Archive for the ‘[lang_de]Software[/lang_de][lang_en]Software[/lang_en]’ Category

Watch out: “Share this” plugin monitors your blog and your visitors

Alex Günsche · January 29, 2008

The popular “Share this” WordPress plugin monitors your blog and your visitors. Each time a visitor calls a page of your website containing the Share This widget, they will download a so-called webbug. It’s the image at the bottom of the Share This widget.

Although the unique identifier of the webbug is generated randomly (something like 775e8ba2-8ea3-48a9-a071-6ebdd986d676) on your blog at the first usage, the sharethis.com server (from which the image is loaded) is able to associate your site with this unique identifier by the HTTP referer a browser sends. Therefore, using similar techniques as e.g. Google Analytics, sharethis.com is able to see how many visitors you have and which of your pages they viewed. In my opinion, this is quite insolent, as it massively invades your and your visitors’ privacy.

How can you protect yourself from this? You need to modify the file share-this.php from the plugin. The easiest way is to simply delete line 702 (in “Share this classic”, v1.5.1) where the image code is generated:

<div id="akst_credit"><a href="http://sharethis.com"><img src="http://r.sharethis.com/powered-by?publisher=<?php print(get_option('st_pubid')); ?>" alt="Powered by ShareThis" /></a></div>

Another option would to beat sharethis.com at their own game: Replace (also in line 702) get_option('st_pubid') with ak_uuid() (their internal function to generate the unique identifier), thus messing up their database. ;) Just kidding — just remove the code as described.

Update: Looking a bit deeper into the plugin, I realized that it’s not only a webbug that the plugin loads, but also, each bookmarking is redirected to sharethis.com’s server! This means, whenever somebody clicks a bookmarking link, they are first sent to sharethis.com’s server and then redirected from there. You can overcome this, too, by a little modification: Change line 304 of share-this.php (in “Share this classic”, v1.5.1) to return base; — then you and your visitors are taken to the bookmarking service directly.

Update 2: More occurences of the offending technique are on the page which Share This displays when JavaScript is deactivated. Again, each bookmark link redirects to sharethis.com first, and the image in the footer is a webbug. To disable these items, change line 1132 in share-this.php to print('<li><a href="'.$link.'" id="akst_'.$key.'">'.$data['name'].'</a></li>'."\n"); and remove the footer (some lines deeper).

AfLinks-Plugin: Affiliate-Daten in WordPress-Beiträgen

Alex Günsche · January 16, 2008

Auf contutto.com gibt es jetzt das AfLinks-Plugin. Das AfLinks-Plugin versieht den Content von WordPress-Beiträgen mit Affiliate-Links, d.h. bestimmte Schlagworte im WP-Beitrag werden mit Werbung versehen. Fährt man mit der Maus über einen solchen Link, erscheint eine kleine Vorschau mit Bild und Beschreibung. Die Links werden von der Software entweder vollautomatisch erzeugt, oder man kann Produkte über eine zus. Suchmaske im WP-Editor auswählen und manuell verlinken.

Die Affiliate-Daten stammen aus dem Account des jeweiligen Webmasters bei Affili.net. Der Import erfolgt halbautomatisch über ein Script, er kann auch per Cronjob vollautomatisiert werden.

Vor allem interessant dürfte dieses Plugin für die Betreiber von Artikelkatalogen sein, die damit den betreuten Content besser kommerziell verwerten können. Aber auch für andere Webmaster, die etwa dezente Werbeformen suchen oder vielleicht nicht viel Platz für Banner haben, ist dieses Tool geeignet.

Das AfLinks-Plugin ist OpenSource (GNU GPL) und kann kostenlos von der Contutto-Website heruntergeladen werden. Demo und Doku sind ebenfalls vorhanden.

Codelog theme released

Alex Günsche · December 19, 2007

Usually, plugins are my business, but now I’ve also released a WordPress theme. Of course, it’s not the first WordPress theme I’ve developed, but it’s the first that I have revised to release it as generic theme. More information and download at codelog.net.

Advanced Search 2.0 (really!)

Alex Günsche · November 14, 2007

Unbelievable – it took more than one year from version 0.1 to the 1.0, which we released yesterday. But I have dedicated the last 24 hours to proceed coding on the Advanced Search, and so much has been changed that a jump to 2.0 seems justified – even if only a single day has passed since the last major release.

What exactly has been changed? Well, I was working on the upgrade of Advanced Search Lite which was actually a quick’n'dirty ripoff from Advanced Search. I started again to rip the code from the new AS to make the new AS Lite, when I realised I could as well merge them and have two plugins in one. For me this would mean less duplicate code to care after, for the user it means that they have more choice along with a slimer code base.

And so I merged Advanced Search and Advanced Search into one plugin download. They appear in the Plugin panel as two separate plugins. One can use either one or the other or even both at the same time. Also, there were even more features added: Blog visitors can now switch between searching strings or words(!), WP’s internal search can be transparently replaced with the FULLTEXT (i.e. word) search, and Advanced Search Lite can now also be used as a widget.

