Acunetix Secure WordPress - Version 2.0.8

Version Description

Download this release

Release Info

Developer Acunetix
Plugin Icon wp plugin Acunetix Secure WordPress
Version 2.0.8
Comparing to
See all releases

Code changes from version 2.0.4 to 2.0.8

Files changed (24) hide show
  1. css/acx-wp-dashboard.css +17 -0
  2. css/remove_login.css +2 -2
  3. css/remove_update_plugins.css +2 -2
  4. css/remove_wp_version.css +2 -2
  5. css/wsd_sw_styles.css +88 -0
  6. img/close-button.png +0 -0
  7. img/rss.png +0 -0
  8. inc/swUtil.php +54 -4
  9. inc/swWSD.php +50 -21
  10. js/md5.js +194 -194
  11. js/prepare_new_user_form.js +43 -43
  12. js/remove_wp_version.js +0 -0
  13. js/verify_form.js +136 -136
  14. languages/secure_wp-ar.mo +0 -0
  15. languages/secure_wp-ar.po +0 -0
  16. languages/secure_wp-fr_FR.mo +0 -0
  17. languages/secure_wp-fr_FR.po +0 -0
  18. languages/secure_wp-ro_RO.mo +0 -0
  19. languages/secure_wp-ro_RO.po +0 -0
  20. languages/secure_wp-sr_RS.mo +0 -0
  21. languages/secure_wp-sr_RS.po +0 -241
  22. readme.txt +161 -152
  23. secure-wordpress.php +47 -10
  24. uninstall.php +12 -10
css/acx-wp-dashboard.css ADDED
@@ -0,0 +1,17 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ /*
2
+ * manage the rss box on dashboard
3
+ */
4
+
5
+ #acx_plugin_dashboard_widget h3.hndle{
6
+ background: url('../img/wsd-logo-small.png') no-repeat 5px 50%;
7
+ padding-left: 35px; padding-top: 10px;
8
+ }
9
+ #acx_plugin_dashboard_widget h4 {
10
+ margin: 0 0; font-size: 1.2em;
11
+ /* background: url('../images/arrow-black-icon.png') no-repeat left center;
12
+ background: url('../images/wsd-logo-small-list.png') no-repeat left center;
13
+ padding-left: 20px;*/
14
+ }
15
+ #acx_plugin_dashboard_widget p { margin: 3px 0; }
16
+
17
+
css/remove_login.css CHANGED
@@ -1,3 +1,3 @@
1
- #login_error {
2
- display: none;
3
  }
1
+ #login_error {
2
+ display: none;
3
  }
css/remove_update_plugins.css CHANGED
@@ -1,3 +1,3 @@
1
- .update-plugins {
2
- display: none !important;
3
  }
1
+ .update-plugins {
2
+ display: none !important;
3
  }
css/remove_wp_version.css CHANGED
@@ -1,3 +1,3 @@
1
- #wp-version-message, #footer-upgrade {
2
- display: none !important;
3
  }
1
+ #wp-version-message, #footer-upgrade {
2
+ display: none !important;
3
  }
css/wsd_sw_styles.css CHANGED
@@ -148,6 +148,94 @@ p.wsd-error-summary a:hover, .wsd-inside a:hover {
148
  margin-left: 70px;
149
  }
150
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
151
 
152
  .scanpass { color: #090; }
153
 
148
  margin-left: 70px;
149
  }
150
 
151
+ /********************************************************
152
+ * BEGIN >> Initial scan widget styling
153
+ */
154
+ #wsd-information-scan-list {
155
+ list-style-type: disc;
156
+ margin: 10px;
157
+ padding-left: 20px;
158
+ }
159
+
160
+ #wsd-initial-scan { }
161
+
162
+ #wsd-initial-scan .wsd-initial-scan-section {
163
+ line-height: 1.4em;
164
+ display: block;
165
+ color: #090;
166
+ }
167
+
168
+
169
+ /********************************************************
170
+ * BEGIN >> Target update form styling
171
+ */
172
+ #wsd_target_id_form {
173
+ width: 100%;
174
+ }
175
+
176
+ #wsd_target_id_form #targetid {
177
+ width: 290px !important;
178
+ }
179
+
180
+
181
+
182
+ /********************************************************
183
+ * BEGIN >> Status content styling
184
+ */
185
+ div#wsd-target-status-holder {
186
+ overflow: hidden;
187
+ }
188
+
189
+ p.wsd-target-status-title {
190
+ font-weight: bold;
191
+ }
192
+
193
+ div.wsd-target-status-section {
194
+ display: block;
195
+ float: left;
196
+ margin-right: 5px;
197
+ }
198
+
199
+ span.wsd-target-status-section-label {
200
+ display: block;
201
+ padding: 5px 4px;
202
+ float: left;
203
+ color: #999999
204
+ }
205
+
206
+ span.wsd-target-status-section-enabled {
207
+ display: block;
208
+ padding: 5px 0px;
209
+ background-color: #0f0;
210
+ color: #000;
211
+ float: left;
212
+ width: 50px;
213
+ height: 24px;
214
+ border-radius: 3px;
215
+ -moz-border-radius: 3px;
216
+ -webkit-border-radius: 3px;
217
+ text-align: center;
218
+ font-weight: bold;
219
+
220
+ background: url('../img/agent-green.png') no-repeat scroll left top transparent;
221
+ }
222
+
223
+ span.wsd-target-status-section-disabled {
224
+ display: block;
225
+ padding: 5px 0px;
226
+ background-color: #f00;
227
+ color: #fff;
228
+ float: left;
229
+ width: 50px;
230
+ height: 24px;
231
+ border-radius: 3px;
232
+ -moz-border-radius: 3px;
233
+ -webkit-border-radius: 3px;
234
+ text-align: center;
235
+ font-weight: bold;
236
+
237
+ background: url('../img/agent-red.png') no-repeat scroll left top transparent;
238
+ }
239
 
240
  .scanpass { color: #090; }
241
 
img/close-button.png ADDED
Binary file
img/rss.png ADDED
Binary file
inc/swUtil.php CHANGED
@@ -6,6 +6,8 @@
6
  */
7
  class swUtil
8
  {
 
 
9
  /**
10
  * @public
11
  * @static
@@ -18,6 +20,20 @@ class swUtil
18
  */
19
  public static function displayDashboardWidget()
20
  {
 
 
 
 
 
 
 
 
 
 
 
 
 
 
21
  //@ flag
22
  $run = false;
23
 
@@ -92,6 +108,26 @@ class swUtil
92
  endforeach;
93
  }
94
  $out.= '</ul>';
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
95
  }
96
 
97
  // Update cache
@@ -106,14 +142,28 @@ class swUtil
106
  /**
107
  * @public
108
  * @static
109
- * @since v0.1
110
- *
111
  * Add the rss widget to dashboard
112
- *
113
  * @return void
114
  */
115
  public static function addDashboardWidget()
116
  {
117
- wp_add_dashboard_widget('acx_plugin_dashboard_widget', __('WebsiteDefender news and updates'), 'swUtil::displayDashboardWidget');
 
 
 
 
 
 
118
  }
 
 
 
 
 
 
 
 
 
 
 
119
  }
6
  */
7
  class swUtil
8
  {
9
+ //@since v2.0.6
10
+ private static $_pluginID = 'acx_plugin_dashboard_widget';
11
  /**
12
  * @public
13
  * @static
20
  */
21
  public static function displayDashboardWidget()
22
  {
23
+ // @since v2.0.6
24
+ if ($_SERVER['REQUEST_METHOD'] == 'POST')
25
+ {
26
+ $opt = get_option('WSD-RSS-WGT-DISPLAY');
27
+ if (empty($opt)) {
28
+ add_option('WSD-RSS-WGT-DISPLAY', 'no');
29
+ }
30
+ else {
31
+ update_option('WSD-RSS-WGT-DISPLAY', 'no');
32
+ }
33
+ self::_hideDashboardWidget();
34
+ return;
35
+ }
36
+
37
  //@ flag
38
  $run = false;
39
 
108
  endforeach;
109
  }
110
  $out.= '</ul>';
111
+
112
+ $path = trailingslashit(get_option('siteurl')).'wp-content/plugins/secure-wordpress/';
113
+
114
+ $out .= '<div style="border-top: solid 1px #ccc; margin-top: 4px; padding: 2px 0;">';
115
+ $out .= '<p style="margin: 5px 0 0 0; padding: 0 0; line-height: normal; overflow: hidden;">';
116
+ $out .= '<a href="http://feeds.feedburner.com/Websitedefendercom"
117
+ style="float: left; display: block; width: 50%; text-align: right; margin-left: 30px;
118
+ padding-right: 22px; background: url('.$path.'img/rss.png) no-repeat right center;"
119
+ target="_blank">Follow us on RSS</a>';
120
+ $out .= '<a href="#" id="wsd_close_rss_widget"
121
+ style="float: right; display: block; width: 16px; height: 16px;
122
+ margin: 0 0; background: url('.$path.'img/close-button.png) no-repeat 0 0;"
123
+ title="Close widget"></a><form id="wsd_form" method="post"></form>';
124
+ $out .= '</p>';
125
+ $out .= '<script type="text/javascript">
126
+ document.getElementById("wsd_close_rss_widget").onclick = function(){
127
+ document.getElementById("wsd_form").submit();
128
+ };
129
+ </script>';
130
+ $out .= '</div>';
131
  }
132
 
133
  // Update cache
142
  /**
143
  * @public
144
  * @static
 
 
145
  * Add the rss widget to dashboard
 
146
  * @return void
147
  */
148
  public static function addDashboardWidget()
149
  {
150
+ // update 10/04/2011
151
+ $opt = get_option('WSD-RSS-WGT-DISPLAY');
152
+ if(strtolower($opt) == 'yes'):
153
+ wp_add_dashboard_widget(self::$_pluginID,
154
+ __('WebsiteDefender news and updates'),
155
+ 'swUtil::displayDashboardWidget');
156
+ endif;
157
  }
158
+ /**
159
+ * Hide the dashboard rss widget
160
+ * @static
161
+ * @public
162
+ * @since v2.0.6
163
+ */
164
+ public static function _hideDashboardWidget()
165
+ {
166
+ echo '<script>document.getElementById("'.self::$_pluginID.'").style.display = "none";</script>';
167
+ }
168
+
169
  }
inc/swWSD.php CHANGED
@@ -5,14 +5,14 @@
5
  * @author WebsiteDefender
6
  * $rev #1 07/16/2011 {c}$
7
  * $rev #2 07/21/2011 {c}$
 
 
8
  */
9
  class swWSD
10
  {
11
  const WSD_URL = 'https://dashboard.websitedefender.com/';
12
  const WSD_URL_RPC = 'https://dashboard.websitedefender.com/jsrpc.php';
13
  const WSD_URL_DOWN = 'https://dashboard.websitedefender.com/download.php';
14
-
15
-
16
  const WSD_SOURCE = 3;
17
  //error codes
18
  const WSD_ERROR_LIMITATION = 0x27;
@@ -35,7 +35,10 @@ class swWSD
35
  public function __construct() {}
36
 
37
 
38
- function wsd_site_url(){return get_option( 'siteurl' ).'/';}
 
 
 
39
 
40
  function wsd_parseUrl($url)
41
  {
@@ -507,10 +510,36 @@ class swWSD
507
  <div class="wsd-inside">
508
  <?php if(!empty($error)) {$this->wsd_render_error($error);} ?>
509
  <form action="" method="post" id="wsd_target_id_form" name="wsd_target_id_form">
510
- <label for="wsd_target_update_id">Target ID:</label>
511
- <input type="text" name="targetid" id="targetid"/>
512
- <input type="submit" name="wsd_update_target_id" value="Update" />
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
513
  </form>
 
 
 
 
 
 
 
 
 
 
514
  </div>
515
  <?php
516
  }
@@ -518,7 +547,12 @@ class swWSD
518
  function wsd_process_add_target_id()
519
  {
520
  //echo "wsd_process_add_target_id<br>";
521
- add_option('WSD-TARGETID', $_POST['targetid']);
 
 
 
 
 
522
  $this->wsd_render_target_status();
523
  }
524
 
@@ -689,7 +723,7 @@ class swWSD
689
  #echo "wsd_render_target_status<br>";
690
  $user = get_option('WSD-USER');
691
  if((!is_string($user))||($user == "") ) {$user = get_option("admin_email"); }
692
- $status = $this->wsd_jsonRPC(self::WSD_URL_RPC, "cPlugin.status", array($user, get_option('WSD-TARGETID')));
693
  if($status === null)
694
  {
695
  $this->wsd_render_error();
@@ -699,6 +733,11 @@ class swWSD
699
  {
700
  //our target is not valid anymore
701
  delete_option('WSD-TARGETID');
 
 
 
 
 
702
  return false;
703
  }
704
 
@@ -726,10 +765,6 @@ class swWSD
726
  </p>
727
  <div class="wsd-target-status-section">
728
  <?php
729
- // $statusText = 'NO';
730
- // if ($enabled == 1) {
731
- // $statusText = 'YES';
732
- // }
733
  $statusText = (($enabled == 1) ? 'YES' : 'NO');
734
 
735
  echo '<span class="wsd-target-status-section-label">Enabled: </span>',
@@ -738,10 +773,6 @@ class swWSD
738
  </div>
739
  <div class="wsd-target-status-section">
740
  <?php
741
- // $statusText = 'NO';
742
- // if ($scanned == 1) {
743
- // $statusText = 'YES';
744
- // }
745
  $statusText = (($scanned == 1) ? 'YES' : 'NO');
746
 
747
  echo '<span class="wsd-target-status-section-label">Scanned: </span>',
@@ -750,10 +781,6 @@ class swWSD
750
  </div>
751
  <div class="wsd-target-status-section">
752
  <?php
753
- // $statusText = 'UP';
754
- // if ($agentless == 1) {
755
- // $statusText = 'DOWN';
756
- // }
757
  $statusText = (($agentless == 1) ? 'DOWN' : 'UP');
758
 
759
  echo '<span class="wsd-target-status-section-label">Agent status: </span>',
@@ -802,7 +829,9 @@ class swWSD
802
  $hello = $this->wsd_jsonRPC(self::WSD_URL_RPC, "cPlugin.hello", $this->wsd_site_url());
803
  if($hello == null)
804
  {
805
- $this->wsd_render_error();
 
 
806
  return;
807
  }
808
 
5
  * @author WebsiteDefender
6
  * $rev #1 07/16/2011 {c}$
7
  * $rev #2 07/21/2011 {c}$
8
+ * $rev #3 09/20/2011 {c}$
9
+ * $rev #4 09/30/2011 {c}$
10
  */
11
  class swWSD
12
  {
13
  const WSD_URL = 'https://dashboard.websitedefender.com/';
14
  const WSD_URL_RPC = 'https://dashboard.websitedefender.com/jsrpc.php';
15
  const WSD_URL_DOWN = 'https://dashboard.websitedefender.com/download.php';
 
 
16
  const WSD_SOURCE = 3;
17
  //error codes
18
  const WSD_ERROR_LIMITATION = 0x27;
35
  public function __construct() {}
36
 
37
 
38
+ function wsd_site_url(){
39
+ $url = get_option( 'siteurl' );
40
+ return trailingslashit($url);
41
+ }
42
 
43
  function wsd_parseUrl($url)
44
  {
510
  <div class="wsd-inside">
511
  <?php if(!empty($error)) {$this->wsd_render_error($error);} ?>
512
  <form action="" method="post" id="wsd_target_id_form" name="wsd_target_id_form">
513
+ <?php
514
+ $emailAddress = get_option('WSD-USER');
515
+ if(empty($emailAddress)){
516
+ $emailAddress = get_option('admin_email');
517
+ }
518
+ ?>
519
+ <p>
520
+ <label><?php echo __('WebsiteDefender email account');?>:</label>
521
+ <br/>
522
+ <input type="text" name="sw_user_email" id="sw_user_email" value="<?php echo $emailAddress;?>"
523
+ style="width: 200px;"/>
524
+ </p>
525
+ <p>
526
+ <label for="wsd_target_update_id"><?php echo __('Target ID');?>:</label>
527
+ <br/>
528
+ <input type="text" name="targetid" id="targetid" value="<?php echo get_option('WSD-TARGETID');?>"/>
529
+ <br/><br/>
530
+ <input type="submit" name="wsd_update_target_id" value="<?php echo __('Update');?>" />
531
+ </p>
532
  </form>
533
+ <div>
534
+ <p>
535
+ <?php
536
+ echo __('To get the WebsiteDefender target ID of your website, login to the
537
+ <a href="https://dashboard.websitedefender.com/" target="_blank">WebsiteDefender dashboard</a>
538
+ and from the <code>Website Settings</code> navigate to the <code>Status</code> tab. The Target ID
539
+ can be found under the <code>Scan Status</code> section.');
540
+ ?>
541
+ </p>
542
+ </div>
543
  </div>
544
  <?php
545
  }
547
  function wsd_process_add_target_id()
548
  {
549
  //echo "wsd_process_add_target_id<br>";
550
+ if(! empty($_POST['targetid'])){
551
+ add_option('WSD-TARGETID', $_POST['targetid']);
552
+ }
553
+ if( ! empty($_POST['sw_user_email'])){
554
+ add_option('WSD-USER', $_POST['sw_user_email']);
555
+ }
556
  $this->wsd_render_target_status();
557
  }
558
 
723
  #echo "wsd_render_target_status<br>";
724
  $user = get_option('WSD-USER');
725
  if((!is_string($user))||($user == "") ) {$user = get_option("admin_email"); }
726
+ $status = $this->wsd_jsonRPC(self::WSD_URL_RPC, "cPlugin.status", array($user, get_option('WSD-TARGETID'), $this->wsd_site_url()));
727
  if($status === null)
728
  {
729
  $this->wsd_render_error();
733
  {
734
  //our target is not valid anymore
735
  delete_option('WSD-TARGETID');
736
+
737
+ // Display the add target id form
738
+ // update: $rev 3
739
+ $this->wsd_render_add_target_id();
740
+ $this->wsd_render_error('Invalid Target ID!');
741
  return false;
742
  }
743
 
