wordpress tricks, hacks, and tips

Tag: "upgrades"

WordPress vulnerability means don’t save sensitive information in drafts

| December 20, 2007 | 2 Comments

Michael Brooks has discovered a vulnerability in WordPress, which can be exploited by malicious people to bypass certain security restrictions and to disclose sensitive information. The application does not properly restrict access to posted drafts

... View Post

Problem with class.php when upgrading to WordPress 2.3.1

| December 19, 2007 | 2 Comments

We just upgraded a client's site from WordPress 2.2. to WordPress 2.3.1. After upgrading, the theme still worked, but the links to Pages in the upper navigation bar stopped working and they all linked to the home page instead of to their pages, and an annoying error appeared at the top of ... View Post

5 steps to a smoother WordPress upgrade

| October 30, 2007 | 8 Comments

Someone just left a comment here on WordPressGarage saying that he upgraded his wife's WordPress blog and lost all the categories. He wanted to know how he could get them back. I asked him if he had backed up the blog before upgrading, and he sadly said no. First of all, that's why ... View Post

Get ready to update WordPress…again

| October 28, 2007 | 8 Comments

http://wordpress.org/development/2007/10/wordpress-231-release-candidate-1/ Over 20 bug fixes. What can I say except "sigh." View Post

I told you so…time to upgrade to 2.2.2

| August 6, 2007 | 11 Comments

A few days ago I reported about a new WordPress vulnerability, and prophesied that as a result we would soon be witness to a new release of WordPress. Well look who's right. The powers-that-be at WordPress announced yesterday that two security-related releases are ... View Post

New WordPress vulnerability: “Style” Cross-Site Scripting

| August 2, 2007 | 1 Comment

A new vulnerability has been reported on Secunia in WordPress 2.2.1, and possibly in other versions:

DESCRIPTION: Benjamin Flesch has discovered a vulnerability in WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the "style" parameter in wp-admin/upload.php (when "post_id" is set to a negative integer

... View Post

Time to update WordPress…again. Sigh.

| June 23, 2007 | 2 Comments

Well folks, the time has come again to update your WordPress sites. And, like always, the update isn't really optional, since it covers some security issues in addition to bug fixes. I love WordPress - it's easy to use, flexible, has a large and robust user community, and ... View Post

Getting Hebrew to work on WordPress 2.2

| June 6, 2007 | 11 Comments

Update February 20, 2008: The Hebrew no longer works on this blog, even with the trick I described below. Ido Fishman left a comment with a link to this section of the Codex that describes a gut-wrenching, hair-whitening way to get different languages to work on one WordPress blog. Since ... View Post

Problems with WordPress 2.2

| June 4, 2007 | 3 Comments

Of course there are problems. I should have followed my own rule of not fixing things that aren't broken. Here are the problems:

After an upgrade, funny symbols appear all across the posts. Generally they appear where apostrophes are in words (see my post titled "Aizatto's Related Posts Plugin"? for a

... View Post

Fantastico now offers WordPress 2.2. upgrade and install

| June 4, 2007 | 1 Comment

Fantastico has now been set up to allow upgrades and installations of WordPress 2.2. So I took the plunge and upgraded almost all of the sites that I manage. Each site took about five minutes, and so far I haven't noticed any problems. I want to take this opportunity to laud the praises of Fantastico, ... View Post