Two things really.
1. I did not know this theme had updated and timthumb had been removed, this is because the sticky'd post at the top of this forum has not been updated to reflect such; it wasn't until I was leisurely reading the forum that I saw it was mentioned in passing. I had to check themeforest.net, and re-download the package to check the version.rtf to see it had been updated. After updating and reading that timthumb was removed due to a security flaw I was a little more peeved as my site has recently been defaced (read: hacked), and I can't help but wonder if this was the hole used to get in as EVERYTHING else was locked down and kept up to date. In future versions of the version document and the sticky'd post would it be possible to also include the date as well as the version number? Thank you.
2. According to the verstion.rtf I'm referring to, it says timthumb was removed, however it is still referenced in lots_of_small_helpers.php and actually called in kriesi_post_thumb.php. Is there any reason the code was left in place? It would seem that is the meat of the function call and the call is used in no less than 14 other files multiple times each. I am getting serious about security after recent events, and am hoping my questions can be answered. Thanks again.