765
  </p>
766
  <div class="wsd-target-status-section">
767
  <?php
 
 
 
 
768
  $statusText = (($enabled == 1) ? 'YES' : 'NO');
769
 
770
  echo '<span class="wsd-target-status-section-label">Enabled: </span>',
773
  </div>
774
  <div class="wsd-target-status-section">
775
  <?php
 
 
 
 
776
  $statusText = (($scanned == 1) ? 'YES' : 'NO');
777
 
778
  echo '<span class="wsd-target-status-section-label">Scanned: </span>',
781
  </div>
782
  <div class="wsd-target-status-section">
783
  <?php
 
 
 
 
784
  $statusText = (($agentless == 1) ? 'DOWN' : 'UP');
785
 
786
  echo '<span class="wsd-target-status-section-label">Agent status: </span>',
829
  $hello = $this->wsd_jsonRPC(self::WSD_URL_RPC, "cPlugin.hello", $this->wsd_site_url());
830
  if($hello == null)
831
  {
832
+ // update: $rev 3
833
+ $this->wsd_render_new_user();
834
+
835
  return;
836
  }
837
 
js/md5.js CHANGED
@@ -1,195 +1,195 @@
1
- var wsdMD5 = function (string)
2
- {
3
- function RotateLeft(lValue, iShiftBits) {
4
- return (lValue<<iShiftBits) | (lValue>>>(32-iShiftBits));
5
- }
6
-
7
- function AddUnsigned(lX,lY) {
8
- var lX4,lY4,lX8,lY8,lResult;
9
- lX8 = (lX & 0x80000000);
10
- lY8 = (lY & 0x80000000);
11
- lX4 = (lX & 0x40000000);
12
- lY4 = (lY & 0x40000000);
13
- lResult = (lX & 0x3FFFFFFF)+(lY & 0x3FFFFFFF);
14
- if (lX4 & lY4) {
15
- return (lResult ^ 0x80000000 ^ lX8 ^ lY8);
16
- }
17
- if (lX4 | lY4) {
18
- if (lResult & 0x40000000) {
19
- return (lResult ^ 0xC0000000 ^ lX8 ^ lY8);
20
- }
21
- else {return (lResult ^ 0x40000000 ^ lX8 ^ lY8);}
22
- }
23
- else {return (lResult ^ lX8 ^ lY8);}
24
- }
25
-
26
- function F(x,y,z) { return (x & y) | ((~x) & z); }
27
- function G(x,y,z) { return (x & z) | (y & (~z)); }
28
- function H(x,y,z) { return (x ^ y ^ z); }
29
- function I(x,y,z) { return (y ^ (x | (~z))); }
30
-
31
- function FF(a,b,c,d,x,s,ac) {
32
- a = AddUnsigned(a, AddUnsigned(AddUnsigned(F(b, c, d), x), ac));
33
- return AddUnsigned(RotateLeft(a, s), b);
34
- };
35
-
36
- function GG(a,b,c,d,x,s,ac) {
37
- a = AddUnsigned(a, AddUnsigned(AddUnsigned(G(b, c, d), x), ac));
38
- return AddUnsigned(RotateLeft(a, s), b);
39
- };
40
-
41
- function HH(a,b,c,d,x,s,ac) {
42
- a = AddUnsigned(a, AddUnsigned(AddUnsigned(H(b, c, d), x), ac));
43
- return AddUnsigned(RotateLeft(a, s), b);
44
- };
45
-
46
- function II(a,b,c,d,x,s,ac) {
47
- a = AddUnsigned(a, AddUnsigned(AddUnsigned(I(b, c, d), x), ac));
48
- return AddUnsigned(RotateLeft(a, s), b);
49
- };
50
-
51
- function ConvertToWordArray(string) {
52
- var lWordCount;
53
- var lMessageLength = string.length;
54
- var lNumberOfWords_temp1=lMessageLength + 8;
55
- var lNumberOfWords_temp2=(lNumberOfWords_temp1-(lNumberOfWords_temp1 % 64))/64;
56
- var lNumberOfWords = (lNumberOfWords_temp2+1)*16;
57
- var lWordArray=Array(lNumberOfWords-1);
58
- var lBytePosition = 0;
59
- var lByteCount = 0;
60
- while ( lByteCount < lMessageLength ) {
61
- lWordCount = (lByteCount-(lByteCount % 4))/4;
62
- lBytePosition = (lByteCount % 4)*8;
63
- lWordArray[lWordCount] = (lWordArray[lWordCount] | (string.charCodeAt(lByteCount)<<lBytePosition));
64
- lByteCount++;
65
- }
66
- lWordCount = (lByteCount-(lByteCount % 4))/4;
67
- lBytePosition = (lByteCount % 4)*8;
68
- lWordArray[lWordCount] = lWordArray[lWordCount] | (0x80<<lBytePosition);
69
- lWordArray[lNumberOfWords-2] = lMessageLength<<3;
70
- lWordArray[lNumberOfWords-1] = lMessageLength>>>29;
71
- return lWordArray;
72
- };
73
-
74
- function WordToHex(lValue) {
75
- var WordToHexValue="",WordToHexValue_temp="",lByte,lCount;
76
- for (lCount = 0;lCount<=3;lCount++) {
77
- lByte = (lValue>>>(lCount*8)) & 255;
78
- WordToHexValue_temp = "0" + lByte.toString(16);
79
- WordToHexValue = WordToHexValue + WordToHexValue_temp.substr(WordToHexValue_temp.length-2,2);
80
- }
81
- return WordToHexValue;
82
- };
83
-
84
- function Utf8Encode(string) {
85
- string = string.replace(/\r\n/g,"\n");
86
- var utftext = "";
87
- for (var n = 0; n < string.length; n++)
88
- {
89
- var c = string.charCodeAt(n);
90
- if (c < 128) {
91
- utftext += String.fromCharCode(c);
92
- }
93
- else if((c > 127) && (c < 2048)) {
94
- utftext += String.fromCharCode((c >> 6) | 192);
95
- utftext += String.fromCharCode((c & 63) | 128);
96
- }
97
- else {
98
- utftext += String.fromCharCode((c >> 12) | 224);
99
- utftext += String.fromCharCode(((c >> 6) & 63) | 128);
100
- utftext += String.fromCharCode((c & 63) | 128);
101
- }
102
- }
103
-
104
- return utftext;
105
- };
106
-
107
- var x=Array();
108
- var k,AA,BB,CC,DD,a,b,c,d;
109
- var S11=7, S12=12, S13=17, S14=22;
110
- var S21=5, S22=9 , S23=14, S24=20;
111
- var S31=4, S32=11, S33=16, S34=23;
112
- var S41=6, S42=10, S43=15, S44=21;
113
-
114
- string = Utf8Encode(string);
115
-
116
- x = ConvertToWordArray(string);
117
-
118
- a = 0x67452301; b = 0xEFCDAB89; c = 0x98BADCFE; d = 0x10325476;
119
-
120
- for (k=0;k<x.length;k+=16) {
121
- AA=a; BB=b; CC=c; DD=d;
122
- a=FF(a,b,c,d,x[k+0], S11,0xD76AA478);
123
- d=FF(d,a,b,c,x[k+1], S12,0xE8C7B756);
124
- c=FF(c,d,a,b,x[k+2], S13,0x242070DB);
125
- b=FF(b,c,d,a,x[k+3], S14,0xC1BDCEEE);
126
- a=FF(a,b,c,d,x[k+4], S11,0xF57C0FAF);
127
- d=FF(d,a,b,c,x[k+5], S12,0x4787C62A);
128
- c=FF(c,d,a,b,x[k+6], S13,0xA8304613);
129
- b=FF(b,c,d,a,x[k+7], S14,0xFD469501);
130
- a=FF(a,b,c,d,x[k+8], S11,0x698098D8);
131
- d=FF(d,a,b,c,x[k+9], S12,0x8B44F7AF);
132
- c=FF(c,d,a,b,x[k+10],S13,0xFFFF5BB1);
133
- b=FF(b,c,d,a,x[k+11],S14,0x895CD7BE);
134
- a=FF(a,b,c,d,x[k+12],S11,0x6B901122);
135
- d=FF(d,a,b,c,x[k+13],S12,0xFD987193);
136
- c=FF(c,d,a,b,x[k+14],S13,0xA679438E);
137
- b=FF(b,c,d,a,x[k+15],S14,0x49B40821);
138
- a=GG(a,b,c,d,x[k+1], S21,0xF61E2562);
139
- d=GG(d,a,b,c,x[k+6], S22,0xC040B340);
140
- c=GG(c,d,a,b,x[k+11],S23,0x265E5A51);
141
- b=GG(b,c,d,a,x[k+0], S24,0xE9B6C7AA);
142
- a=GG(a,b,c,d,x[k+5], S21,0xD62F105D);
143
- d=GG(d,a,b,c,x[k+10],S22,0x2441453);
144
- c=GG(c,d,a,b,x[k+15],S23,0xD8A1E681);
145
- b=GG(b,c,d,a,x[k+4], S24,0xE7D3FBC8);
146
- a=GG(a,b,c,d,x[k+9], S21,0x21E1CDE6);
147
- d=GG(d,a,b,c,x[k+14],S22,0xC33707D6);
148
- c=GG(c,d,a,b,x[k+3], S23,0xF4D50D87);
149
- b=GG(b,c,d,a,x[k+8], S24,0x455A14ED);
150
- a=GG(a,b,c,d,x[k+13],S21,0xA9E3E905);
151
- d=GG(d,a,b,c,x[k+2], S22,0xFCEFA3F8);
152
- c=GG(c,d,a,b,x[k+7], S23,0x676F02D9);
153
- b=GG(b,c,d,a,x[k+12],S24,0x8D2A4C8A);
154
- a=HH(a,b,c,d,x[k+5], S31,0xFFFA3942);
155
- d=HH(d,a,b,c,x[k+8], S32,0x8771F681);
156
- c=HH(c,d,a,b,x[k+11],S33,0x6D9D6122);
157
- b=HH(b,c,d,a,x[k+14],S34,0xFDE5380C);
158
- a=HH(a,b,c,d,x[k+1], S31,0xA4BEEA44);
159
- d=HH(d,a,b,c,x[k+4], S32,0x4BDECFA9);
160
- c=HH(c,d,a,b,x[k+7], S33,0xF6BB4B60);
161
- b=HH(b,c,d,a,x[k+10],S34,0xBEBFBC70);
162
- a=HH(a,b,c,d,x[k+13],S31,0x289B7EC6);
163
- d=HH(d,a,b,c,x[k+0], S32,0xEAA127FA);
164
- c=HH(c,d,a,b,x[k+3], S33,0xD4EF3085);
165
- b=HH(b,c,d,a,x[k+6], S34,0x4881D05);
166
- a=HH(a,b,c,d,x[k+9], S31,0xD9D4D039);
167
- d=HH(d,a,b,c,x[k+12],S32,0xE6DB99E5);
168
- c=HH(c,d,a,b,x[k+15],S33,0x1FA27CF8);
169
- b=HH(b,c,d,a,x[k+2], S34,0xC4AC5665);
170
- a=II(a,b,c,d,x[k+0], S41,0xF4292244);
171
- d=II(d,a,b,c,x[k+7], S42,0x432AFF97);
172
- c=II(c,d,a,b,x[k+14],S43,0xAB9423A7);
173
- b=II(b,c,d,a,x[k+5], S44,0xFC93A039);
174
- a=II(a,b,c,d,x[k+12],S41,0x655B59C3);
175
- d=II(d,a,b,c,x[k+3], S42,0x8F0CCC92);
176
- c=II(c,d,a,b,x[k+10],S43,0xFFEFF47D);
177
- b=II(b,c,d,a,x[k+1], S44,0x85845DD1);
178
- a=II(a,b,c,d,x[k+8], S41,0x6FA87E4F);
179
- d=II(d,a,b,c,x[k+15],S42,0xFE2CE6E0);
180
- c=II(c,d,a,b,x[k+6], S43,0xA3014314);
181
- b=II(b,c,d,a,x[k+13],S44,0x4E0811A1);
182
- a=II(a,b,c,d,x[k+4], S41,0xF7537E82);
183
- d=II(d,a,b,c,x[k+11],S42,0xBD3AF235);
184
- c=II(c,d,a,b,x[k+2], S43,0x2AD7D2BB);
185
- b=II(b,c,d,a,x[k+9], S44,0xEB86D391);
186
- a=AddUnsigned(a,AA);
187
- b=AddUnsigned(b,BB);
188
- c=AddUnsigned(c,CC);
189
- d=AddUnsigned(d,DD);
190
- }
191
-
192
- var temp = WordToHex(a)+WordToHex(b)+WordToHex(c)+WordToHex(d);
193
-
194
- return temp.toLowerCase();
195
  };
1
+ var wsdMD5 = function (string)
2
+ {
3
+ function RotateLeft(lValue, iShiftBits) {
4
+ return (lValue<<iShiftBits) | (lValue>>>(32-iShiftBits));
5
+ }
6
+
7
+ function AddUnsigned(lX,lY) {
8
+ var lX4,lY4,lX8,lY8,lResult;
9
+ lX8 = (lX & 0x80000000);
10
+ lY8 = (lY & 0x80000000);
11
+ lX4 = (lX & 0x40000000);
12
+ lY4 = (lY & 0x40000000);
13
+ lResult = (lX & 0x3FFFFFFF)+(lY & 0x3FFFFFFF);
14
+ if (lX4 & lY4) {
15
+ return (lResult ^ 0x80000000 ^ lX8 ^ lY8);
16
+ }
17
+ if (lX4 | lY4) {
18
+ if (lResult & 0x40000000) {
19
+ return (lResult ^ 0xC0000000 ^ lX8 ^ lY8);
20
+ }
21
+ else {return (lResult ^ 0x40000000 ^ lX8 ^ lY8);}
22
+ }
23
+ else {return (lResult ^ lX8 ^ lY8);}
24
+ }
25
+
26
+ function F(x,y,z) { return (x & y) | ((~x) & z); }
27
+ function G(x,y,z) { return (x & z) | (y & (~z)); }
28
+ function H(x,y,z) { return (x ^ y ^ z); }
29
+ function I(x,y,z) { return (y ^ (x | (~z))); }
30
+
31
+ function FF(a,b,c,d,x,s,ac) {
32
+ a = AddUnsigned(a, AddUnsigned(AddUnsigned(F(b, c, d), x), ac));
33
+ return AddUnsigned(RotateLeft(a, s), b);
34
+ };
35
+
36
+ function GG(a,b,c,d,x,s,ac) {
37
+ a = AddUnsigned(a, AddUnsigned(AddUnsigned(G(b, c, d), x), ac));
38
+ return AddUnsigned(RotateLeft(a, s), b);
39
+ };
40
+
41
+ function HH(a,b,c,d,x,s,ac) {
42
+ a = AddUnsigned(a, AddUnsigned(AddUnsigned(H(b, c, d), x), ac));
43
+ return AddUnsigned(RotateLeft(a, s), b);
44
+ };
45
+
46
+ function II(a,b,c,d,x,s,ac) {
47
+ a = AddUnsigned(a, AddUnsigned(AddUnsigned(I(b, c, d), x), ac));
48
+ return AddUnsigned(RotateLeft(a, s), b);
49
+ };
50
+
51
+ function ConvertToWordArray(string) {
52
+ var lWordCount;
53
+ var lMessageLength = string.length;
54
+ var lNumberOfWords_temp1=lMessageLength + 8;
55
+ var lNumberOfWords_temp2=(lNumberOfWords_temp1-(lNumberOfWords_temp1 % 64))/64;
56
+ var lNumberOfWords = (lNumberOfWords_temp2+1)*16;
57
+ var lWordArray=Array(lNumberOfWords-1);
58
+ var lBytePosition = 0;
59
+ var lByteCount = 0;
60
+ while ( lByteCount < lMessageLength ) {
61
+ lWordCount = (lByteCount-(lByteCount % 4))/4;
62
+ lBytePosition = (lByteCount % 4)*8;
63
+ lWordArray[lWordCount] = (lWordArray[lWordCount] | (string.charCodeAt(lByteCount)<<lBytePosition));
64
+ lByteCount++;
65
+ }
66
+ lWordCount = (lByteCount-(lByteCount % 4))/4;
67
+ lBytePosition = (lByteCount % 4)*8;
68
+ lWordArray[lWordCount] = lWordArray[lWordCount] | (0x80<<lBytePosition);
69
+ lWordArray[lNumberOfWords-2] = lMessageLength<<3;
70
+ lWordArray[lNumberOfWords-1] = lMessageLength>>>29;
71
+ return lWordArray;
72
+ };
73
+
74
+ function WordToHex(lValue) {
75
+ var WordToHexValue="",WordToHexValue_temp="",lByte,lCount;
76
+ for (lCount = 0;lCount<=3;lCount++) {
77
+ lByte = (lValue>>>(lCount*8)) & 255;
78
+ WordToHexValue_temp = "0" + lByte.toString(16);
79
+ WordToHexValue = WordToHexValue + WordToHexValue_temp.substr(WordToHexValue_temp.length-2,2);
80
+ }
81
+ return WordToHexValue;
82
+ };
83
+
84
+ function Utf8Encode(string) {
85
+ string = string.replace(/\r\n/g,"\n");
86
+ var utftext = "";
87
+ for (var n = 0; n < string.length; n++)
88
+ {
89
+ var c = string.charCodeAt(n);
90
+ if (c < 128) {
91
+ utftext += String.fromCharCode(c);
92
+ }
93
+ else if((c > 127) && (c < 2048)) {
94
+ utftext += String.fromCharCode((c >> 6) | 192);
95
+ utftext += String.fromCharCode((c & 63) | 128);
96
+ }
97
+ else {
98
+ utftext += String.fromCharCode((c >> 12) | 224);
99
+ utftext += String.fromCharCode(((c >> 6) & 63) | 128);
100
+ utftext += String.fromCharCode((c & 63) | 128);
101
+ }
102
+ }
103
+
104
+ return utftext;
105
+ };
106
+
107
+ var x=Array();
108
+ var k,AA,BB,CC,DD,a,b,c,d;
109
+ var S11=7, S12=12, S13=17, S14=22;
110
+ var S21=5, S22=9 , S23=14, S24=20;
111
+ var S31=4, S32=11, S33=16, S34=23;
112
+ var S41=6, S42=10, S43=15, S44=21;
113
+
114
+ string = Utf8Encode(string);
115
+
116
+ x = ConvertToWordArray(string);
117
+
118
+ a = 0x67452301; b = 0xEFCDAB89; c = 0x98BADCFE; d = 0x10325476;
119
+
120
+ for (k=0;k<x.length;k+=16) {
121
+ AA=a; BB=b; CC=c; DD=d;
122
+ a=FF(a,b,c,d,x[k+0], S11,0xD76AA478);
123
+ d=FF(d,a,b,c,x[k+1], S12,0xE8C7B756);
124
+ c=FF(c,d,a,b,x[k+2], S13,0x242070DB);
125
+ b=FF(b,c,d,a,x[k+3], S14,0xC1BDCEEE);
126
+ a=FF(a,b,c,d,x[k+4], S11,0xF57C0FAF);
127
+ d=FF(d,a,b,c,x[k+5], S12,0x4787C62A);
128
+ c=FF(c,d,a,b,x[k+6], S13,0xA8304613);
129
+ b=FF(b,c,d,a,x[k+7], S14,0xFD469501);
130
+ a=FF(a,b,c,d,x[k+8], S11,0x698098D8);
131
+ d=FF(d,a,b,c,x[k+9], S12,0x8B44F7AF);
132
+ c=FF(c,d,a,b,x[k+10],S13,0xFFFF5BB1);
133
+ b=FF(b,c,d,a,x[k+11],S14,0x895CD7BE);
134
+ a=FF(a,b,c,d,x[k+12],S11,0x6B901122);
135
+ d=FF(d,a,b,c,x[k+13],S12,0xFD987193);
136
+ c=FF(c,d,a,b,x[k+14],S13,0xA679438E);
137
+ b=FF(b,c,d,a,x[k+15],S14,0x49B40821);
138
+ a=GG(a,b,c,d,x[k+1], S21,0xF61E2562);
139
+ d=GG(d,a,b,c,x[k+6], S22,0xC040B340);
140
+ c=GG(c,d,a,b,x[k+11],S23,0x265E5A51);
141
+ b=GG(b,c,d,a,x[k+0], S24,0xE9B6C7AA);
142
+ a=GG(a,b,c,d,x[k+5], S21,0xD62F105D);
143
+ d=GG(d,a,b,c,x[k+10],S22,0x2441453);
144
+ c=GG(c,d,a,b,x[k+15],S23,0xD8A1E681);
145
+ b=GG(b,c,d,a,x[k+4], S24,0xE7D3FBC8);
146
+ a=GG(a,b,c,d,x[k+9], S21,0x21E1CDE6);
147
+ d=GG(d,a,b,c,x[k+14],S22,0xC33707D6);
148
+ c=GG(c,d,a,b,x[k+3], S23,0xF4D50D87);
149
+ b=GG(b,c,d,a,x[k+8], S24,0x455A14ED);
150
+ a=GG(a,b,c,d,x[k+13],S21,0xA9E3E905);
151
+ d=GG(d,a,b,c,x[k+2], S22,0xFCEFA3F8);
152
+ c=GG(c,d,a,b,x[k+7], S23,0x676F02D9);
153
+ b=GG(b,c,d,a,x[k+12],S24,0x8D2A4C8A);
154
+ a=HH(a,b,c,d,x[k+5], S31,0xFFFA3942);
155
+ d=HH(d,a,b,c,x[k+8], S32,0x8771F681);
156
+ c=HH(c,d,a,b,x[k+11],S33,0x6D9D6122);
157
+ b=HH(b,c,d,a,x[k+14],S34,0xFDE5380C);
158
+ a=HH(a,b,c,d,x[k+1], S31,0xA4BEEA44);
159
+ d=HH(d,a,b,c,x[k+4], S32,0x4BDECFA9);
160
+ c=HH(c,d,a,b,x[k+7], S33,0xF6BB4B60);
161
+ b=HH(b,c,d,a,x[k+10],S34,0xBEBFBC70);
162
+ a=HH(a,b,c,d,x[k+13],S31,0x289B7EC6);
163
+ d=HH(d,a,b,c,x[k+0], S32,0xEAA127FA);
164
+ c=HH(c,d,a,b,x[k+3], S33,0xD4EF3085);
165
+ b=HH(b,c,d,a,x[k+6], S34,0x4881D05);
166
+ a=HH(a,b,c,d,x[k+9], S31,0xD9D4D039);
167
+ d=HH(d,a,b,c,x[k+12],S32,0xE6DB99E5);
168
+ c=HH(c,d,a,b,x[k+15],S33,0x1FA27CF8);
169
+ b=HH(b,c,d,a,x[k+2], S34,0xC4AC5665);
170
+ a=II(a,b,c,d,x[k+0], S41,0xF4292244);
171
+ d=II(d,a,b,c,x[k+7], S42,0x432AFF97);
172
+ c=II(c,d,a,b,x[k+14],S43,0xAB9423A7);
173
+ b=II(b,c,d,a,x[k+5], S44,0xFC93A039);
174
+ a=II(a,b,c,d,x[k+12],S41,0x655B59C3);
175
+ d=II(d,a,b,c,x[k+3], S42,0x8F0CCC92);
176
+ c=II(c,d,a,b,x[k+10],S43,0xFFEFF47D);
177
+ b=II(b,c,d,a,x[k+1], S44,0x85845DD1);
178
+ a=II(a,b,c,d,x[k+8], S41,0x6FA87E4F);
179
+ d=II(d,a,b,c,x[k+15],S42,0xFE2CE6E0);
180
+ c=II(c,d,a,b,x[k+6], S43,0xA3014314);
181
+ b=II(b,c,d,a,x[k+13],S44,0x4E0811A1);
182
+ a=II(a,b,c,d,x[k+4], S41,0xF7537E82);
183
+ d=II(d,a,b,c,x[k+11],S42,0xBD3AF235);
184
+ c=II(c,d,a,b,x[k+2], S43,0x2AD7D2BB);
185
+ b=II(b,c,d,a,x[k+9], S44,0xEB86D391);
186
+ a=AddUnsigned(a,AA);
187
+ b=AddUnsigned(b,BB);
188
