuff to build a website with node.js (from scratch), but i want to extend my already existing site with some functionality (forum, maybe cms) and dont want to build the page from scratch.
I ordered some days ago a book about node.js, but i'm curious, sry for that.
I'd very appreciate if you could help me. I'm also grateful for some links, etc. :)
Cheers,
Sven
The thing about node.js is it's used to write servers. What this means is that you have to handle receiving requests from browsers and sending responses back for every. single. page. This is why tutorials on node.js start from scratch, because you can't just add node.js on to a webpage (like you can with php). node.js is like the backbone of your website, not some server side augmentation.

How to open IE with code? [closed]

Closed. This question needs details or clarity. It is not currently accepting answers.
Want to improve this question? Add details and clarify the problem by editing this post.
Closed 9 years ago.
Improve this question
In my test, I can automatically open IE with:
public void OpenIEtoAppURL()
{
System.Diagnostics.Process.Start("iexplore", "www.google.ca");
}
Will this work on other computers that may not have admin access? Will this method cause false alarms for a virus?
I'm not sure if this is the best way to open IE, any improvements are appreciated.
Note: the target users are people who aren't good with computers so I don't want to alarm them with authorization checks.
I'm trying to make some kind of executable so that they can just click on it and it will run a suite of automated tests for specific web applications on a weekly basis.
That will work, but it's the wrong way to do it.
Instead, you should open the URL itself:
Process.Start("https://google.com");
This will open the page in the user's default browser.
Note that the protocol is required.
What are you trying to accomplish? You mention people who are not good with computers but your tags are for testing. Do you have non-technical people running automated tests?
If you want IE ONLY, you could try ShDocVw.InternetExplorer.

Use Wordpress to Build Twitter, eBay, or Amazon [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 7 years ago.
Improve this question
It's my second ignorant question for today, this one even more ignorant than the first.
Why wouldn't you use Wordpress to build Twitter, eBay, Amazon, or [you name any other "application" type website]?
There are some big name websites using Wordpress (supposedly) like Network Solutions. It's unclear to me how much of their website actually runs on Wordpress. Most of these sites appear to be more news or blog oriented. I'm guessing they use Wordpress to post "static" content but probably build other application features outside of wordpress. For example, do you think Network Solutions domain lookup and purchasing features are built in Wordpress?
But the real question here I guess is what type of website would you build in Wordpress, Concrete5, Joomla, or Drupal? It seems like a really stupid question but would you build a custom web app using CMS?
CMS' are really good if you require ease of use, 'simple' customisability, or (in the case of wordpress) are constantly updating. Services such as eBay or Twitter wouldn't make sense on one of these platforms as there would be a lot of proprietary code in order to make there service work and be unique - this is what CMS' fall down on. You rely on people (or yourself) to build plugins to extend the original functionality. With a ground up website, you lose all the 'flab' (i.e. excess code and functionality that you may never use) and have a much more managable system.
Behind all the sites you mention would be some kind of in-house built CMS - it just wouldn't make sense for these companies to use publically available systems.

Is your issue tracker behind the firewall? [closed]

Closed. This question is opinion-based. It is not currently accepting answers.
Want to improve this question? Update the question so it can be answered with facts and citations by editing this post.
Closed 3 years ago.
Improve this question
I'm thinking of making a web service that can file bugs on issue trackers through (mainly) xml-rpc. But I'd like to get a sense whether issue trackers nowadays tend to be available behind the firewall or on the internet...
The target for this web service would be companies that build websites.
So is your issue tracker (jira, bugzilla, trac etc) behind the firewall? (as opposed to being accessible on the internet)
Thanks!
At our shop, our bug tracker is accessible, because certain clients are allowed to file bugs. It really makes things easier, because the developer working on the ticket can directly solicit feedback from the client, rather than trying to get the project manager to get in touch and ask the right questions.
We had thought about doing something similar to what it sounds like you're thinking of, but never got around to implementing it.
Yes, ours is. We have it there partly for security and partly because there was no need to have it public to the world.
An issue tracker behind the firewall?! So it means you won't allow users outside to submit issues, and this is actually the only difference.
They could mail issues / bugs to someone inside, then ask the recipient to create that issue / bug.
BTW, the issue tracker of our company is behind the firewall, we really need to control every detail, as the users may not know what the problem is. We use firewall to ensure higher security and easier management.

Resources