WordPress Hacking and Cleanup

There’s a brute force attack underway on a global scale. Massive. The attack vector? Keep attempting user/pass combos in an automated way until a breakin happens.

If your WordPress site gets hacked, I am available for cleanup and an audit.


It absolutely will cost you a minor fortune. That’s the way it goes. Don’t complain or whine, just get your credit card out.

It would be cheaper to have a strong password and install a plugin that limits failed login attempts though.

But if you don’t, rest assured I can help you despite you having to postpone a vacation in St. Thomas.

Do the right thing.

Abusing Twitter Direct Messages, Spam and Classlessness

This morning I received a Twitter direct message from the official account for I hate JJ Reddick, one of the best Baltimore sports blogs I know of. I like these guys. I read the blog almost every day and follow many of the writers on Twitter. I live in Baltimore, or as we call it… “Smalltimore”. It’s a small town. You get to know people. You run into them all the time.

(To be fair, I have yet to personally meet any of them, but it’s only a matter of time. Most of the writers are one degree of separation away.)

As a Ravens fan, I am on board with them. I’m a fan. But I’m also a Red Sox fan, which makes for some good-natured rivalry with Orioles coverage. I’m not above a good-natured rivalry and it’s all in fun anyway. Or it’s supposed to be.

The Direct Message was simply:

Can you help me tweet out this link of Machado’s homer from last night? Appreciate it! http://ihatejjr.com/content/manny-machados-game-winning-homer-boston-last-night-was-glorious-gif

There are several things wrong with this DM.

For starters, on the superficial level, I’m a Red Sox fan. Machado’s homerun came against the Red Sox and it proved to be the game winner in the top of the 9th inning. My bio on Twitter is:

Author / Former Austinite / WordPress Developer / Football Fan / Ravens, Red Sox, Longhorns, Terps / Equality and Justice for All

Cut and dry. I label myself as a Sox fan. I tweet about the Sox. It’s obvious I’m a Sox fan. So when asked to spread a link that I don’t like, for fan reasons, I say no.

The second problem with this DM is the abuse angle. It’s a much more fundamental problem than simply a fan rivalry. Whoever sent this DM clearly didn’t know his audience, and it becomes painfully obvious that the account was simply sending a mass DM to all followers for the purpose of driving more traffic to the article. The article is written by a Bernaldo, who I don’t know and am not familiar with. For the sake of not making unnecessary accusations, I’m going to assume he was not the one behind the DM.

This tactic of mass DMming is frowned upon almost universally. The fact that it was to drive traffic, which is directly proportional to ad impressions, makes it spam. This is a much bigger issue than just a fan rivalry.

So I sent this response:

No. I’m a Red Sox fan. Please don’t abuse DM like this… ;)

Note the winky face, the international sign for… “Imma let you finish. I’m not mad, bro”

I also said, ‘Please’.

Within minutes, I receive another DM:

You’re a fucking loser just like your baseball team. Blocked.

And Orioles fans call Red Sox fans classless.

This is a small town. I’m surprised that any publication in this city would respond the way they have as, you know, word gets around. It’s just entirely inappropriate and unprofessional. No skin off my nose, really. However, when it’s pointed out that you made a mistake, complete with a ‘Please’ and winky face, I’d hope that most people would follow up with something more along the lines of: “Whoops. Sorry about that. Didn’t mean to spam you. Hope Machado does it again to your boys tonight”.

But hey, don’t let a little good-natured fan rivalry get in the way of a good money-making traffic push to 4500 of your closest friends?

Sublime 2 Power Tools

Sublime 2 - 4 Pane Grid View

This is a very advanced technical article.

For years, as a developer, I used the fantastic Textmate software for writing code. I got used to it. It’s a power editor for Mac OS X and has bundle support (think of bundles as extensions or plugins) that enhance the functionality of the software) for just about every technology, from Subversion to Git to a bunch of things I don’t use in a PHP environment like C/C++ mallloc (memory allocation), Python, Ruby, etc. It’s even got a WordPress bundle!

The problem with Textmate, however, is that active development is slow. Like, extremely slow. Like, molasses slow. After five years of using version 1.5x, an alpha version of 2.0 finally emerged last year. It’s still in alpha. Pace of development is still painfully slow, and what is in the 2.0 alpha version is not ground-breaking compared to what is in the current stable version.

Along came Sublime 2. This is, by far, my favorite text editor ever. I’ve been using it for about six months. It emulates virtually everything Textmate does. Textmate does snippets (think of them as macros). Sublime 2 also does snippets and supports the Textmate style. (Hint: If you’re a WordPress developer, my favorite – and still most commonly used – snippet comes from Mark Jaquith who wrote this snippet to create WordPress widgets on the fly. It works in both Textmate and Sublime 2).