+ c=AddUnsigned(c,CC);
189
+ d=AddUnsigned(d,DD);
190
+ }
191
+
192
+ var temp = WordToHex(a)+WordToHex(b)+WordToHex(c)+WordToHex(d);
193
+
194
+ return temp.toLowerCase();
195
  };
js/prepare_new_user_form.js CHANGED
@@ -1,44 +1,44 @@
1
- /*$rev #1 07/16/2011 {c}*/
2
- var recaptchaPublic = "6Ld1jcASAAAAAAyGvwtF6ujAd0yf3jFlj220qcrZ";
3
- var waiting = 0;
4
- function ifLoaded(){
5
- waiting++;
6
- if(waiting>=20){
7
- return false
8
- }
9
- if( typeof(wsd_form_fields) != 'undefined' &&
10
- typeof(Recaptcha) != 'undefined' &&
11
- document.getElementById("sw_wsd_new_user_form") &&
12
- typeof(wsd_commonPasswords) != 'undefined')
13
- constructForm();
14
- else
15
- setTimeout(ifLoaded, 250);
16
- }
17
- function addInputElement(holder, name, type, label, description){
18
- var inputRow = document.createElement("TR");
19
- var cell = document.createElement("TH");
20
- cell.innerHTML = '<label for="' + name + '">' + label + ':</label>'
21
- cell.setAttribute("scope", "row");
22
- inputRow.appendChild(cell);
23
- var cell = document.createElement("TD");
24
- if(name=="account_website")
25
- cell.innerHTML = '<input id="wsd_' + name + '" name="' + name + '" type="' + type + '" class="regular-text" value="' + wordpress_site_name + '"/>' +
26
- (description?'<label for"' + name + '">' + description + '</label>':'');
27
- else
28
- cell.innerHTML = '<input id="wsd_' + name + '" name="' + name + '" type="' + type + '" class="regular-text"/>' +
29
- (description?'<label for"' + name + '">' + description + '</label>':'');
30
- inputRow.appendChild(cell);
31
- holder.appendChild(inputRow);
32
- }
33
- function constructForm(){
34
- var inputHolder = document.getElementById("wsd_new_user_form_dynamic_inputs_table");
35
- if(!inputHolder)return false;
36
- for(var i=0; i<wsd_form_fields.length; i++){
37
- addInputElement(inputHolder, wsd_form_fields[i].name, wsd_form_fields[i].type, wsd_form_fields[i].label, wsd_form_fields[i].descr);
38
- }
39
- Recaptcha.create(recaptchaPublic, "wsd_new_user_form_captcha_div", {theme: "red"});
40
- formReady = true;
41
- if(img=document.getElementById("img_loading_animation"))img.style.display="none";
42
- if(div=document.getElementById("wsd_new_user_form_div"))div.style.visibility="visible";
43
- }
44
  setTimeout(ifLoaded, 250);
1
+ /*$rev #1 07/16/2011 {c}*/
2
+ var recaptchaPublic = "6Ld1jcASAAAAAAyGvwtF6ujAd0yf3jFlj220qcrZ";
3
+ var waiting = 0;
4
+ function ifLoaded(){
5
+ waiting++;
6
+ if(waiting>=20){
7
+ return false
8
+ }
9
+ if( typeof(wsd_form_fields) != 'undefined' &&
10
+ typeof(Recaptcha) != 'undefined' &&
11
+ document.getElementById("sw_wsd_new_user_form") &&
12
+ typeof(wsd_commonPasswords) != 'undefined')
13
+ constructForm();
14
+ else
15
+ setTimeout(ifLoaded, 250);
16
+ }
17
+ function addInputElement(holder, name, type, label, description){
18
+ var inputRow = document.createElement("TR");
19
+ var cell = document.createElement("TH");
20
+ cell.innerHTML = '<label for="' + name + '">' + label + ':</label>'
21
+ cell.setAttribute("scope", "row");
22
+ inputRow.appendChild(cell);
23
+ var cell = document.createElement("TD");
24
+ if(name=="account_website")
25
+ cell.innerHTML = '<input id="wsd_' + name + '" name="' + name + '" type="' + type + '" class="regular-text" value="' + wordpress_site_name + '"/>' +
26
+ (description?'<label for"' + name + '">' + description + '</label>':'');
27
+ else
28
+ cell.innerHTML = '<input id="wsd_' + name + '" name="' + name + '" type="' + type + '" class="regular-text"/>' +
29
+ (description?'<label for"' + name + '">' + description + '</label>':'');
30
+ inputRow.appendChild(cell);
31
+ holder.appendChild(inputRow);
32
+ }
33
+ function constructForm(){
34
+ var inputHolder = document.getElementById("wsd_new_user_form_dynamic_inputs_table");
35
+ if(!inputHolder)return false;
36
+ for(var i=0; i<wsd_form_fields.length; i++){
37
+ addInputElement(inputHolder, wsd_form_fields[i].name, wsd_form_fields[i].type, wsd_form_fields[i].label, wsd_form_fields[i].descr);
38
+ }
39
+ Recaptcha.create(recaptchaPublic, "wsd_new_user_form_captcha_div", {theme: "red"});
40
+ formReady = true;
41
+ if(img=document.getElementById("img_loading_animation"))img.style.display="none";
42
+ if(div=document.getElementById("wsd_new_user_form_div"))div.style.visibility="visible";
43
+ }
44
  setTimeout(ifLoaded, 250);
js/remove_wp_version.js CHANGED
File without changes
js/verify_form.js CHANGED
@@ -1,137 +1,137 @@
1
- var wsd_commonPasswords=['abc123','password','computer','123456','tigger','a1b2c3','qwerty','password1','carmen','mickey','secret','summer','internet','service','canada','ranger','shadow','baseball','donald','harley','hockey','letmein','maggie','mustang','snoopy','buster','dragon','jordan','michael','michelle','patrick','123abc','andrew','calvin','changeme','diamond','fuckme','fuckyou','matthew','miller','trustno1','12345678','123456789','avalon','brandy','chelsea','coffee','falcon','freedom','gandalf','helpme','merlin','molson','newyork','soccer','thomas','wizard','Monday','asdfgh','bandit','batman','butthead','dorothy','eeyore','fishing','football','george','iloveyou','jennifer','jonathan','marina','master','monday','monkey','natasha','ncc1701','newpass','pamela','pepper','piglet','poohbear','pookie','rabbit','rachel','rocket','sparky','spring','steven','success','sunshine','thx1138','victoria','whatever','zapata','8675309','Internet','amanda','august','barney','biteme','boomer','cowboy','doctor','fisher','foobar','island','joshua','marley','orange','please','rascal','richard','scooter','shalom','silver','skippy','stanley','taylor','welcome','zephyr','111111','aaaaaa','access','albert','alexander','andrea','anthony','asdfjkl;','ashley','basketball','beavis','booboo','bradley','brandon','caitlin','camaro','charlie','chicken','cricket','dakota','dallas','daniel','debbie','dolphin','elephant','friend','fucker','ginger','goodluck','hammer','heather','iceman','jessica','joseph','jupiter','justin','knight','lacrosse','lakers','lizard','madison','mother','muffin','murphy','ncc1701d','newuser','nirvana','pentium','phoenix','picture','rainbow','saturn','shannon','shithead','skeeter','sophie','special','stephanie','stephen','sweetie','teacher','tennis','test123','topgun','tristan','william','wilson','1q2w3e','654321','666666','a12345','a1b2c3d4','angela','archie','blazer','bond007','booger','charles','christin','claire','control','david1','dennis','digital','disney','edward','flipper','franklin','horses','hunter','indigo','jasper','jeremy','julian','kelsey','killer','kingfish','lauren','maryjane','matrix','maverick','mayday','mercury','mitchell','morgan','mountain','niners','nothing','oliver','peanut','pearljam','phantom','popcorn','princess','psycho','pumpkin','purple','rebecca','reddog','robert','salmon','samson','sharon','sierra','smokey','startrek','steelers','stimpy','sunflower','superman','support','sydney','techno','telecom','walter','willie','willow','winner','zxcvbnm','absolut','alaska','alexis','animal','apples','babylon5','backup','barbara','benjamin','bird33','bluebird','bonnie','camera','chocolate','claudia','cocacola','compton','connect','cookie','cruise','deliver','douglas','dreamer','dreams','duckie','eagles','einstein','explorer','family','ferrari','flamingo','flower','foxtrot','francis','freddy','friday','froggy','galileo','giants','global','gopher','hansolo','happy1','hendrix','herman','houston','iguana','indiana','insane','inside','ironman','jasmin','jeanne','justice','katherine','kermit','leslie','martin','minnie','nascar','nelson','netware','pantera','parker','passwd','penguin','porsche911','prince','punkin','pyramid','raymond','rosebud','route66','running','security','sergei','sheena','sheila','skiing','snapple','snowball','sparrow','spencer','stealth','student','sylvia','tamara','taurus','teresa','theresa','thunderbird','tigers','toyota','training','travel','tuesday','victory','viper1','wesley','whisky','winnie','winter','wolves','xyz123','123123','1234567','696969','888888','Anthony','Bond007','Friday','Hendrix','Joshua','Matthew','October','Taurus','Tigger','abcdef','adidas','adrian','alexandr','alfred','arthur','athena','austin','awesome','badger','bamboo','beagle','beatles','beautiful','beaver','bigmac','blonde','boogie','boston','brenda','bright','bubba1','bubbles','button','buttons','cactus','captain','carlos','caroline','carrie','casper','catalog','catch22','challenge','chance','charity','charlotte','cheese','cheryl','chris1','clancy','clipper','coltrane','compaq','conrad','cooper','cooter','copper','cosmos','cougar','cracker','crawford','crystal','curtis','cyclone','cyrano','deutsch','diablo','dilbert','dollars','dookie','dumbass','dundee','e-mail','elizabeth','europe','export','farmer','firebird','fletcher','fluffy','fountain','france','freak1','friends','fuckoff','gabriel','gabriell','galaxy','gambit','garden','garfield','garlic','garnet','genesis','genius','godzilla','goforit','golfer','goober','grateful','greenday','groovy','grover','guitar','hacker','hector','herbert','horizon','hornet','howard','icecream','imagine','impala','informix','janice','jasmine','jason1','jeanette','jeffrey','jenifer','jesus1','jewels','julie1','junior','justin1','kathleen','kelly1','kennedy','kevin1','knicks','larry1','ledzep','leonard','lestat','library','lincoln','lionking','london','louise','lucky1','maddog','mailman','majordomo','mantra','margaret','mariposa','market','marlboro','martin1','master1','mazda1','mensuck','mercedes','metallic','midori','millie','mirage','money1','monica','monopoly','mookie','moroni','nathan','ncc1701e','nesbitt','nguyen','nicholas','nicole','nimrod','october','olivia','online','oxford','pacific','painter','peaches','penelope','petunia','philip','phoenix1','pickle','player','poiuyt','porsche','porter','python','quality','raquel','remember','republic','research','robbie','robert1','runner','russell','sailing','sailor','samantha','savage','scarlett','school','shadow1','shelby','simple','skipper','smiley','snickers','sniper','snoopdog','snowman','spitfire','sprite','spunky','starwars','station','stella','stingray','stormy','stupid','sumuinen','sunny1','sunrise','surfer','teddy1','testing','theboss','theking','thumper','tintin','tomcat','trebor','trevor','tweety','unicorn','valentine','valerie','vanilla','veronica','victor','vincent','warrior','warriors','weasel','wheels','wilbur','winston','wisdom','wombat','xanadu','xavier','yellow','zaphod','zeppelin','!@#$%^','!@#$%^&*','10sne1','1p2o3i','3bears','Andrew','Broadway','Champs','Family','Fisher','Friends','Jeanne','Killer','Knight','Master','Michael','Michelle','Pentium','Pepper','Raistlin','Sierra','Snoopy','Tennis','Tuesday','abacab','abcd1234','abcdefg','abigail','account','acropolis','alice1','allison','alpine','anders','andre1','andrea1','angel1','annette','antares','apache','apollo','aragorn','arizona','arnold','arsenal','asdfasdf','asdfghjk','avenger','avenir','babydoll','bailey','banana','basket','batman1','beaner','beatrice','bertha','bigben','bigdog','biggles','bigman','biology','bishop','blondie','blowfish','bluefish','bobcat','braves','brazil','bridges','brutus','buffalo','bulldog','bullet','bullshit','business','butler','butter','california','cannondale','carebear','carol1','carole','cassie','castle','catalina','catherine','catnip','cccccc','celine','center','champion','chanel','chelsea1','chester1','chicago','christian','christy','church','cinder','colleen','colorado','columbia','commander','connie','content','cookies','cooking','cordelia','corona','cowboys','coyote','crack1','creative','cuddles','cuervo','daisie','daniel1','danielle','database','davids','deadhead','denali','depeche','design','destiny','dickens','dickhead','digger','dodger','dougie','dragonfly','eclipse','electric','emerald','emmitt','entropy','etoile','excalibur','express','farout','farside','feedback','fender','fireman','firenze','fletch','florida','flowers','foster','fozzie','francesco','francine','francois','french','fuckface','gargoyle','gasman','gemini','general','gerald','germany','gilbert','goaway','golden','goldfish','gordon','graham','graphic','gregory','gretchen','gunner','hal9000','hannah','harold','harrison','harvey','hawkeye','heaven','helena','herzog','hithere','hobbit','ibanez','idontknow','integra','intern','intrepid','ireland','isabel','jackie','jackson','jaguar','jamaica','jenny1','jessie','jethrotull','jkl123','johanna1','johnny','joker1','jordan23','judith','jumanji','kangaroo','karen1','keepout','keith1','kenneth','kidder','kimberly','kingdom','kitkat','kramer','kristen','lambda','laurie','lawrence','lawyer','legend','liberty','lindsay','lindsey','liverpool','logical','lonely','lorrie','lovely','loveme','madonna','malcolm','malibu','marathon','marcel','maria1','mariah','mariah1','marilyn','mariner','marvin','maurice','maxine','maxwell','meggie','melanie','melissa','melody','merlot','mexico','michael1','michele','midnight','midway','miracle','mishka','mmouse','molly1','monique','montreal','moocow','morris','mortimer','mouse1','mulder','nautica','nellie','nermal','newton','nicarao','nirvana1','nissan','norman','notebook','olivier','oranges','oregon','overkill','pacers','packer','pandora','panther','passion','patricia','peewee','pencil','people','person','peter1','picard','picasso','pierre','pinkfloyd','polaris','police','pookie1','predator','preston','primus','prometheus','public','q1w2e3','queenie','quentin','random','rangers','raptor','rastafarian','reality','redrum','remote','reptile','reynolds','rhonda','ricardo','ricardo1','roadrunner','robinhood','robotech','rocknroll','rocky1','ronald','ruthie','sabrina','sakura','salasana','sampson','samuel','sandra','sapphire','scarecrow','scarlet','scorpio','scott1','scottie','scruffy','scuba1','seattle','serena','sergey','shanti','shogun','singer','skibum','skywalker','slacker','smashing','smiles','snowflake','snowski','snuffy','soccer1','soleil','spanky','speedy','spider','spooky','stacey','star69','starter','steven1','sting1','stinky','strawberry','stuart','sunbird','sundance','superfly','suzanne','suzuki','swimmer','swimming','system','tarzan','teddybear','teflon','temporal','terminal','theatre','thejudge','thunder','thursday','tinker','tootsie','tornado','tricia','trident','trojan','truman','trumpet','tucker','turtle','utopia','valhalla','voyager','warcraft','warlock','warren','williams','windsurf','winona','woofwoof','wrangler','wright','xcountry','xfiles','xxxxxx','yankees','yvonne','zenith','zigzag','zombie','zxc123','000000','007007','11111111','123321','171717','181818','1a2b3c','1chris','1kitty','1qw23e','4runner','57chevy','7777777','789456','7dwarfs','88888888','Abcdefg','Alexis','Animals','Bailey','Bastard','Beavis','Bismillah','Booboo','Boston','Canucks','Cardinal','Celtics','ChangeMe','Charlie','Computer','Cougar','Creative','Curtis','Daniel','Darkman','Denise','Dragon','Eagles','Elizabeth','Esther','Figaro','Fishing','