PLEASE themers FORGET Timthumb this is urgent !

FinalDestiny said
It is capable of getting and resizing images from external sources and folders outside the wp installation / uploads folder.

And you can’t do that with core WP functions?

No, you can’t, unless you write your own code to get the external image and move it to the correct path. It’s way easier with timthumb and can’t see any problem with it.

FinalDestiny said
No, you can’t, unless you write your own code to get the external image and move it to the correct path. It’s way easier with timthumb and can’t see any problem with it.

EDIT:

well if bringing inside the WP install files from outside sources is not a problem for you, you are ok.

but this is exactly what must be avoid specially in a multisite install, moreover using an external script !

It’s way easier with timthumb and can’t see any problem with it.

That might be the reason why WP Core cannot to it.

You have plugins like Load from server that can move your images to the proper place without reuploading them, you have pluggins like Image Grabber that can load any image into your repertory, and you have plugins like Custom Upload Dir that gives you high flexibility in the way you organize your media folder. Without security leak.

That might work for a specific website/client, but when developing commercial themes I can’t ask the end-user to install 5 plugins just because someone thinks timthumb is buggy, without real proofs.

@dekciw – it only works with images located in the same folder as the wp installation(in the uploads folder)

I can only speak for myself but the only time I’ve had a WP site hacked, it was indeed because of Timthumb as well. They don’t make a plugin like this for no reason lol. Now it’s on all my WP sites http://wordpress.org/extend/plugins/timthumb-vulnerability-scanner/

it is not buggy… It is unsecure. Not thesame….

That plugin was created just when there was that major vulnerability of timthumb in the previous versions, but that one was fixed, 99,5% of the websites that are hacked via timthumb are because they didn’t update the timthumb version.

@FinalDestiny

Once you’ve been bitten by a snake, you tend to avoid them in the future

And I’ve bought themes before where the author says download these 2 or 3 plugins to make the theme work. It doesn’t bother me Cheers.