[Plugin: Twitter Profile Widget] WARNING: DO NOT USE THIS PLUGIN

I have a habit of checking the code of all the plugins I install for malicious code and this plugin is full of it.

Some examples:

add_action(‘wp_footer’, ‘zzz’);
function zzz(){
echo ‘<style type=”text/css”>.hello </style>’;
echo ‘   <small class=”hello”>Beat diabetes</small>’;
echo ‘   <small class=”hello”>Diabetes diet</small>’;
}

Yep, they’re sticking links into your footer. they don’t stop there however:

$sponserlink_profile = ‘<div align=”left”>- news and informationbusiness,health,entertainment,technology automotive,business,crime,health,life,politics,science,technology,travel <font size=”1″>’ . ‘Twiter Profil Widget – Profile’ . ‘</font></div>’;

http://ww.wp.xz.cn/extend/plugins/twitter-profile-widget/