Fortune','Freddy','Front242','Gandalf','Geronimo','Gingers','Golden','Goober','Gretel','HARLEY','Hacker','Hammer','Harley','Heather','Hershey','Jackson','Jennifer','Jersey','Jessica','Joanna','Johnson','Jordan','KILLER','Kitten','Liberty','Lindsay','Lizard','Madeline','Margaret','Maxwell','Mellon','Merlot','Metallic','Michel1','Monster','Montreal','Newton','Nicholas','Noriko','Paladin','Pamela','Password','Peaches','Peanuts','Phoenix','Piglet','Pookie','Princess','Purple','Rabbit','Raiders','Random','Rebecca','Robert','Russell','Saturn','Service','Shadow','Sidekick','Skeeter','Smokey','Sparky','Speedy','Sterling','Steven','Summer','Sunshine','Superman','Sverige','Swoosh','Taylor','Theresa','Thomas','Thunder','Vernon','Victoria','Vincent','Waterloo','Webster','Willow','Winnie','Wolverine','Woodrow','aardvark','abbott','abcd123','accord','active','admin1','adrock','aerobics','africa','airborne','airwolf','aki123','alfaro','alicia','aliens','alison','allegro','allstate','alpha1','altamira','althea','altima','altima1','amanda1','amazing','america','anderson','andrew!','andrew1','andromed','angels','angie1','anneli','anything','apple1','apple2','applepie','aptiva','aquarius','ariane','arlene','artemis','asdf1234','asdf;lkj','asdfjkl','ashley1','ashraf','ashton','assmunch','asterix','attila','autumn','avatar','ayelet','aylmer','baraka','barbie','barney1','barnyard','barrett','bartman','beaches','beanie','beasty','beauty','beavis1','belgium','belize','belmont','benson','beowulf','bernardo','betacam','bharat','bichon','bigboss','bigred','billy1','bimmer','bioboy','biochem','birdie','birthday','biscuit','bitter','blackjack','blanche','blinds','blowjob','blowme','blueeyes','bluejean','bogart','bombay','boobie','bootsie','boulder','bourbon','boxers','branch','brandi','brewster','bridge','britain','broker','bronco','bronte','brooke','brother','bubble','buddha','budgie','buffett','burton','butterfly','c00per','calendar','calgary','calvin1','camille','campbell','camping','cancer','canela','cannon','carbon','carnage','carolyn','carrot','cascade','catfish','catwoman','cecile','celica','cement','cessna','chainsaw','chameleon','change','chantal','charger','cherry','chiara','chiefs','chinacat','chinook','chouette','chris123','christ1','christmas','christopher','chronos','cicero','cindy1','cinema','circuit','cirque','cirrus','clapton','clarkson','claude','claudel','clueless','cobain','colette','college','colors','colt45','concept','concorde','confused','coolbean','cornflake','corvette','corwin','country','courier','crescent','crowley','crusader','cthulhu','cunningham','cupcake','current','cutlass','cynthia','daedalus','dagger','dagger1','dammit','damogran','dancer','daphne','darkstar','darren','darryl','darwin','datatrain','daytek','deborah','december','decker','deedee','deeznuts','delano','delete','denise','desert','deskjet','detroit','devine','dexter','dharma','dianne','diesel','dillweed','dipper','director','dodgers','dogbert','doitnow','dollar','dominique','domino','dontknow','doogie','doudou','downtown','dragon1','driver','dudley','dutchess','dwight','eagle1','easter','eastern','edmund','element','elina1','elissa','elliot','empire','engage','enigma','enterprise','ernie1','escort','escort1','estelle','eugene','evelyn','explore','faculty','fairview','family1','fatboy','felipe','fenris','ferguson','ferret','ferris','finance','fireball','fishes','fishhead','fishie','flanders','fleurs','flight','florida1','flowerpot','flyboy','forward','franka','freddie','frederic','freebird','freeman','frisco','froggie','froggies','front242','frontier','fugazi','funguy','funtime','future','gaelic','gambler','gammaphi','garcia','garfunkel','gaston','gateway','gateway2','gator1','george1','georgia','german','germany1','getout','ggeorge','gibbons','gibson','gilgamesh','giselle','glider1','gmoney','goblin','goblue','godiva','goethe','gofish','gollum','gramps','grandma','gravis','gremlin','gretzky','grizzly','grumpy','guitar1','gustavo','h2opolo','haggis','hailey','halloween','hallowell','hamilton','hamlet','hanson','happy123','happyday','hardcore','harley1','harriet','harris','harvard','hawkeye1','health','health1','heather1','heather2','hedgehog','heikki','helene','hello1','hello123','hello8','hellohello','help123','helper','hermes','heythere','highland','hillary','histoire','history','hitler','hobbes','holiday','homerj','honda1','hongkong','hoosier','hootie','hosehead','hotrod','hudson','hummer','huskies','hydrogen','ib6ub9','if6was9','iforget','ilmari','iloveu','impact','indonesia','ingvar','insight','instruct','integral','iomega','irmeli','isabelle','israel','italia','j1l2t3','jackie1','james1','jamesbond','jamjam','jeepster','jeffrey1','jennie','jensen','jesse1','jester','jethro','jetta1','jimbob','joanie','joanna','joelle','john316','jordie','journey','jubilee','juhani','julia2','julien','juliet','junebug','juniper','justdoit','justice4','kalamazo','karine','katerina','katie1','keeper','keller','kendall','kerala','kerrya','ketchup','kissa2','kissme','kitten','kittycat','kkkkkk','kleenex','kombat','kristi','kristine','labtec','laddie','ladybug','laserjet','lassie1','laurel','lawson','leader','leblanc','leland','lester','letter','letters','lexus1','lights','lionel','lissabon','little','logger','loislane','lolita','lonestar','longer','longhorn','looney','lovers','loveyou','lucifer','lucky14','macross','macse30','maddie','madmax','madoka','magic1','magnum','maiden','makeitso','mallard','manageme','manson','manuel','marcus','marielle','marine','marino','marshall','martha','matti1','mattingly','maxmax','meatloaf','mechanic','medical','meister','melina','memphis','mercer','mermaid','merrill','michal','michel','michigan','michou','mickel','mickey1','microsoft','midvale','mikael','milano','millenium','million','miranda','miriam','mission','mmmmmm','mobile','mobydick','monkey1','monroe','montana','montana3','montrose','moomoo','moonbeam','morecats','morpheus','motorola','movies','mowgli','mozart','mulder1','munchkin','murray','muscle','mustang1','nadine','napoleon','nation','national','nesbit','nestle','neutrino','newaccount','newlife','newyork1','nexus6','nichole','nicklaus','nightshadow','nightwind','nikita','nintendo','nomore','nopass','normal','norton','notta1','nouveau','novell','nugget','number9','numbers','nutmeg','oaxaca','obiwan','obsession','ohshit','oicu812','openup','orchid','orlando','orville','paagal','packard','packers','packrat','paloma','pancake','paradigm','parola','parrot','partner','pascal','patches','patriots','pauline','payton','peanuts','pedro1','perfect','performa','peterk','peterpan','phialpha','philips','phillips','phishy','piano1','pianoman','pianos','pierce','pigeon','pioneer','pipeline','piper1','pirate','pisces','playboy','poetic','poetry','pontiac','pookey','popeye','prayer','precious','prelude','premier','printing','provider','puddin','pulsar','pussy1','qqq111','quebec','qwerty12','qwertyui','rabbit1','racerx','rachelle','racoon','rafiki','raleigh','randy1','rasta1','ravens','redcloud','redfish','redman','redskins','redwing','redwood','reggae','reggie','reliant','renegade','rescue','revolution','reznor','rhjrjlbk','richard1','richards','richmond','ripper','ripple','roberts','robocop','robotics','rocket1','rockie','rockon','roger1','rogers','roland','rommel','rookie','rootbeer','rossigno','rugger','ruthless','sabbath','sabina','safety','safety1','saigon','samIam','samiam','sammie','samsam','sanjose','saphire','sarah1','saskia','satori','saturday','saturn5','schnapps','science','scooby','scoobydoo','scooter1','scorpion','scotch','scotty','scouts','search','secret3','seeker','september','server','services','seven7','shaggy','shanghai','shanny','shaolin','shasta','shayne','shazam','shelly','shelter','sherry','shirley','shorty','shotgun','sidney','sigmachi','signal','signature','simba1','simsim','sinatra','sirius','skipper1','skydive','skyler','slayer','sleepy','slider','smegma','smile1','smiths','smitty','smurfy','snakes','snapper','sober1','solomon','sonics','sophia','sparks','spartan','sphynx','spike1','sponge','sprocket','squash','starbuck','stargate','starlight','steph1','stephi','steve1','stevens','stewart','stivers','stocks','storage','stranger','strato','stretch','strong','student2','studio','stumpy','sucker','suckme','sultan','summit','sunfire','sunset','superstar','surfing','susan1','susanna','sutton','swanson','sweden','sweetpea','sweety','switzer','swordfish','system5','t-bone','tabatha','tacobell','taiwan','tamtam','tanner','tapani','targas','target','tarheel','tattoo','tazdevil','tequila','terry1','tester','testtest','thankyou','theend','thelorax','thisisit','thompson','thorne','thrasher','tiger2','tightend','timber','timothy','tinkerbell','topcat','topher','toshiba','tototo','toucan','transfer','transit','transport','trapper','travis','treasure','tricky','triton','trombone','trophy','trouble','trucker','tucson','turbo2','tyler1','ultimate','unique','united','upsilon','ursula','vacation','valley','vampire','vanessa','vedder','venice','vermont','victor1','vikram','vincent1','violet','violin','virago','virgil','virginia','vision','visual','volcano','volley','voodoo','vortex','waiting','walden','walleye','wanker','warner','water1','wayne1','webmaster','webster','weezer','wendy1','western','whale1','whitney','whocares','whoville','wibble','wildcat','william1','window','winniethepooh','wolfgang','wolverine','wombat1','wonder','x-files','xxx123','xxxxxxxx','yamaha','yankee','yogibear','yolanda','yomama','yvette','zachary','zebras','zepplin','zoltan','zoomer','zxcvbn','!@#$%^&','00000000','121212','1234qwer','131313','21122112','99999999','@#$%^&','ABC123','Abcdef','Asdfgh','Changeme','FuckYou','Fuckyou','JSBach','Michel','NCC1701','Qwerty','Windows','Zxcvbnm','action','amelie','anaconda','apollo13','artist','asshole','benoit','bernard','bernie','bigbird','blizzard','bluesky','bonjour','booster','byteme','caesar','cardinal','carolina','chandler','changeit','chapman','charlie1','chiquita','chocolat','christia','christoph','classroom','cloclo','corrado','cougars','courtney','dolphins','dominic','donkey','eminem','energy','fearless','fiction','forest','forever','french1','gilles','gocougs','good-luck','graymail','guinness','hilbert','homebrew','hotdog','indian','johnson','kristin','lorraine','m1911a1','macintosh','mailer','maxime','memory','mirror','ne1410s','ne1469','ne14a69','nebraska','nemesis','network','newcourt','notused','oatmeal','patton','planet','players','politics','portland','praise','property','protel','psalms','qwaszx','raiders','rambo1','rancid','scrooge','shelley','skidoo','softball','speedo','sports','ssssss','steele','stephani','sunday','sylvie','symbol','tiffany','toronto','trixie','undead','valentin','velvet','viking','walker','watson','zhongguo','babygirl','1234567890','pretty','hottie','987654321','naruto','spongebob','daniela','princesa','christ','blessed','single','qazwsx','pokemon','iloveyou1','iloveyou2','fuckyou1','hahaha','blessing','blahblah','blink182','123qwe','trinity','passw0rd','google','looking','spirit','iloveyou!','qwerty1','rotimi','onelove','mylove','222222','ilovegod','football1','loving','emmanuel','1q2w3e4r','red123','blabla','112233'];
2
-
3
- function showPasswordStrength(score)
4
- {
5
- var strengthDiv = document.getElementById("wsd_password_strength");
6
- if(!strengthDiv)return false;
7
- if(score == undefined)
8
- {
9
- strengthDiv.style.visibility = "hidden";
10
- return true;
11
- }
12
- else {
13
- strengthDiv.style.visibility = "visible";
14
- if(score == -1)
15
- {
16
- strengthDiv.innerHTML = "too short";
17
- strengthDiv.style.backgroundColor = "#ee0000"
18
- }
19
- else if(score == 0)
20
- {
21
- strengthDiv.innerHTML = "too obvious";
22
- strengthDiv.style.backgroundColor = "#ee0000";
23
- }
24
- else if(score < 34)
25
- {
26
- strengthDiv.innerHTML = "not strong enough";
27
- strengthDiv.style.backgroundColor = "#eeaaaa";
28
- }
29
- else if(score < 68)
30
- {
31
- strengthDiv.innerHTML = "good";
32
- strengthDiv.style.backgroundColor = "#ffff00";
33
- }
34
- else
35
- {
36
- strengthDiv.innerHTML = "strong";
37
- strengthDiv.style.backgroundColor = "#00ff00";
38
- }
39
- }
40
- }
41
-
42
- function evaluatePassStrength(pass)
43
- {
44
- if(typeof pass != 'string'){
45
- showPasswordStrength();
46
- return -1;
47
- }
48
- var len = pass.length;
49
- if(len == 0){
50
- showPasswordStrength();
51
- return -1;
52
- }
53
- if(len < 6) {
54
- showPasswordStrength(-1);
55
- return -1;
56
- }
57
- for(var i=0;i<wsd_commonPasswords.length;i++) {
58
- if(wsd_commonPasswords[i] == pass) {
59
- showPasswordStrength(0);
60
- return 0;
61
- }
62
- }
63
-
64
- var score=len*4;
65
- var a=0;
66
- var C=0;
67
- var n=0;
68
- var s=0;
69
- var l='';
70
- for(var i=0;i<len;i++){
71
- if(l==pass.charAt(i)) score -= 1; else l=pass.charAt(i);
72
- if((pass.charAt(i)>='a')&&(pass.charAt(i)<='z')){a++;continue;}
73
- if((pass.charAt(i)>='A')&&(pass.charAt(i)<='Z')){C++;continue;}
74
- if((pass.charAt(i)>='0')&&(pass.charAt(i)<='9')){n++;continue;}
75
- s++;
76
- }
77
- if(len == a) score -= 10;
78
- if(len == n) score -= 10;
79
- if(len == C) score -= 10;
80
- if(n > 0) score += 5;
81
- if(C > 0) score += 5;
82
- if(s > 0) score += 5;
83
- if((n>0)&&(a>0)) score += 15;
84
- if((C>0)&&(a>0)) score += 15;
85
- if((s>0)&&(a>0)) score += 15;
86
- if(score > 100) score = 100;
87
-
88
- showPasswordStrength(score);
89
- return score;
90
- }
91
-
92
- function onPasswordChange(){
93
- var passInput = document.getElementById("wsd_account_pass");
94
- if(passInput){
95
- evaluatePassStrength(passInput.value);
96
- passwordMatch();
97
- }
98
- }
99
-
100
- function passwordMatch(){
101
- var passInput1 = document.getElementById("wsd_account_pass");
102
- var passInput2 = document.getElementById("wsd_account_pass_re");
103
- if(passInput1 && passInput2){
104
- var match = (passInput1.value==passInput2.value);
105
- var matchhDiv = document.getElementById("wsd_password_match");
106
- if(match)matchhDiv.style.visibility = "hidden";
107
- else {
108
- matchhDiv.style.visibility = "visible";
109
- matchhDiv.innerHTML = "passwords don't match";
110
- matchhDiv.style.backgroundColor = "#eeaaaa";
111
- }
112
- return match;
113
- }
114
- else
115
- return true;
116
- }
117
-
118
- function submitForm(){
119
- var agree = document.getElementById("wsd_account_agree");
120
- var passInput1 = document.getElementById("wsd_account_pass");
121
- var passInput2 = document.getElementById("wsd_account_pass_re");
122
-
123
- if(!agree || !passInput1 || !passInput2)return;
124
-
125
- var errors = '';
126
- if(passInput1.value == "")errors += " - Password cannot be blank\n";
127
- else if(evaluatePassStrength(passInput1.value) <= 34)errors += " - Choose a better password\n";
128
- if(!passwordMatch())errors += " - Passwords don't match\n";
129
- if(agree.checked != 1)errors += " - You have to agree with the terms of service\n";
130