What do you think, is a 2.0 ok for this? I definitely think so, and I even dare to say that this is the bestest search plugin for WordPress evar, which everybody should have on their blogs. You heard me! ;-)

So, what are you waiting for? Visit the Advanced Search page, download it and enjoy searching 2.0 (no beta!).

Advanced Search 1.0

Alex Günsche · November 13, 2007

Good news everybody! I’m happy to announce Advanced Search version 1.0! Not only is this version finally compatible with WordPress 2.3.x, but it also has been profoundly revised and cleaned up, a good number of bugs have been fixed, and it has a couple of shiny new features.

The most interesting feature is that you can now use the search form in a truly modular fashion without digging in the code: In the new config file settings.php, you can turn each section on or off. For example, if you have many categories and you don’t want people bothering with switching categories (not to talk of long loading times), you can simply turn this section off.

So, grab the new version and install it. And: don’t forget to spread the word! (Many people have requested a new version, not all are subscribed to this blog.)

Unfortunately, there are bad news, too: As a side effect of the cleanup, the plugin doesn’t work with the legacy series 2.0.x of WordPress anymore (on which this site runs, too). But version 0.6 should still do the job for us, and it will stay available for download.

By the way, the new version of Advanced Search Lite is in the making.

Update: Within a mere day, there was a version jump to 2.0!

About plugins

Alex Günsche · October 27, 2007

Dear users of my plugins,

I know I haven’t updated my plugins for a while, even though some of them desperately need updates and although I have some very cool features on my TODO list. The reason is that I’m currently involved in a very big project, and this one really consumes pretty much all of my time and coding energy. That project will be finished by mid of November, and I promise that I will then start working on my plugins again and release a bunch of new versions. I hope you understand that, and I hope you’ll have some more patience. Thank you very much (in advance)!

By the way, my site seems to have a PR of 6 now, and I owe it all to the nice people who are writing nice comments about my plugins on their blogs. Thank you very much (again)! :)

ContactNG 0.1 – final release

Alex Günsche · July 16, 2007

ContactNG is a new generation of contact forms. You can display it in the sidebar or on a page. There are different skins which can be selected via the admin panel. Furthermore, the plugin features some intelligent antispam techniques. Tutorial, further information and downloads are available via the plugin’s homepage. Have fun! Feedback and improvement ideas are as always very welcome.

Pre-release of contactNG

Alex Günsche · June 26, 2007

The contactNG plugin was pre-released today with an announcement in the Plugin Competition Blog.

I will work on the plugin a bit more in the next days and enhance the features based on the feedback.

Please download the plugin, install it, and let me know what you think.

InstantUpgrade 1.0-alpha1 — testers needed!

Alex Günsche · May 30, 2007

The InstantUpgrade plugin has gained very much attention and positive feedback during the last weeks. Now it’s time for a new era: I’ve created a version of the plugin that will make the installation and usage significantly easier. While with 0.x versions it was neccessary to change tons of permissions on most hosts, the new version offers file transfer via FTP with the users credentials, so no permissions must be changed at all!

However, the new features, especially the FTP transfer, need very much testing before we can release it to the general public. Therefore I’d ask everybody to install the new version in their test environments and review the plugin extensively. Note: Please don’t use this version in productive environments yet.

Usage is as follows:

  • Download it (.tar.gz, .tar.bz2 .zip, .7z)
  • Upload instantupgrade to your plugin directory
  • Activate it
  • Go to InstantUpgrade » InstantUpgrade Configuration
  • Select FTP as method (HTTP can also be used, installation/usage same as earlier versions)
  • Enter FTP credentials
  • Go to InstantUpgrade
  • Select version (latest or arbitrary)
  • Start upgrade

If you encounter errors during the installation which you think are errors of the plugin, please report them. After installation, please check your WordPress installation, and if you notice errors, please report them, too.

You can report bugs as comments below this post (please not at the plugin’s home page), or you can use our bugtracker. Any notice of what could be improved is welcome, same goes for questions, feature requests, etc. Please do also provide information about your testing environment.

Everybody who provides substantial feedback will be named (w/ link) in the final release announcement, so I hope you all get a piece of the fame. ;-)

Update (31.05, 14:28): The author of the FTP library, Alexey Dotsenko, has said he will put his work under the GNU LGPL. :-)

InstantUpgrade und WP 2.2/2.3

Alex Günsche · May 11, 2007

WordPress 2.2 is soon to be released, and WordPress 2.3 also approaches. As functionality keeps on changing, I decided to test the InstantUpgrade-Plugin with the new versions. Result: works fine — with WP 2.2-RC1 as well as with WP 2.3-alpha (SVN Rev. 5451).

By the way, I finished moving, and I’m back at work with full power.