Support » Everything else WordPress » trying to disrupt my site?

  • I help run a LOLCat humor blog based on WordPress. A very popular and well-known competing site, called ICanHasCheezburger, has inserted a bit of Javascript on his site, which attempts to do something nefarious with my wp-admin/post-new.php file. While I do not allow connections to the wp-admin folder except from my own IP address, it appears he is attempting to somehow disrupt my wordpress blog. Any ideas on what this code is doing?

    <script type=“text/javascript”>
    function showNav(el) { el.getElementsByTagName(’UL’)[0].style.left=’auto’; }
    function hideNav(el) { el.getElementsByTagName(’UL’)[0].style.left=’-999em’; }
    function pressthis(step) {if (step == 1) {if(navigator.userAgent.indexOf(’Safari’) >= 0)
    {Q=getSelection();}else {if(window.getSelection)Q=window.getSelection().toString();
    else if(document.selection)Q=document.selection.createRange().text;
    else Q=document.getSelection().toString();}}
    else {location.href=’

    There is a post on with a screenshot of this code:

Viewing 1 replies (of 1 total)
  • Moderator Michael Adams (mdawaffe)



    ICanHasCheezBurger has inserted no malicious code toward your site.

    That is part of the tool bar. Since you’re logged in to, you see that toolbar. Part of that toolbar is a “Press This” button.

    That button is a quick shortcut to writing a blog post about the current page. Click it, and you’ll be taken to your blog with some fields pre-filled in.

    Go to any blog while logged and you will see the same JavaScript. You’ll see katurday, I’ll see my blog.

    If you think the Press This button should be referencing a different blog of yours, please contact the support . This is not the proper venue.

Viewing 1 replies (of 1 total)
  • The topic ‘ trying to disrupt my site?’ is closed to new replies.