- if(errors!=''){
131
- alert("Please correct the following errors and try again:\n" + errors)
132
- }
133
- else {
134
- if(form=document.getElementById("sw_wsd_new_user_form"))form.submit();
135
- Recaptcha.reload();
136
- }
137
  }
1
+ var wsd_commonPasswords=['abc123','password','computer','123456','tigger','a1b2c3','qwerty','password1','carmen','mickey','secret','summer','internet','service','canada','ranger','shadow','baseball','donald','harley','hockey','letmein','maggie','mustang','snoopy','buster','dragon','jordan','michael','michelle','patrick','123abc','andrew','calvin','changeme','diamond','fuckme','fuckyou','matthew','miller','trustno1','12345678','123456789','avalon','brandy','chelsea','coffee','falcon','freedom','gandalf','helpme','merlin','molson','newyork','soccer','thomas','wizard','Monday','asdfgh','bandit','batman','butthead','dorothy','eeyore','fishing','football','george','iloveyou','jennifer','jonathan','marina','master','monday','monkey','natasha','ncc1701','newpass','pamela','pepper','piglet','poohbear','pookie','rabbit','rachel','rocket','sparky','spring','steven','success','sunshine','thx1138','victoria','whatever','zapata','8675309','Internet','amanda','august','barney','biteme','boomer','cowboy','doctor','fisher','foobar','island','joshua','marley','orange','please','rascal','richard','scooter','shalom','silver','skippy','stanley','taylor','welcome','zephyr','111111','aaaaaa','access','albert','alexander','andrea','anthony','asdfjkl;','ashley','basketball','beavis','booboo','bradley','brandon','caitlin','camaro','charlie','chicken','cricket','dakota','dallas','daniel','debbie','dolphin','elephant','friend','fucker','ginger','goodluck','hammer','heather','iceman','jessica','joseph','jupiter','justin','knight','lacrosse','lakers','lizard','madison','mother','muffin','murphy','ncc1701d','newuser','nirvana','pentium','phoenix','picture','rainbow','saturn','shannon','shithead','skeeter','sophie','special','stephanie','stephen','sweetie','teacher','tennis','test123','topgun','tristan','william','wilson','1q2w3e','654321','666666','a12345','a1b2c3d4','angela','archie','blazer','bond007','booger','charles','christin','claire','control','david1','dennis','digital','disney','edward','flipper','franklin','horses','hunter','indigo','jasper','jeremy','julian','kelsey','killer','kingfish','lauren','maryjane','matrix','maverick','mayday','mercury','mitchell','morgan','mountain','niners','nothing','oliver','peanut','pearljam','phantom','popcorn','princess','psycho','pumpkin','purple','rebecca','reddog','robert','salmon','samson','sharon','sierra','smokey','startrek','steelers','stimpy','sunflower','superman','support','sydney','techno','telecom','walter','willie','willow','winner','zxcvbnm','absolut','alaska','alexis','animal','apples','babylon5','backup','barbara','benjamin','bird33','bluebird','bonnie','camera','chocolate','claudia','cocacola','compton','connect','cookie','cruise','deliver','douglas','dreamer','dreams','duckie','eagles','einstein','explorer','family','ferrari','flamingo','flower','foxtrot','francis','freddy','friday','froggy','galileo','giants','global','gopher','hansolo','happy1','hendrix','herman','houston','iguana','indiana','insane','inside','ironman','jasmin','jeanne','justice','katherine','kermit','leslie','martin','minnie','nascar','nelson','netware','pantera','parker','passwd','penguin','porsche911','prince','punkin','pyramid','raymond','rosebud','route66','running','security','sergei','sheena','sheila','skiing','snapple','snowball','sparrow','spencer','stealth','student','sylvia','tamara','taurus','teresa','theresa','thunderbird','tigers','toyota','training','travel','tuesday','victory','viper1','wesley','whisky','winnie','winter','wolves','xyz123','123123','1234567','696969','888888','Anthony','Bond007','Friday','Hendrix','Joshua','Matthew','October','Taurus','Tigger','abcdef','adidas','adrian','alexandr','alfred','arthur','athena','austin','awesome','badger','bamboo','beagle','beatles','beautiful','beaver','bigmac','blonde','boogie','boston','brenda','bright','bubba1','bubbles','button','buttons','cactus','captain','carlos','caroline','carrie','casper','catalog','catch22','challenge','chance','charity','charlotte','cheese','cheryl','chris1','clancy','clipper','coltrane','compaq','conrad','cooper','cooter','copper','cosmos','cougar','cracker','crawford','crystal','curtis','cyclone','cyrano','deutsch','diablo','dilbert','dollars','dookie','dumbass','dundee','e-mail','elizabeth','europe','export','farmer','firebird','fletcher','fluffy','fountain','france','freak1','friends','fuckoff','gabriel','gabriell','galaxy','gambit','garden','garfield','garlic','garnet','genesis','genius','godzilla','goforit','golfer','goober','grateful','greenday','groovy','grover','guitar','hacker','hector','herbert','horizon','hornet','howard','icecream','imagine','impala','informix','janice','jasmine','jason1','jeanette','jeffrey','jenifer','jesus1','jewels','julie1','junior','justin1','kathleen','kelly1','kennedy','kevin1','knicks','larry1','ledzep','leonard','lestat','library','lincoln','lionking','london','louise','lucky1','maddog','mailman','majordomo','mantra','margaret','mariposa','market','marlboro','martin1','master1','mazda1','mensuck','mercedes','metallic','midori','millie','mirage','money1','monica','monopoly','mookie','moroni','nathan','ncc1701e','nesbitt','nguyen','nicholas','nicole','nimrod','october','olivia','online','oxford','pacific','painter','peaches','penelope','petunia','philip','phoenix1','pickle','player','poiuyt','porsche','porter','python','quality','raquel','remember','republic','research','robbie','robert1','runner','russell','sailing','sailor','samantha','savage','scarlett','school','shadow1','shelby','simple','skipper','smiley','snickers','sniper','snoopdog','snowman','spitfire','sprite','spunky','starwars','station','stella','stingray','stormy','stupid','sumuinen','sunny1','sunrise','surfer','teddy1','testing','theboss','theking','thumper','tintin','tomcat','trebor','trevor','tweety','unicorn','valentine','valerie','vanilla','veronica','victor','vincent','warrior','warriors','weasel','wheels','wilbur','winston','wisdom','wombat','xanadu','xavier','yellow','zaphod','zeppelin','!@#$%^','!@#$%^&*','10sne1','1p2o3i','3bears','Andrew','Broadway','Champs','Family','Fisher','Friends','Jeanne','Killer','Knight','Master','Michael','Michelle','Pentium','Pepper','Raistlin','Sierra','Snoopy','Tennis','Tuesday','abacab','abcd1234','abcdefg','abigail','account','acropolis','alice1','allison','alpine','anders','andre1','andrea1','angel1','annette','antares','apache','apollo','aragorn','arizona','arnold','arsenal','asdfasdf','asdfghjk','avenger','avenir','babydoll','bailey','banana','basket','batman1','beaner','beatrice','bertha','bigben','bigdog','biggles','bigman','biology','bishop','blondie','blowfish','bluefish','bobcat','braves','brazil','bridges','brutus','buffalo','bulldog','bullet','bullshit','business','butler','butter','california','cannondale','carebear','carol1','carole','cassie','castle','catalina','catherine','catnip','cccccc','celine','center','champion','chanel','chelsea1','chester1','chicago','christian','christy','church','cinder','colleen','colorado','columbia','commander','connie','content','cookies','cooking','cordelia','corona','cowboys','coyote','crack1','creative','cuddles','cuervo','daisie','daniel1','danielle','database','davids','deadhead','denali','depeche','design','destiny','dickens','dickhead','digger','dodger','dougie','dragonfly','eclipse','electric','emerald','emmitt','entropy','etoile','excalibur','express','farout','farside','feedback','fender','fireman','firenze','fletch','florida','flowers','foster','fozzie','francesco','francine','francois','french','fuckface','gargoyle','gasman','gemini','general','gerald','germany','gilbert','goaway','golden','goldfish','gordon','graham','graphic','gregory','gretchen','gunner','hal9000','hannah','harold','harrison','harvey','hawkeye','heaven','helena','herzog','hithere','hobbit','ibanez','idontknow','integra','intern','intrepid','ireland','isabel','jackie','jackson','jaguar','jamaica','jenny1','jessie','jethrotull','jkl123','johanna1','johnny','joker1','jordan23','judith','jumanji','kangaroo','karen1','keepout','keith1','kenneth','kidder','kimberly','kingdom','kitkat','kramer','kristen','lambda','laurie','lawrence','lawyer','legend','liberty','lindsay','lindsey','liverpool','logical','lonely','lorrie','lovely','loveme','madonna','malcolm','malibu','marathon','marcel','maria1','mariah','mariah1','marilyn','mariner','marvin','maurice','maxine','maxwell','meggie','melanie','melissa','melody','merlot','mexico','michael1','michele','midnight','midway','miracle','mishka','mmouse','molly1','monique','montreal','moocow','morris','mortimer','mouse1','mulder','nautica','nellie','nermal','newton','nicarao','nirvana1','nissan','norman','notebook','olivier','oranges','oregon','overkill','pacers','packer','pandora','panther','passion','patricia','peewee','pencil','people','person','peter1','picard','picasso','pierre','pinkfloyd','polaris','police','pookie1','predator','preston','primus','prometheus','public','q1w2e3','queenie','quentin','random','rangers','raptor','rastafarian','reality','redrum','remote','reptile','reynolds','rhonda','ricardo','ricardo1','roadrunner','robinhood','robotech','rocknroll','rocky1','ronald','ruthie','sabrina','sakura','salasana','sampson','samuel','sandra','sapphire','scarecrow','scarlet','scorpio','scott1','scottie','scruffy','scuba1','seattle','serena','sergey','shanti','shogun','singer','skibum','skywalker','slacker','smashing','smiles','snowflake','snowski','snuffy','soccer1','soleil','spanky','speedy','spider','spooky','stacey','star69','starter','steven1','sting1','stinky','strawberry','stuart','sunbird','sundance','superfly','suzanne','suzuki','swimmer','swimming','system','tarzan','teddybear','teflon','temporal','terminal','theatre','thejudge','thunder','thursday','tinker','tootsie','tornado','tricia','trident','trojan','truman','trumpet','tucker','turtle','utopia','valhalla','voyager','warcraft','warlock','warren','williams','windsurf','winona','woofwoof','wrangler','wright','xcountry','xfiles','xxxxxx','yankees','yvonne','zenith','zigzag','zombie','zxc123','000000','007007','11111111','123321','171717','181818','1a2b3c','1chris','1kitty','1qw23e','4runner','57chevy','7777777','789456','7dwarfs','88888888','Abcdefg','Alexis','Animals','Bailey','Bastard','Beavis','Bismillah','Booboo','Boston','Canucks','Cardinal','Celtics','ChangeMe','Charlie','Computer','Cougar','Creative','Curtis','Daniel','Darkman','Denise','Dragon','Eagles','Elizabeth','Esther','Figaro','Fishing','Fortune','Freddy','Front242','Gandalf','Geronimo','Gingers','Golden','Goober','Gretel','HARLEY','Hacker','Hammer','Harley','Heather','Hershey','Jackson','Jennifer','Jersey','Jessica','Joanna','Johnson','Jordan','KILLER','Kitten','Liberty','Lindsay','Lizard','Madeline','Margaret','Maxwell','Mellon','Merlot','Metallic','Michel1','Monster','Montreal','Newton','Nicholas','Noriko','Paladin','Pamela','Password','Peaches','Peanuts','Phoenix','Piglet','Pookie','Princess','Purple','Rabbit','Raiders','Random','Rebecca','Robert','Russell','Saturn','Service','Shadow','Sidekick','Skeeter','Smokey','Sparky','Speedy','Sterling','Steven','Summer','Sunshine','Superman','Sverige','Swoosh','Taylor','Theresa','Thomas','Thunder','Vernon','Victoria','Vincent','Waterloo','Webster','Willow','Winnie','Wolverine','Woodrow','aardvark','abbott','abcd123','accord','active','admin1','adrock','aerobics','africa','airborne','airwolf','aki123','alfaro','alicia','aliens','alison','allegro','allstate','alpha1','altamira','althea','altima','altima1','amanda1','amazing','america','anderson','andrew!','andrew1','andromed','angels','angie1','anneli','anything','apple1','apple2','applepie','aptiva','aquarius','ariane','arlene','artemis','asdf1234','asdf;lkj','asdfjkl','ashley1','ashraf','ashton','assmunch','asterix','attila','autumn','avatar','ayelet','aylmer','baraka','barbie','barney1','barnyard','barrett','bartman','beaches','beanie','beasty','beauty','beavis1','belgium','belize','belmont','benson','beowulf','bernardo','betacam','bharat','bichon','bigboss','bigred','billy1','bimmer','bioboy','biochem','birdie','birthday','biscuit','bitter','blackjack','blanche','blinds','blowjob','blowme','blueeyes','bluejean','bogart','bombay','boobie','bootsie','boulder','bourbon','boxers','branch','brandi','brewster','bridge','britain','broker','bronco','bronte','brooke','brother','bubble','buddha','budgie','buffett','burton','butterfly','c00per','calendar','calgary','calvin1','camille','campbell','camping','cancer','canela','cannon','carbon','carnage','carolyn','carrot','cascade','catfish','catwoman','cecile','celica','cement','cessna','chainsaw','chameleon','change','chantal','charger','cherry','chiara','chiefs','chinacat','chinook','chouette','chris123','christ1','christmas','christopher','chronos','cicero','cindy1','cinema','circuit','cirque','cirrus','clapton','clarkson','claude','claudel','clueless','cobain','colette','college','colors','colt45','concept','concorde','confused','coolbean','cornflake','corvette','corwin','country','courier','crescent','crowley','crusader','cthulhu','cunningham','cupcake','current','cutlass','cynthia','daedalus','dagger','dagger1','dammit','damogran','dancer','daphne','darkstar','darren','darryl','darwin','datatrain','daytek','deborah','december','decker','deedee','deeznuts','delano','delete','denise','desert','deskjet','detroit','devine','dexter','dharma','dianne','diesel','dillweed','dipper','director','dodgers','dogbert','doitnow','dollar','dominique','domino','dontknow','doogie','doudou','downtown','dragon1','driver','dudley','dutchess','dwight','eagle1','easter','eastern','edmund','element','elina1','elissa','elliot','empire','engage','enigma','enterprise','ernie1','escort','escort1','estelle','eugene','evelyn','explore','faculty','fairview','family1','fatboy','felipe','fenris','ferguson','ferret','ferris','finance','fireball','fishes','fishhead','fishie','flanders','fleurs','flight','florida1','flowerpot','flyboy','forward','franka','freddie','frederic','freebird','freeman','frisco','froggie','froggies','front242','frontier','fugazi','funguy','funtime','future','gaelic','gambler','gammaphi','garcia','garfunkel','gaston','gateway','gateway2','gator1','george1','georgia','german','germany1','getout','ggeorge','gibbons','gibson','gilgamesh','giselle','glider1','gmoney','goblin','goblue','godiva','goethe','gofish','gollum','gramps','grandma','gravis','gremlin','gretzky','grizzly','grumpy','guitar1','gustavo','h2opolo','haggis','hailey','halloween','hallowell','hamilton','hamlet','hanson','happy123','happyday','hardcore','harley1','harriet','harris','harvard','hawkeye1','health','health1','heather1','heather2','hedgehog','heikki','helene','hello