WordPress Theme Safety

Tips

Wil Brown@LimeCanvas

Beware of Free Themes

@LimeCanvas #wpsyd

Read this first!

“Why you should never search for Free WordPress Themes” - WPMU.org

http://wpmu.org/why-you-should-never-search-for-free-wordpress-themes-in-google-or-anywhere-else/

Beware of Free Themes

@LimeCanvas #wpsyd

Beware of Free Themes

@LimeCanvas #wpsyd

You don’t know what may be lurking in the code!

Beware of Free Themes

@LimeCanvas #wpsyd

It may look good on the surface

But here’s what the dodgy code actually does in the footer of the theme.

Beware of Free Themes

@LimeCanvas #wpsyd

Themes from 8 out of 10 of the sites tested contained malware.

So which sites are safe?

Trusted Free Sites

@LimeCanvas #wpsyd

• WordPress.org• Theme Shaper• ThemeLab• Theme Hybrid• Arras Theme• Smashing Magazine• Clean & Simple Themes

Trusted Premium Sites

@LimeCanvas #wpsyd

• Theme Forest• Elegant Themes• Studio Press• WPMU Dev• Graph Paper Press• Woo Themes

If in doubt – check!

@LimeCanvas #wpsyd

Search through your theme for base64 and evals

Or use the Exploit Scanner pluginhttp://wordpress.org/plugins/exploit-scanner/

Questions Anyone?

@LimeCanvas

@LimeCanvas #wpsyd