The great thing about Sublime 2 is that it is truly a hacker’s paradise. All the config files are JSON objects, so if you can write JSON, you can configure Sublime 2. None of this namby pamby UI/click/select from dropdown bulldookie. Write your code and mean it. Related is that the master configuration file is extremely well documented and you can override everything in it, not by editing this file, but by providing new values in the user configuration file.

Ok, let’s back up and get y’all up to speed on what I do when configuring my Sublime 2 environment.

Config Files

First, I recommend you look at the entire Default configuration file. Read all the settings and comments and understand all the possibilities you have. Your most comfortable environment won’t be mine. For me, I see the following configuration settings that I’m going to want to override. Keep in mind, I never edit the default configuration file. It gets overwritten on upgrade.

To access this file, go to Preferences >  Settings – Default 1.

Note that I have included the related Sublime 2 default comments along with the settings I wish to override.

// While you can edit this file, it's best to put your changes in
// "User/Preferences.sublime-settings", which overrides the settings in here.
// Settings may also be placed in file type specific options files, for
// example, in Packages/Python/Python.sublime-settings for python files.
// Note that the font_face and font_size are overriden in the platform
// specific settings file, for example, "Preferences (Linux).sublime-settings".
// Because of this, setting them here will have no effect: you must set them
// in your User File Preferences.
"font_size": 10,

// OS X only: When files are opened from finder, or by dragging onto the
// dock icon, this controls if a new window is created or not.
"open_files_in_new_window": true,

// Characters that are considered to separate words
"word_separators": "./\\()\"':,.;-<>~!@#$%^&*|+=[]{}`~?",

// When drag_text is enabled, clicking on selected text will begin a
// drag-drop operation
"drag_text": true,

These settings and their related comments may seem self-explanatory, but in case they are not…

font_size: This setting controls the font size in the editor. Derp.

open_files_in_new_window: As a developer on an 11″ MacBook Air, I hate this setting. As the name suggests, everytime you open a file, it’s going to be in a separate window. This may be okay if you have a ton of screen real estate, but if you don’t… well, I like to have windows open up in a new tab of my editor so I can access them quickly and easily without consuming precious real estate.

word_separators: This is a list of characters that serve as word separators. I don’t mean code word separators. We’re talking about in the editor. I want to be able to click a CSS selector that often comes with a dash in the middle, and highlight/select the whole selector. By default, if there’s a hyphen, only the portion of the word clicked will be highlighted.

For instance, if a <div> has a class="foo", and I click on foo, foo will, by default, be selected. But if that div has a class="foo-bar", then clicking on foo will only highlight/select foo (up to the hyphen) and not all of the, more contextually accurate, ‘foo-bar’. In my user configuration file, I’m going to remove the hyphen, and thus remove this annoyance from my life.

drag_text: This is an edge case setting, but it has bitten me a few times. If you’re in a window in Sublime 2, and you have a block of code selected, when this default configuration is in play, you can drag that text into another window. I can see the use for this, but it’s also thrown me for a loop more times than it’s been useful. I override this to prevent that from happening. If I really want text in another window, I’ll jkust do the traditional copy and paste.

Overriding Defaults

Knowing I want to change these settings, I can write my own JSON object into my User configuration (Preferences > Settings – User):

"drag_text": false,
"font_size": 15.0,
"open_files_in_new_window": false,
"word_separators": "./\\()\"':,.;<>;~!@#$%^&*|+=[]{}`~?"

Easy Peasey!

Installing Packages

Where Textmate had Bundles, Sublime 2 has Packages. Packages are extremely powerful.

NOTE: Install this first 2. Trust me. And get familiar with this.

There are a million and one different packages out there, depending on what your needs are. Installing a package is as simple as going to Preferences > Package Manager > Install Package. Note that you can also add new external repositories of external packages that Sublime 2 can also search.

Sublime 2 - 4 Pane Grid View

Sublime 2 – 4 Pane Grid View


Sublime 2, of course, has hundreds of different setups. It kinda just depends on your taste and not being afraid to try things. Because everything is based on text file configurations and settings, everything can be reversed. Don’t be afraid to break things. You can always back out. You can even set it up so that you have multiple files open in the same tab. Set it up the way you want it and go be more productive!


  1. Sublime 2 works on Mac OS X, Windows and Linux. All options will be similar, if not identical, to what I’m providing here from an OS X perspective. If you can’t find what I’m referring to, think about where logically it might be in your menus.
  2. Specific installation instructions can be found here.