1','hello123','hello8','hellohello','help123','helper','hermes','heythere','highland','hillary','histoire','history','hitler','hobbes','holiday','homerj','honda1','hongkong','hoosier','hootie','hosehead','hotrod','hudson','hummer','huskies','hydrogen','ib6ub9','if6was9','iforget','ilmari','iloveu','impact','indonesia','ingvar','insight','instruct','integral','iomega','irmeli','isabelle','israel','italia','j1l2t3','jackie1','james1','jamesbond','jamjam','jeepster','jeffrey1','jennie','jensen','jesse1','jester','jethro','jetta1','jimbob','joanie','joanna','joelle','john316','jordie','journey','jubilee','juhani','julia2','julien','juliet','junebug','juniper','justdoit','justice4','kalamazo','karine','katerina','katie1','keeper','keller','kendall','kerala','kerrya','ketchup','kissa2','kissme','kitten','kittycat','kkkkkk','kleenex','kombat','kristi','kristine','labtec','laddie','ladybug','laserjet','lassie1','laurel','lawson','leader','leblanc','leland','lester','letter','letters','lexus1','lights','lionel','lissabon','little','logger','loislane','lolita','lonestar','longer','longhorn','looney','lovers','loveyou','lucifer','lucky14','macross','macse30','maddie','madmax','madoka','magic1','magnum','maiden','makeitso','mallard','manageme','manson','manuel','marcus','marielle','marine','marino','marshall','martha','matti1','mattingly','maxmax','meatloaf','mechanic','medical','meister','melina','memphis','mercer','mermaid','merrill','michal','michel','michigan','michou','mickel','mickey1','microsoft','midvale','mikael','milano','millenium','million','miranda','miriam','mission','mmmmmm','mobile','mobydick','monkey1','monroe','montana','montana3','montrose','moomoo','moonbeam','morecats','morpheus','motorola','movies','mowgli','mozart','mulder1','munchkin','murray','muscle','mustang1','nadine','napoleon','nation','national','nesbit','nestle','neutrino','newaccount','newlife','newyork1','nexus6','nichole','nicklaus','nightshadow','nightwind','nikita','nintendo','nomore','nopass','normal','norton','notta1','nouveau','novell','nugget','number9','numbers','nutmeg','oaxaca','obiwan','obsession','ohshit','oicu812','openup','orchid','orlando','orville','paagal','packard','packers','packrat','paloma','pancake','paradigm','parola','parrot','partner','pascal','patches','patriots','pauline','payton','peanuts','pedro1','perfect','performa','peterk','peterpan','phialpha','philips','phillips','phishy','piano1','pianoman','pianos','pierce','pigeon','pioneer','pipeline','piper1','pirate','pisces','playboy','poetic','poetry','pontiac','pookey','popeye','prayer','precious','prelude','premier','printing','provider','puddin','pulsar','pussy1','qqq111','quebec','qwerty12','qwertyui','rabbit1','racerx','rachelle','racoon','rafiki','raleigh','randy1','rasta1','ravens','redcloud','redfish','redman','redskins','redwing','redwood','reggae','reggie','reliant','renegade','rescue','revolution','reznor','rhjrjlbk','richard1','richards','richmond','ripper','ripple','roberts','robocop','robotics','rocket1','rockie','rockon','roger1','rogers','roland','rommel','rookie','rootbeer','rossigno','rugger','ruthless','sabbath','sabina','safety','safety1','saigon','samIam','samiam','sammie','samsam','sanjose','saphire','sarah1','saskia','satori','saturday','saturn5','schnapps','science','scooby','scoobydoo','scooter1','scorpion','scotch','scotty','scouts','search','secret3','seeker','september','server','services','seven7','shaggy','shanghai','shanny','shaolin','shasta','shayne','shazam','shelly','shelter','sherry','shirley','shorty','shotgun','sidney','sigmachi','signal','signature','simba1','simsim','sinatra','sirius','skipper1','skydive','skyler','slayer','sleepy','slider','smegma','smile1','smiths','smitty','smurfy','snakes','snapper','sober1','solomon','sonics','sophia','sparks','spartan','sphynx','spike1','sponge','sprocket','squash','starbuck','stargate','starlight','steph1','stephi','steve1','stevens','stewart','stivers','stocks','storage','stranger','strato','stretch','strong','student2','studio','stumpy','sucker','suckme','sultan','summit','sunfire','sunset','superstar','surfing','susan1','susanna','sutton','swanson','sweden','sweetpea','sweety','switzer','swordfish','system5','t-bone','tabatha','tacobell','taiwan','tamtam','tanner','tapani','targas','target','tarheel','tattoo','tazdevil','tequila','terry1','tester','testtest','thankyou','theend','thelorax','thisisit','thompson','thorne','thrasher','tiger2','tightend','timber','timothy','tinkerbell','topcat','topher','toshiba','tototo','toucan','transfer','transit','transport','trapper','travis','treasure','tricky','triton','trombone','trophy','trouble','trucker','tucson','turbo2','tyler1','ultimate','unique','united','upsilon','ursula','vacation','valley','vampire','vanessa','vedder','venice','vermont','victor1','vikram','vincent1','violet','violin','virago','virgil','virginia','vision','visual','volcano','volley','voodoo','vortex','waiting','walden','walleye','wanker','warner','water1','wayne1','webmaster','webster','weezer','wendy1','western','whale1','whitney','whocares','whoville','wibble','wildcat','william1','window','winniethepooh','wolfgang','wolverine','wombat1','wonder','x-files','xxx123','xxxxxxxx','yamaha','yankee','yogibear','yolanda','yomama','yvette','zachary','zebras','zepplin','zoltan','zoomer','zxcvbn','!@#$%^&','00000000','121212','1234qwer','131313','21122112','99999999','@#$%^&','ABC123','Abcdef','Asdfgh','Changeme','FuckYou','Fuckyou','JSBach','Michel','NCC1701','Qwerty','Windows','Zxcvbnm','action','amelie','anaconda','apollo13','artist','asshole','benoit','bernard','bernie','bigbird','blizzard','bluesky','bonjour','booster','byteme','caesar','cardinal','carolina','chandler','changeit','chapman','charlie1','chiquita','chocolat','christia','christoph','classroom','cloclo','corrado','cougars','courtney','dolphins','dominic','donkey','eminem','energy','fearless','fiction','forest','forever','french1','gilles','gocougs','good-luck','graymail','guinness','hilbert','homebrew','hotdog','indian','johnson','kristin','lorraine','m1911a1','macintosh','mailer','maxime','memory','mirror','ne1410s','ne1469','ne14a69','nebraska','nemesis','network','newcourt','notused','oatmeal','patton','planet','players','politics','portland','praise','property','protel','psalms','qwaszx','raiders','rambo1','rancid','scrooge','shelley','skidoo','softball','speedo','sports','ssssss','steele','stephani','sunday','sylvie','symbol','tiffany','toronto','trixie','undead','valentin','velvet','viking','walker','watson','zhongguo','babygirl','1234567890','pretty','hottie','987654321','naruto','spongebob','daniela','princesa','christ','blessed','single','qazwsx','pokemon','iloveyou1','iloveyou2','fuckyou1','hahaha','blessing','blahblah','blink182','123qwe','trinity','passw0rd','google','looking','spirit','iloveyou!','qwerty1','rotimi','onelove','mylove','222222','ilovegod','football1','loving','emmanuel','1q2w3e4r','red123','blabla','112233'];
2
+
3
+ function showPasswordStrength(score)
4
+ {
5
+ var strengthDiv = document.getElementById("wsd_password_strength");
6
+ if(!strengthDiv)return false;
7
+ if(score == undefined)
8
+ {
9
+ strengthDiv.style.visibility = "hidden";
10
+ return true;
11
+ }
12
+ else {
13
+ strengthDiv.style.visibility = "visible";
14
+ if(score == -1)
15
+ {
16
+ strengthDiv.innerHTML = "too short";
17
+ strengthDiv.style.backgroundColor = "#ee0000"
18
+ }
19
+ else if(score == 0)
20
+ {
21
+ strengthDiv.innerHTML = "too obvious";
22
+ strengthDiv.style.backgroundColor = "#ee0000";
23
+ }
24
+ else if(score < 34)
25
+ {
26
+ strengthDiv.innerHTML = "not strong enough";
27
+ strengthDiv.style.backgroundColor = "#eeaaaa";
28
+ }
29
+ else if(score < 68)
30
+ {
31
+ strengthDiv.innerHTML = "good";
32
+ strengthDiv.style.backgroundColor = "#ffff00";
33
+ }
34
+ else
35
+ {
36
+ strengthDiv.innerHTML = "strong";
37
+ strengthDiv.style.backgroundColor = "#00ff00";
38
+ }
39
+ }
40
+ }
41
+
42
+ function evaluatePassStrength(pass)
43
+ {
44
+ if(typeof pass != 'string'){
45
+ showPasswordStrength();
46
+ return -1;
47
+ }
48
+ var len = pass.length;
49
+ if(len == 0){
50
+ showPasswordStrength();
51
+ return -1;
52
+ }
53
+ if(len < 6) {
54
+ showPasswordStrength(-1);
55
+ return -1;
56
+ }
57
+ for(var i=0;i<wsd_commonPasswords.length;i++) {
58
+ if(wsd_commonPasswords[i] == pass) {
59
+ showPasswordStrength(0);
60
+ return 0;
61
+ }
62
+ }
63
+
64
+ var score=len*4;
65
+ var a=0;
66
+ var C=0;
67
+ var n=0;
68
+ var s=0;
69
+ var l='';
70
+ for(var i=0;i<len;i++){
71
+ if(l==pass.charAt(i)) score -= 1; else l=pass.charAt(i);
72
+ if((pass.charAt(i)>='a')&&(pass.charAt(i)<='z')){a++;continue;}
73
+ if((pass.charAt(i)>='A')&&(pass.charAt(i)<='Z')){C++;continue;}
74
+ if((pass.charAt(i)>='0')&&(pass.charAt(i)<='9')){n++;continue;}
75
+ s++;
76
+ }
77
+ if(len == a) score -= 10;
78
+ if(len == n) score -= 10;
79
+ if(len == C) score -= 10;
80
+ if(n > 0) score += 5;
81
+ if(C > 0) score += 5;
82
+ if(s > 0) score += 5;
83
+ if((n>0)&&(a>0)) score += 15;
84
+ if((C>0)&&(a>0)) score += 15;
85
+ if((s>0)&&(a>0)) score += 15;
86
+ if(score > 100) score = 100;
87
+
88
+ showPasswordStrength(score);
89
+ return score;
90
+ }
91
+
92
+ function onPasswordChange(){
93
+ var passInput = document.getElementById("wsd_account_pass");
94
+ if(passInput){
95
+ evaluatePassStrength(passInput.value);
96
+ passwordMatch();
97
+ }
98
+ }
99
+
100
+ function passwordMatch(){
101
+ var passInput1 = document.getElementById("wsd_account_pass");
102
+ var passInput2 = document.getElementById("wsd_account_pass_re");
103
+ if(passInput1 && passInput2){
104
+ var match = (passInput1.value==passInput2.value);
105
+ var matchhDiv = document.getElementById("wsd_password_match");
106
+ if(match)matchhDiv.style.visibility = "hidden";
107
+ else {
108
+ matchhDiv.style.visibility = "visible";
109
+ matchhDiv.innerHTML = "passwords don't match";
110
+ matchhDiv.style.backgroundColor = "#eeaaaa";
111
+ }
112
+ return match;
113
+ }
114
+ else
115
+ return true;
116
+ }
117
+
118
+ function submitForm(){
119
+ var agree = document.getElementById("wsd_account_agree");
120
+ var passInput1 = document.getElementById("wsd_account_pass");
121
+ var passInput2 = document.getElementById("wsd_account_pass_re");
122
+
123
+ if(!agree || !passInput1 || !passInput2)return;
124
+
125
+ var errors = '';
126
+ if(passInput1.value == "")errors += " - Password cannot be blank\n";
127
+ else if(evaluatePassStrength(passInput1.value) <= 34)errors += " - Choose a better password\n";
128
+ if(!passwordMatch())errors += " - Passwords don't match\n";
129
+ if(agree.checked != 1)errors += " - You have to agree with the terms of service\n";
130
+ if(errors!=''){
131
+ alert("Please correct the following errors and try again:\n" + errors)
132
+ }
133
+ else {
134
+ if(form=document.getElementById("sw_wsd_new_user_form"))form.submit();
135
+ Recaptcha.reload();
136
+ }
137
  }
languages/secure_wp-ar.mo CHANGED
File without changes
languages/secure_wp-ar.po CHANGED
File without changes
languages/secure_wp-fr_FR.mo CHANGED
File without changes
languages/secure_wp-fr_FR.po CHANGED
File without changes
languages/secure_wp-ro_RO.mo CHANGED
File without changes
languages/secure_wp-ro_RO.po CHANGED
File without changes
languages/secure_wp-sr_RS.mo DELETED
Binary file
languages/secure_wp-sr_RS.po DELETED
@@ -1,241 +0,0 @@
1
- msgid ""
2
- msgstr ""
3
- "Project-Id-Version: secure_wp\n"
4
- "Report-Msgid-Bugs-To: \n"
5
- "POT-Creation-Date: 2009-06-22 12:29+0100\n"
6
- "PO-Revision-Date: \n"
7
- "Last-Translator: Brian Flores <baflores@gmail.com>\n"
8
- "Language-Team: \n"
9
- "MIME-Version: 1.0\n"
10
- "Content-Type: text/plain; charset=UTF-8\n"
11
- "Content-Transfer-Encoding: 8bit\n"
12
- "X-Poedit-Language: Spanish\n"
13
- "X-Poedit-Country: SPAIN\n"
14
- "X-Poedit-SourceCharset: utf-8\n"
15
-
16
- #: secure-wordpress.php:337
17
- msgid "Settings"
18
- msgstr "Подешавања"
19
-
20
- # @ secure_wp
21
- #: secure-wordpress.php:366
22
- #: secure-wordpress.php:413
23
- msgid "<a href=\"http://wordpress.org/extend/plugins/secure-wordpress/\">Documentation</a>"
24
- msgstr "<a href=\"http://wordpress.org/extend/plugins/secure-wordpress/\">Документација</a> "
25
-
26
- # @ secure_wp
27
- #: secure-wordpress.php:389
28
- msgid "Options update."
29
- msgstr "Опције ажурирања."
30
-
31
- # @ secure_wp
32
- #: secure-wordpress.php:391
33
- msgid "All entries in the database was cleared. Now deactivate this plugin."
34
- msgstr "Сав унос у базу података је је избрисан. Сада деактивирај овај плагин."
35
-
36
- # @ secure_wp
37
- #: secure-wordpress.php:405
38
- #: secure-wordpress.php:416
39
- msgid "Secure WP"
40
- msgstr "Сигурни WP"
41
-
42
- # @ secure_wp
43
- #: secure-wordpress.php:412
44
- #: secure-wordpress.php:703
45
- msgid "Secure WordPress"
46
- msgstr "Сигурни Вордпрес"
47
-
48
- #: secure-wordpress.php:436
49
- msgid "Version"
50
- msgstr "Верзија"
51
-
52
- # @ secure_wp
53
- #: secure-wordpress.php:436
54
- msgid "History"
55
- msgstr "Историја"
56
-
57
- #: secure-wordpress.php:436
58
- msgid "Author"
59
- msgstr "Аутор"
60
-
61
- # @ secure_wp
62
- #: secure-wordpress.php:629
63
- msgid "Options not update - you don&lsquo;t have the privilidges to do this!"
64
- msgstr "Опције не ажурирање - немате привилегије да то урадите! "
65
-
66
- # @ secure_wp
67
- #: secure-wordpress.php:649
68
- msgid "Entries was not delleted - you don&lsquo;t have the privilidges to do this!"
69
- msgstr "Унесени подаци нису избрисани- немаш привилегију то да урадиш!"
70
-
71
- # @ secure_wp
72
- #: secure-wordpress.php:657
73
- msgid "Entries was not delleted - check the checkbox!"
74
- msgstr "Унесени подаци нису избрисани - провери поље!"
75
-
76
- # @ secure_wp
77
- #: secure-wordpress.php:677
78
- msgid "All entries in the database was cleared."
79
- msgstr "Сви подаци у бази података су избрисани."
80
-
81
- # @ secure_wp
82
- #: secure-wordpress.php:681
83
- msgid "Entries was not delleted - check the checkbox or you don&lsquo;t have the privilidges to do this!"
84
- msgstr "Унесени подаци нису избрисани - провери поље или немаш привилегију да то урадиш!"
85
-
86
- #: secure-wordpress.php:708
87
- #: secure-wordpress.php:843
88
- #: secure-wordpress.php:863
89
- msgid "Click to toggle"
90
- msgstr "Кликни да откључаш"
91
-
92
- # @ secure_wp
93
- #: secure-wordpress.php:709
94
- msgid "Configuration"
95
- msgstr "Конфигурација "
96
-
97
- # @ secure_wp
98
- #: secure-wordpress.php:719
99
- msgid "Error-Messages"
100
- msgstr "Грешка у поруци"
101
-
102
- # @ secure_wp
103
- #: secure-wordpress.php:729
104
- msgid "WordPress Version"
105
- msgstr "Вордпрес верзија"
106
-
107
- # @ secure_wp
108
- #: secure-wordpress.php:733
109
- msgid "Removes version of WordPress in all areas, including feed, not in admin"
110
- msgstr "Уклања верзију Вордпреса у свим областима, укључујући feed, не у admin"
