Mark Out Malicious Code From Your WordPress Theme Files
As a blogger, I am sure that you are concerned about potential hackers & spammers. Today I am going to tell you about a WordPress security threat that you may not have thought about. Most of us like to try different templates especially on the new blogs. There are tons of free WordPress themes gallery sites around. And you will fall for them surely to try & find out a suitable one for your blog. But are these sites reliable? You can’t say yes for all of them. Now here comes the trick. When these theme galleries collect WordPress themes from the respective authors, they can easily put malicious codes on the theme files before showing them in their sites. These codes can be spam related promoting third party sites or even can be used to hack your blog. You would keep blogging & never notice that someone is taking unwanted advantage of you.
As a precautionary measure, I would recommend to download themes from the respective authors’ home pages or from WordPress.org themes directory . And here is this plugin called Theme Authenticity Checker or TAC, that can help you immensely. You can check all your installed themes for suspicious codes just from your WordPress dashboard. You don’t have to know any coding. Just install this WordPress plugin & activate it. In the Appearance menu you will see the option TAC. Click it & the automatic checking will be done. In case of malicious code, it will show the code & give you a direct link to modify the respective theme file from the WordPress dashboard. By the way, this plugin also shows the static links present in your themes like footer credit links. You don’t have to worry about it 
Related posts: