332 posts
  • Exclusive Author
  • Sold between 5 000 and 10 000 dollars
  • Has been a member for 4-5 years
  • Europe
  • Envato Studio (Microlancer) Beta Tester
  • Bought between 1 and 9 items
  • Referred between 1 and 9 users
dekciw says

It is capable of getting and resizing images from external sources and folders outside the wp installation / uploads folder.

And you can’t do that with core WP functions? :)

1728 posts Don't Worry, Be Happy
  • Beta Tester
  • Football Contest Participant/Runner-up
  • Grew a moustache for the Envato Movember competition
  • Elite Author
  • United States
  • Sold between 250 000 and 1 000 000 dollars
  • Has been a member for 3-4 years
  • Referred between 200 and 499 users
+3 more
FinalDestiny says

No, you can’t, unless you write your own code to get the external image and move it to the correct path. It’s way easier with timthumb and can’t see any problem with it.

332 posts
  • Exclusive Author
  • Sold between 5 000 and 10 000 dollars
  • Has been a member for 4-5 years
  • Europe
  • Envato Studio (Microlancer) Beta Tester
  • Bought between 1 and 9 items
  • Referred between 1 and 9 users
dekciw says

No, you can’t, unless you write your own code to get the external image and move it to the correct path. It’s way easier with timthumb and can’t see any problem with it.
https://codex.wordpress.org/Class_Reference/WP_Image_Editor

EDIT:

http://markoheijnen.com/wordpress-new-image-manipulation/ http://make.wordpress.org/core/2012/12/06/wp_image_editor-is-incoming/
9 posts
  • Bought between 10 and 49 items
  • Has been a member for 2-3 years
  • Referred between 1 and 9 users
Aphro says

well if bringing inside the WP install files from outside sources is not a problem for you, you are ok.

but this is exactly what must be avoid specially in a multisite install, moreover using an external script !

3 posts
  • Has been a member for 4-5 years
  • Bought between 10 and 49 items
Lumiere_de_Lune says
It’s way easier with timthumb and can’t see any problem with it.
The problem is just that, to do it, it needs 777 chmod. And 777 chmod should never be authorized :D

That might be the reason why WP Core cannot to it.

You have plugins like Load from server that can move your images to the proper place without reuploading them, you have pluggins like Image Grabber that can load any image into your repertory, and you have plugins like Custom Upload Dir that gives you high flexibility in the way you organize your media folder. Without security leak.

1728 posts Don't Worry, Be Happy
  • Beta Tester
  • Football Contest Participant/Runner-up
  • Grew a moustache for the Envato Movember competition
  • Elite Author
  • United States
  • Sold between 250 000 and 1 000 000 dollars
  • Has been a member for 3-4 years
  • Referred between 200 and 499 users
+3 more
FinalDestiny says

That might work for a specific website/client, but when developing commercial themes I can’t ask the end-user to install 5 plugins just because someone thinks timthumb is buggy, without real proofs.

@dekciw – it only works with images located in the same folder as the wp installation(in the uploads folder)

548 posts
  • Bought between 100 and 499 items
  • Has been a member for 4-5 years
  • Referred between 1 and 9 users
tonvie says

I can only speak for myself but the only time I’ve had a WP site hacked, it was indeed because of Timthumb as well. They don’t make a plugin like this for no reason lol. Now it’s on all my WP sites ;)http://wordpress.org/extend/plugins/timthumb-vulnerability-scanner/

9 posts
  • Bought between 10 and 49 items
  • Has been a member for 2-3 years
  • Referred between 1 and 9 users
Aphro says

it is not buggy… It is unsecure. Not thesame….

1728 posts Don't Worry, Be Happy
  • Beta Tester
  • Football Contest Participant/Runner-up
  • Grew a moustache for the Envato Movember competition
  • Elite Author
  • United States
  • Sold between 250 000 and 1 000 000 dollars
  • Has been a member for 3-4 years
  • Referred between 200 and 499 users
+3 more
FinalDestiny says

That plugin was created just when there was that major vulnerability of timthumb in the previous versions, but that one was fixed, 99,5% of the websites that are hacked via timthumb are because they didn’t update the timthumb version.

548 posts
  • Bought between 100 and 499 items
  • Has been a member for 4-5 years
  • Referred between 1 and 9 users
tonvie says

@FinalDestiny

Once you’ve been bitten by a snake, you tend to avoid them in the future ;)

And I’ve bought themes before where the author says download these 2 or 3 plugins to make the theme work. It doesn’t bother me ;) Cheers.

by
by
by
by
by
by