111
-
112
- # @ secure_wp
113
- #: secure-wordpress.php:759
114
- msgid "Really Simple Discovery"
115
- msgstr "Really Simple Discovery"
116
-
117
- # @ secure_wp
118
- #: secure-wordpress.php:763
119
- msgid "Remove Really Simple Discovery link in <code>wp_head</code> of the frontend"
120
- msgstr "Уkлања Real Simple Discovery линк у <code>wp_head</code> of the frontend "
121
-
122
- # @ secure_wp
123
- #: secure-wordpress.php:769
124
- msgid "Windows Live Writer"
125
- msgstr "Windows писац уживо"
126
-
127
- # @ secure_wp
128
- #: secure-wordpress.php:773
129
- msgid "Remove Windows Live Writer link in <code>wp_head</code> of the frontend"
130
- msgstr "Уклања Windows Live Writer линк у <code>wp_head</code> of the frontend "
131
-
132
- # @ secure_wp
133
- #: secure-wordpress.php:779
134
- msgid "Core Update"
135
- msgstr "Actualización del Core Срж ажурирања"
136
-
137
- # @ secure_wp
138
- #: secure-wordpress.php:783
139
- msgid "Remove WordPress Core update for non-admins. Show message of a new WordPress version only to users with the right to update."
140
- msgstr "Уклања Вордпрес Core ажурирање за non-admins. Показује поруке нове Вордпрес верзије само корисницима са правом на ажурирање."
141
-
142
- # @ secure_wp
143
- #: secure-wordpress.php:789
144
- msgid "Plugin Update"
145
- msgstr "Ажурирање плагина"
146
-
147
- # @ secure_wp
148
- #: secure-wordpress.php:793
149
- msgid "Remove the plugin update for non-admins. Show message for a new version of a plugin in the install of your blog only to users with the rights to edit plugins."
150
- msgstr "Уклања плагин ажурирање за non-admins. Показује поруку за нову верзију плагина у инсталацијама вашег блога само корисницима са правом на ажурирање плагина."
151
-
152
- # @ secure_wp
153
- #: secure-wordpress.php:800
154
- msgid "Theme Update"
155
- msgstr "Ажурирање времена"
156
-
157
- # @ secure_wp
158
- #: secure-wordpress.php:804
159
- msgid "Remove the theme update for non-admins. Show message for a new version of a theme in the install of your blog only to users with the rights to edit themes."
160
- msgstr "Уклања тему ажурирања за non-admins. Показује поруку нове верзије теме у инсталацијама башег блога само корисницима са правом на ажурирање тема."
161
-
162
- # @ secure_wp
163
- #: secure-wordpress.php:811
164
- msgid "WP Scanner"
165
- msgstr "WP Scanner"
166
-
167
- # @ secure_wp
168
- #: secure-wordpress.php:815
169
- msgid "WordPress scanner is a free online resource that blog administrators can use to provide a measure of their wordpress security level. To run wp-scanner check this option and is add <code>&lt;!-- wpscanner --&gt;</code> to your current WordPress template. After this go to <a href=\"http://blogsecurity.net/wpscan\">http://blogsecurity.net/wpscan</a> and scan your site."
170
- msgstr "Вордпрес скенер је бесплатан онлајн извор који блог администратори могу користити да оцене ниво сигурности Вордпреса. Да би користили wp-скенер провери ову опцију и додај <code><!-- wpscanner -->;</code> у свој садашњи Вордпрес темплет. После овога иди на <a href=\"http://blogsecurity.net/wpscan\">http://blogsecurity.net/wpscan</a> и скенирај свој сајт. "
171
-
172
- # @ secure_wp
173
- #: secure-wordpress.php:833
174
- msgid "Save Changes"
175
- msgstr "Сачувај промене"
176
-
177
- # @ secure_wp
178
- #: secure-wordpress.php:844
179
- msgid "Clear Options"
180
- msgstr "Избриши опције"
181
-
182
- # @ secure_wp
183
- #: secure-wordpress.php:847
184
- msgid "Click this button to delete settings of this plugin. Deactivating Secure WordPress plugin remove any data that may have been created."
185
- msgstr "Кликни тастатуру да избришеш подешавања овог плагина. Деактивирај сигурни Вордпрес плагин, одстрани сваки податак који је креиран"
186
-
187
- # @ secure_wp
188
- #: secure-wordpress.php:852
189
- msgid "Delete Options"
190
- msgstr "Избриши опције"
191
-
192
- # @ secure_wp
193
- #: secure-wordpress.php:864
194
- msgid "About the plugin"
195
- msgstr "О плагину"
196
-
197
- # @ secure_wp
198
- #: secure-wordpress.php:877
199
- msgid "Further information: Visit the <a href=\"http://bueltge.de/wordpress-login-sicherheit-plugin/652/\">plugin homepage</a> for further information or to grab the latest version of this plugin."
200
- msgstr "За даље информације: Посети <a href=\"http://bueltge.de/wordpress-login-sicherheit-plugin/652/\">почетну старну плагина</a> за даље информације или да набавиш последњу верзију овог плагина."
201
-
202
- # @ secure_wp
203
- #: secure-wordpress.php:877
204
- msgid "You want to thank me? Visit my <a href=\"http://bueltge.de/wunschliste/\">wishlist</a>."
205
- msgstr "Желиш да ми се захвалиш? Посети моју <a href=\"http://bueltge.de/wunschliste/\">листу жеља</a>."
206
-
207
- # @ secure_wp
208
- #: secure-wordpress.php:753
209
- msgid "creates an <code>index.php</code> file in <code>/plugins/</code> and <code>/themes/</code> to keep it from showing your directory listing"
210
- msgstr "ствара <code>index.php</code> фајл у <code>/плагину/</code> и <code>/сам/</code> да би спречио приказивање твог каталога"
211
-
212
- # @ secure_wp
213
- #: secure-wordpress.php:739
214
- msgid "WordPress Version in Backend"
215
- msgstr "Вордпрес верзија је Backend "
216
-
217
- # @ secure_wp
218
- #: secure-wordpress.php:749
219
- msgid "index.php"
220
- msgstr "index.php"
221
-
222
- # @ secure_wp
223
- #: secure-wordpress.php:743
224
- msgid "Removes version of WordPress on admin-area for non-admins. Show WordPress version of your blog only to users with the rights to edit plugins."
225
- msgstr "Уклања верзију Вордпреса на admin-област за non-admins. Показује Вордпрес верзију твог блога само корисницима са правом да коригују плагин. "
226
-
227
- # @ secure_wp
228
- #: secure-wordpress.php:723
229
- msgid "Deactivates tooltip and error message at login of WordPress"
230
- msgstr "Деактивира tooltip и поруке са грашком на упису у Вордпрес"
231
-
232
- # @ secure_wp
233
- #: secure-wordpress.php:821
234
- msgid "Block bad queries"
235
- msgstr "Блокира лоша питања"
236
-
237
- # @ secure_wp
238
- #: secure-wordpress.php:825
239
- msgid "Protect WordPress against malicious URL requests, see more informations on the <a href=\"http://perishablepress.com/press/2009/12/22/protect-wordpress-against-malicious-url-requests/\" title=\"read this post\" >post from Jeff Starr</a>"
240
- msgstr "Заштити Вордпрес од злонамерних URL захтева, потражи више информација на <a href=\"http://perishablepress.com/press/2009/12/22/protect-wordpress-against-malicious-url-requests/\" title=\"прочитај овоај постt\" >post from Jeff Starr</a>"
241
-
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
readme.txt CHANGED
@@ -1,152 +1,161 @@
1
- === Secure WordPress ===
2
- Contributors: WebsiteDefender
3
- Author: WebsiteDefender
4
- Tags: secure, notice, hack, hacked, protection, version, security
5
- Requires at least: 2.6
6
- Tested up to: 3.2.1
7
- Stable tag: trunk
8
-
9
- WordPress Security Plugin
10
-
11
- == Description ==
12
- Secure WordPress beefs up the security of your WordPress installation by removing error information on login pages, adds index.html to plugin directories, hides the WordPress version and much more.
13
-
14
- 1. Removes error-information on login-page
15
- 1. Adds index.php plugin-directory (virtual)
16
- 1. Removes the wp-version, except in admin-area
17
- 1. Removes Really Simple Discovery
18
- 1. Removes Windows Live Writer
19
- 1. Removes core update information for non-admins
20
- 1. Removes plugin-update information for non-admins
21
- 1. Removes theme-update information for non-admins (only WP 2.8 and higher)
22
- 1. Hides wp-version in backend-dashboard for non-admins
23
- 1. Removes version on URLs from scripts and stylesheets only on frontend
24
- 1. Blocks any bad queries that could be harmful to your WordPress website
25
-
26
- = Requirements =
27
- * WordPress version 2.6 and higher (tested at 3.1)
28
- * PHP5 (tested with PHP Interpreter >= 5.2.9)
29
-
30
- = Localizations =
31
- Idea, first version and german translation by [Frank B&uuml;ltge](http://bueltge.de "bueltge.de"), Italian translation by [Gianni Diurno](http://gidibao.net/ "gidibao.net"), Polish translation by Michal Maciejewski, Belorussian file by [Fat Cow](http://www.fatcow.com/ "www.fatcow.com"), Ukrainian translation by [AzzePis](http://wordpress.co.ua/plugins/ "wordpress.co.ua/plugins/"), Russian language by [Dmitriy Donchenko](http://blogproblog.com/ "blogproblog.com"), Hungarian language files by [K&ouml;rmendi P&eacute;ter](http://www.seo-hungary.com/ "www.seo-hungary.com"), Danish language files by [GeorgWP](http://wordpress.blogos.dk/s%C3%B8g-efter-downloads/?did=175 "S&oslash;g efter downloads")m Spanish language files by [Pablo Jim&eacute;nez](http://www.ministeriosccc.org "www.ministeriosccc.org"), Chinese language (zh_CN) by [tanghaiwei](http://dd54.net), French translation files by [Jez007](http://forum.gmstemple.com/ "forum.gmstemple.com"), Japanese translation by [Fumito Mizuno](http://ounziw.com/ "Standing on the Shoulder of Linus"), Dutch translation by [Rene](http://wpwebshop.com "wpwebshop.com"), Persian language files by [ALiRezaCH](http://alirezach.co.cc), Romanian translation by [ Selco Resita]( http://www.selco-computers.ro "selco-computers.ro") and Arabic language files by [مدونة](http://www.r-sn.com/wp), Turkish translation by [Nightmare17] (http://sanalespri.com). WebsiteDefender would like to thank everyone that worked on making Secure WordPress a success.
32
-
33
- == Installation ==
34
- 1. Make a backup of your current installation
35
- 1. Unpack the download-package
36
- 1. Upload the extracted files to the /wp-content/plugins/ directory
37
- 1. Configure the desired options and activate the plugin from the 'Plugins' menu in WordPress
38
-
39
- If you do encounter any bugs, or have comments or suggestions, please contact the WebsiteDefender team on support@websitedefender.com
40
-
41
- == Screenshots ==
42
- 1. options-area (WordPress 3.1)
43
-
44
-
45
- == Other Notes ==
46
- = License =
47
- Good news, this plugin is free for everyone! Since it's released under the GPL, you can use it free of charge on your personal or commercial blog.
48
-
49
- = Translations =
50
- The plugin comes with various translations, please refer to the [WordPress Codex](http://codex.wordpress.org/Installing_WordPress_in_Your_Language "Installing WordPress in Your Language") for more information about activating the translation. If you want to help to translate the plugin to your language, please have a look at the .pot file which contains all defintions and may be used with a [gettext](http://www.gnu.org/software/gettext/) editor like [Poedit](http://www.poedit.net/) or the very fine plugin [CodeStyling Localization](http://www.code-styling.de/english/development/wordpress-plugin-codestyling-localization-en "Codestyling Localization") for WordPresss.
51
-
52
-
53
- == Changelog ==
54
-
55
- = v2.0.4 =
56
- * Feature: The WebsiteDefender RSS widget added to the admin dashboard
57
- * Update: The plug-in has been made compatible with WP Security Scan and WebsiteDefender WordPress Security
58
- * Feature: Turkish language files added.
59
-
60
- = v2.0.3 (07/21/2011) =
61
- * Bugfix: The import of external resources has been fixed.
62
-
63
- = v2.0.2 (07/20/2011) =
64
- * Bugfix: Updated the links to websitedefender.com
65
-
66
- = v2.0.1 (07/20/2011) =
67
- * Update: Major code cleanup
68
- * Update: Updated the class that handles the authentication/registration with WebsiteDefender.com in order to avoid code collision when both plug-ins are active.
69
- * New: Dependent files (.css/.js/.php) have been added
70
-
71
- = v2.0.0 (03/22/2011) =
72
- * Feature: Release new stable version
73
- * Feature: Support for WordPress 3.1
74
- * Feature: Change owner of the plugin to WebsiteDefender
75
- * Feature: Re-branding of the plugin
76
- * Feature: Integrated WebsiteDefender registration in Settings
77
-
78
- = v1.0.6 (11/15/2010) =
79
- * Bugfix: change from `public` to `var` for variables to use the plugin on PHP5.2 and smaller
80
-
81
- = v1.0.5 (11/10/2010) =
82
- * Feature: Remove WordPress version on urls form scripts and stylesheets
83
- * Maintenance: rescan and update german language file
84
- * Remove: exclude to add string fpr wp-scanner-service; Wish of the community users
85
-
86
- = v1.0.4 (10/09/2010 =
87
- * Bugfix: update options
88
-
89
- = v1.0.3 (10/06/2010) =
90
- * Bugfix: include JS for remove version in backend for Non-Admins
91
- * Bugfix: change for php-warning at update options
92
- * Maintenance: update italien language files
93
- * Maintenance: update german language files
94
- * Maintenance: update pot file
95
-
96
- = v1.0.2 (09/10/2010) =
97
- * add persian language file
98
- * change the backend; remove WP Scanner function
99
- * change the include of javascript for metaboxes
100
-
101
- = v1.0.1 (08/06/2010) =
102
- * add more hooks to remove WordPress Version; was change with WP3.0
103
-
104
- = v1.0 (07/09/2010) =
105
- * relese stable version
106
- * small changes on the source
107
- * change owner of the plugin
108
-
109
- = v0.8.6 (06/18/2010) =
110
- * fix a problem with https://; see [Ticket #13941](http://core.trac.wordpress.org/ticket/13941)
111
-
112
- = v0.8.5 (05/16/2010) =
113
- * small code changes for WP coding standards
114
- * add free malware and vulnerabilities scan for test this; the scan has most interested informations and scan all of the server
115
-
116
- = v0.8.4 (05/05/2010) =
117
- * add methode for use the plugin also on ssl-installs
118
- * change uninstall method
119
-
120
- = v0.8.3 (04/14/2010) =
121
- * bugfix fox secure block bad queries on string for case-insensitive
122
-
123
- = v0.8.2 (03/21/2010) =
124
- * fix syntax error on ask for rights to block bad queries
125
- * add french language files
126
-
127
- = v0.8.1 (03/08/2010) =
128
- * remove versions-informations on backend with javascript
129
- * small changes
130
-
131
- = v0.8 (03/04/2010) =
132
- * Protect WordPress against malicious URL requests, use the idea and script from Jeff Star, [see post](http://perishablepress.com/press/2009/12/22/protect-wordpress-against-malicious-url-requests/ "Protect WordPress Against Malicious URL Requests")
133
-
134
- = v0.7 (03/01/2010) =
135
- * add updates for WP 3.0
136
-
137
- = v0.6 (01/11/2010) =
138
- * fix for core update under WP 2.9
139
- * fix language file de_DE
140
-
141
- = v0.5 (12/22/2009) =
142
- * small fix for use WP and the plugin with SSL `https`
143
-
144
- = v0.4 (12/02/2009) =
145
- * add new feature: hide version for smaller right as admin
146
-
147
- = v0.3.9 (09/07/2009) =
148
- * change index.html in index.php for better works
149
-
150
- = v0.3.8 (06/22/2009) =
151
- * add function to remove theme-update information for non-admins
152
- * rescan language file; edit de_DE
 
