Hi,
Today I found some code which is insecure and can be use as potential hacking. I found these:
var td_ajax_url=”http:\/\/www.example.com\/wp-admin\/admin-ajax.php?td_theme_name=Newspaper&v=7.7″;
var td_get_template_directory_uri=”http:\/\/www.example.com\/wp-content\/themes\/Newspaper”;
Where example.com is my domain name.
Do you think these lines should be remove from view source.
Thanks
The HVJ Blog
Hello,
The code you mention is part of the theme code and it should not be removed.
Why do you think it’s insecure?
Hi,
But when I run the first link it return 0 or 1. Can’t it use by hackers for sql or any xss injection?
Thanks
The HVJ Blog
Hello,
The lines of code you mention are theme variables that are used by the theme ajx. They do not represent any threat for the security of the website. If you remove these variables, it will break the theme functionality.
We have found no security threat.
Thank you!