 
 
 
 
 
 
 
 
1
+ === Secure WordPress ===
2
+ Contributors: WebsiteDefender
3
+ Author: WebsiteDefender
4
+ Tags: secure, notice, hack, hacked, protection, version, security
5
+ Requires at least: 3.0
6
+ Tested up to: 3.2.1
7
+ Stable tag: trunk
8
+
9
+ WordPress Security Plugin
10
+
11
+ == Description ==
12
+ Secure WordPress beefs up the security of your WordPress installation by removing error information on login pages, adds index.html to plugin directories, hides the WordPress version and much more.
13
+
14
+ 1. Removes error-information on login-page
15
+ 1. Adds index.php plugin-directory (virtual)
16
+ 1. Removes the wp-version, except in admin-area
17
+ 1. Removes Really Simple Discovery
18
+ 1. Removes Windows Live Writer
19
+ 1. Removes core update information for non-admins
20
+ 1. Removes plugin-update information for non-admins
21
+ 1. Removes theme-update information for non-admins (only WP 2.8 and higher)
22
+ 1. Hides wp-version in backend-dashboard for non-admins
23
+ 1. Removes version on URLs from scripts and stylesheets only on frontend
24
+ 1. Blocks any bad queries that could be harmful to your WordPress website
25
+
26
+ = Requirements =
27
+ * WordPress version 3.0 and higher (tested at 3.1)
28
+ * PHP5 (tested with PHP Interpreter >= 5.2.9)
29
+
30
+ = Localizations =
31
+ Idea, first version and german translation by [Frank B&uuml;ltge](http://bueltge.de "bueltge.de"), Italian translation by [Gianni Diurno](http://gidibao.net/ "gidibao.net"), Polish translation by Michal Maciejewski, Belorussian file by [Fat Cow](http://www.fatcow.com/ "www.fatcow.com"), Ukrainian translation by [AzzePis](http://wordpress.co.ua/plugins/ "wordpress.co.ua/plugins/"), Russian language by [Dmitriy Donchenko](http://blogproblog.com/ "blogproblog.com"), Hungarian language files by [K&ouml;rmendi P&eacute;ter](http://www.seo-hungary.com/ "www.seo-hungary.com"), Danish language files by [GeorgWP](http://wordpress.blogos.dk/s%C3%B8g-efter-downloads/?did=175 "S&oslash;g efter downloads")m Spanish language files by [Pablo Jim&eacute;nez](http://www.ministeriosccc.org "www.ministeriosccc.org"), Chinese language (zh_CN) by [tanghaiwei](http://dd54.net), French translation files by [Jez007](http://forum.gmstemple.com/ "forum.gmstemple.com"), Japanese translation by [Fumito Mizuno](http://ounziw.com/ "Standing on the Shoulder of Linus"), Dutch translation by [Rene](http://wpwebshop.com "wpwebshop.com"), Persian language files by [ALiRezaCH](http://alirezach.co.cc), Romanian translation by [ Selco Resita]( http://www.selco-computers.ro "selco-computers.ro") and Arabic language files by [مدونة](http://www.r-sn.com/wp), Turkish translation by [Nightmare17] (http://sanalespri.com). WebsiteDefender would like to thank everyone that worked on making Secure WordPress a success.
32
+
33
+ == Installation ==
34
+ 1. Make a backup of your current installation
35
+ 1. Unpack the download-package
36
+ 1. Upload the extracted files to the /wp-content/plugins/ directory
37
+ 1. Configure the desired options and activate the plugin from the 'Plugins' menu in WordPress
38
+
39
+ If you do encounter any bugs, or have comments or suggestions, please contact the WebsiteDefender team on support@websitedefender.com
40
+
41
+ == Screenshots ==
42
+ 1. options-area (WordPress 3.1)
43
+
44
+
45
+ == Other Notes ==
46
+ = License =
47
+ Good news, this plugin is free for everyone! Since it's released under the GPL, you can use it free of charge on your personal or commercial blog.
48
+
49
+ = Translations =
50
+ The plugin comes with various translations, please refer to the [WordPress Codex](http://codex.wordpress.org/Installing_WordPress_in_Your_Language "Installing WordPress in Your Language") for more information about activating the translation. If you want to help to translate the plugin to your language, please have a look at the .pot file which contains all defintions and may be used with a [gettext](http://www.gnu.org/software/gettext/) editor like [Poedit](http://www.poedit.net/) or the very fine plugin [CodeStyling Localization](http://www.code-styling.de/english/development/wordpress-plugin-codestyling-localization-en "Codestyling Localization") for WordPresss.
51
+
52
+
53
+ == Changelog ==
54
+
55
+ = v2.0.6 =
56
+ * New setting: Option to open / close WebsiteDefender dashboard widget
57
+ * Update: Internal code updates
58
+
59
+ = v2.0.5 =
60
+ * BugFix: The bug reported about ALTER rights retrieval has been addressed
61
+ * Update: Code cleanup
62
+ * Update: Minor internal updates
63
+
64
+ = v2.0.4 =
65
+ * Feature: The WebsiteDefender RSS widget added to the admin dashboard
66
+ * Update: The plug-in has been made compatible with WP Security Scan and WebsiteDefender WordPress Security
67
+ * Feature: Turkish language files added.
68
+
69
+ = v2.0.3 (07/21/2011) =
70
+ * Bugfix: The import of external resources has been fixed.
71
+
72
+ = v2.0.2 (07/20/2011) =
73
+ * Bugfix: Updated the links to websitedefender.com
74
+
75
+ = v2.0.1 (07/20/2011) =
76
+ * Update: Major code cleanup
77
+ * Update: Updated the class that handles the authentication/registration with WebsiteDefender.com in order to avoid code collision when both plug-ins are active.
78
+ * New: Dependent files (.css/.js/.php) have been added
79
+
80
+ = v2.0.0 (03/22/2011) =
81
+ * Feature: Release new stable version
82
+ * Feature: Support for WordPress 3.1
83
+ * Feature: Change owner of the plugin to WebsiteDefender
84
+ * Feature: Re-branding of the plugin
85
+ * Feature: Integrated WebsiteDefender registration in Settings
86
+
87
+ = v1.0.6 (11/15/2010) =
88
+ * Bugfix: change from `public` to `var` for variables to use the plugin on PHP5.2 and smaller
89
+
90
+ = v1.0.5 (11/10/2010) =
91
+ * Feature: Remove WordPress version on urls form scripts and stylesheets
92
+ * Maintenance: rescan and update german language file
93
+ * Remove: exclude to add string fpr wp-scanner-service; Wish of the community users
94
+
95
+ = v1.0.4 (10/09/2010 =
96
+ * Bugfix: update options
97
+
98
+ = v1.0.3 (10/06/2010) =
99
+ * Bugfix: include JS for remove version in backend for Non-Admins
100
+ * Bugfix: change for php-warning at update options
101
+ * Maintenance: update italien language files
102
+ * Maintenance: update german language files
103
+ * Maintenance: update pot file
104
+
105
+ = v1.0.2 (09/10/2010) =
106
+ * add persian language file
107
+ * change the backend; remove WP Scanner function
108
+ * change the include of javascript for metaboxes
109
+
110
+ = v1.0.1 (08/06/2010) =
111
+ * add more hooks to remove WordPress Version; was change with WP3.0
112
+
113
+ = v1.0 (07/09/2010) =
114
+ * relese stable version
115
+ * small changes on the source
116
+ * change owner of the plugin
117
+
118
+ = v0.8.6 (06/18/2010) =
119
+ * fix a problem with https://; see [Ticket #13941](http://core.trac.wordpress.org/ticket/13941)
120
+
121
+ = v0.8.5 (05/16/2010) =
122
+ * small code changes for WP coding standards
123
+ * add free malware and vulnerabilities scan for test this; the scan has most interested informations and scan all of the server
124
+
125
+ = v0.8.4 (05/05/2010) =
126
+ * add methode for use the plugin also on ssl-installs
127
+ * change uninstall method
128
+
129
+ = v0.8.3 (04/14/2010) =
130
+ * bugfix fox secure block bad queries on string for case-insensitive
131
+
132
+ = v0.8.2 (03/21/2010) =
133
+ * fix syntax error on ask for rights to block bad queries
134
+ * add french language files
135
+
136
+ = v0.8.1 (03/08/2010) =
137
+ * remove versions-informations on backend with javascript
138
+ * small changes
139
+
140
+ = v0.8 (03/04/2010) =
141
+ * Protect WordPress against malicious URL requests, use the idea and script from Jeff Star, [see post](http://perishablepress.com/press/2009/12/22/protect-wordpress-against-malicious-url-requests/ "Protect WordPress Against Malicious URL Requests")
142
+
143
+ = v0.7 (03/01/2010) =
144
+ * add updates for WP 3.0
145
+
146
+ = v0.6 (01/11/2010) =
147
+ * fix for core update under WP 2.9
148
+ * fix language file de_DE
149
+
150
+ = v0.5 (12/22/2009) =
151
+ * small fix for use WP and the plugin with SSL `https`
152
+
153
+ = v0.4 (12/02/2009) =
154
+ * add new feature: hide version for smaller right as admin
155
+
156
+ = v0.3.9 (09/07/2009) =
157
+ * change index.html in index.php for better works
158
+
159
+ = v0.3.8 (06/22/2009) =
160
+ * add function to remove theme-update information for non-admins
161
+ * rescan language file; edit de_DE
secure-wordpress.php CHANGED
@@ -6,7 +6,7 @@
6
  * Domain Path: /languages
7
  * Description: Basic security checks for securing your WordPress installation
8
  * Author: WebsiteDefender
9
- * Version: 2.0.4
10
  * Author URI: http://www.websitedefender.com/
11
  * License: GPL
12
  */
@@ -14,6 +14,9 @@
14
  * rev #1: 07/16/2011 {c}
15
  * rev #2: 07/26/2011 {c}
16
  * rev #3: 08/26/2011 {c}
 
 
 
17
  */
18
 
19
  global $wp_version;
@@ -28,7 +31,6 @@ if ( !function_exists ('add_action') || version_compare($wp_version, "2.6alpha",
28
  }
29
  exit($exit_msg);
30
  }
31
-
32
  /**
33
  * Displayed for the menu item in te admin menu
34
  * Images/ Icons in base64-encoding
@@ -78,7 +80,6 @@ if ( isset($_GET['resource']) && !empty($_GET['resource']) ) {
78
  }
79
 
80
 
81
-
82
  /* $rev #1, #2 {c} */
83
  if (!function_exists('json_encode') || !class_exists('Services_JSON'))
84
  {
@@ -118,7 +119,7 @@ $swwsd = new swWSD();
118
 
119
 
120
  if ( !class_exists('SecureWP') ){
121
-
122
  if (function_exists ('add_action'))
123
  {
124
  // Pre-2.6 compatibility
@@ -297,7 +298,7 @@ if ( !class_exists('SecureWP') ){
297
  $url = $_SERVER['REQUEST_URI'];
298
  if (stristr($url, 'secure-wordpress'))
299
  {
300
- /*$rev #1 07/15/2011 {c}$*/
301
  $h1 = 'wsd_sw-styles'; $h2 = 'acx-json'; $h3 = 'acx-md5'; $h4 = 'wsd_sw_wsd'; $h5 = 'wsd_sw_scripts';
302
  wp_register_style($h1, $this->get_plugins_url('css/wsd_sw_styles.css', __FILE__));
303
  wp_register_script($h2, $this->get_plugins_url('js/json.js', __FILE__));
@@ -310,6 +311,11 @@ if ( !class_exists('SecureWP') ){
310
  wp_enqueue_script($h4);
311
  wp_enqueue_script($h5);
312
  }
 
 
 
 
 
313
  }
314
  /* End if admin*/
315
 
@@ -392,7 +398,7 @@ if ( !class_exists('SecureWP') ){
392
  }
393
 
394
  /**
395
- * unpdate options
396
  *
397
  * @package Secure WordPress
398
  */
@@ -410,6 +416,14 @@ if ( !class_exists('SecureWP') ){
410
  if ($update_options) {
411
  $GLOBALS['WPlize']->update_option($update_options);
412
  }
 
 
 
 
 
 
 
 
413
  }
414
 
415
  /**
@@ -548,7 +562,7 @@ if ( !class_exists('SecureWP') ){
548
  {
549
  if( basename($_SERVER['QUERY_STRING']) == 'page=secure-wordpress.php') {
550
  $plugin_data = get_plugin_data( __FILE__ );
551
- printf('%1$s plugin | ' . __('Version') . ' <a href="http://wordpress.org/extend/plugins/secure-wordpress/changelog/" target="_blank" title="' . __('History', FB_SWP_TEXTDOMAIN) . '">%2$s</a> | ' . __('Author') . ' %3$s<br />', $plugin_data['Title'], $plugin_data['Version'], $plugin_data['Author']);
552
  }
553
  }
554
 
@@ -983,6 +997,29 @@ if ( !class_exists('SecureWP') ){
983
  </td>
984
  </tr>
985
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
986
  </table>
987
 
988
  <p class="submit">
@@ -997,8 +1034,8 @@ if ( !class_exists('SecureWP') ){
997
 
998
  <div id="poststuff" class="ui-sortable meta-box-sortables poststuff">
999
  <div id="secure_wp_win_opt" class="postbox <?php echo $secure_wp_win_opt ?>" >
1000
- <div class="handlediv" title="<?php _e('Click to toggle'); ?>"><br/></div>
1001
- <h3>About WebsiteDefender.com</h3>
1002
  <div class="inside">
1003
  <?php
1004
  /*
@@ -1055,7 +1092,7 @@ if ( !class_exists('SecureWP') ){
1055
 
1056
  }
1057
  /* End if (!class_exists('SecureWP')) */
1058
-
1059
 
1060
  if ( class_exists('WPlize') && function_exists('is_admin') ) {
1061
  $SecureWP = new SecureWP();
6
  * Domain Path: /languages
7
  * Description: Basic security checks for securing your WordPress installation
8
  * Author: WebsiteDefender
9
+ * Version: 2.0.6
10
  * Author URI: http://www.websitedefender.com/
11
  * License: GPL
12
  */
14
  * rev #1: 07/16/2011 {c}
15
  * rev #2: 07/26/2011 {c}
16
  * rev #3: 08/26/2011 {c}
17
+ * rev #4: 09/12/2011 {c}
18
+ * rev #5: 09/20/2011 {c}
19
+ * rev #6: 09/30/2011 {c}
20
  */
21
 
22
  global $wp_version;
31
  }
32
  exit($exit_msg);
33
  }
 
34
  /**
35
  * Displayed for the menu item in te admin menu
36
  * Images/ Icons in base64-encoding
80
  }
81
 
82
 
 
83
  /* $rev #1, #2 {c} */
84
  if (!function_exists('json_encode') || !class_exists('Services_JSON'))
85
  {
119
 
120
 
121
  if ( !class_exists('SecureWP') ){
122
+
123
  if (function_exists ('add_action'))
124
  {
125
  // Pre-2.6 compatibility
298
  $url = $_SERVER['REQUEST_URI'];
299
  if (stristr($url, 'secure-wordpress'))
300
  {
301
+ /* $rev #1 07/15/2011 {c}$ */
302
  $h1 = 'wsd_sw-styles'; $h2 = 'acx-json'; $h3 = 'acx-md5'; $h4 = 'wsd_sw_wsd'; $h5 = 'wsd_sw_scripts';
303
  wp_register_style($h1, $this->get_plugins_url('css/wsd_sw_styles.css', __FILE__));
304
  wp_register_script($h2, $this->get_plugins_url('js/json.js', __FILE__));
311
  wp_enqueue_script($h4);
312
  wp_enqueue_script($h5);
313
  }
314
+ /* $rev #2 09/12/2011 {c}$ */
315
+ $h6 = 'swp-dashboard';
316
+ wp_register_style($h6, $this->get_plugins_url('css/acx-wp-dashboard.css', __FILE__));
317
+ wp_enqueue_style($h6);
318
+
319
  }
320
  /* End if admin*/
321
 
398
  }
399
 
400
  /**
401
+ * update options
402
  *
403
  * @package Secure WordPress
404
  */
416
  if ($update_options) {
417
  $GLOBALS['WPlize']->update_option($update_options);
418
  }
419
+
420
+ // update 10/04/2011
421
+ if($_POST['show_rss_widget'] == 'on'){
422
+ update_option('WSD-RSS-WGT-DISPLAY', 'yes');
423
+ }
424
+ else {
425
+ update_option('WSD-RSS-WGT-DISPLAY', 'no');
426
+ }
427
  }
428
 
429
  /**
562
  {
563
  if( basename($_SERVER['QUERY_STRING']) == 'page=secure-wordpress.php') {
564
  $plugin_data = get_plugin_data( __FILE__ );
565
+ printf('%1$s plugin | ' . __('Version', FB_SWP_TEXTDOMAIN) . ' <a href="http://wordpress.org/extend/plugins/secure-wordpress/changelog/" target="_blank" title="' . __('History', FB_SWP_TEXTDOMAIN) . '">%2$s</a> | ' . __('Author', FB_SWP_TEXTDOMAIN) . ' %3$s<br />', $plugin_data['Title'], $plugin_data['Version'], $plugin_data['Author']);
566
  }
567
  }
568
 
997
  </td>
998
  </tr>
999
 
1000
+ <?php
1001
+ //# 10/04/2011
1002
+ $_checked = false;
1003
+ $wsdRssWidgetVisible = get_option('WSD-RSS-WGT-DISPLAY');
1004
+ if (empty($wsdRssWidgetVisible) || $wsdRssWidgetVisible=='yes') {
1005
+ add_option('WSD-RSS-WGT-DISPLAY', 'yes');
1006
+ $_checked = true;
1007
+ }
1008
+ else {
1009
+ if (strtolower($wsdRssWidgetVisible) == 'no') {
1010
+ $_checked = false;
1011
+ }
1012
+ }
1013
+ ?>
1014
+ <tr valign="top">
1015
+ <th scope="row">
1016
+ <label for="show_rss_widget"><?php _e('Dashboard RSS widget', FB_SWP_TEXTDOMAIN); ?></label>
1017
+ </th>
1018
+ <td>
1019
+ <input type="checkbox" name="show_rss_widget" id="show_rss_widget" <?php echo ($_checked ? 'checked="checked"' : '');?> />
1020
+ <label for="show_rss_widget"><?php _e("Show the WebsiteDefender News dashboard widget", FB_SWP_TEXTDOMAIN);?></label>
1021
+ </td>
1022
+ </tr>
1023
  </table>
1024
 
1025
  <p class="submit">
1034
 
1035
  <div id="poststuff" class="ui-sortable meta-box-sortables poststuff">
1036
  <div id="secure_wp_win_opt" class="postbox <?php echo $secure_wp_win_opt ?>" >
1037
+ <div class="handlediv" title="<?php _e('Click to toggle', FB_SWP_TEXTDOMAIN); ?>"><br/></div>
1038
+ <h3><?php _e("About WebsiteDefender.com", FB_SWP_TEXTDOMAIN);?></h3>
1039
  <div class="inside">
1040
  <?php
1041
  /*
1092
 
1093
  }
1094
  /* End if (!class_exists('SecureWP')) */
1095
+
1096
 
1097
  if ( class_exists('WPlize') && function_exists('is_admin') ) {
1098
  $SecureWP = new SecureWP();
uninstall.php CHANGED
@@ -1,10 +1,12 @@
1
- <?php
2
- if( !defined( 'ABSPATH') && !defined('WP_UNINSTALL_PLUGIN') )
3
- exit();
4
-
5
- delete_option('WSD-COOKIE');
6
- delete_option('WSD-TOKEN');
7
- delete_option('WSD-TARGETID');
8
- delete_option('WSD-USER');
9
- delete_option('secure-wp');
10
- delete_option('wsd_feed_data');
 
 
1
+ <?php if( !defined( 'ABSPATH') && !defined('WP_UNINSTALL_PLUGIN') ) { exit(); }
2
+ /*
3
+ * Delete options
4
+ */
5
+ delete_option('secure-wp');
6
+
7
+ // this is a shared option so if there are
8
+ // any other plug-ins installed, then don't
9
+ // delete it.
10
+ $__1 = ABSPATH.'wp-content/plugins/websitedefender-wordpress-security';
11
+ $__2 = ABSPATH.'wp-content/plugins/wp-security-scan';
12
+ if (!is_dir($__1) || !is_dir($__2)) { delete_option('wsd_feed_data'); }