-
Archives
- September 2010
- August 2010
- July 2010
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
-
Meta
Category Archives: security
Do you use PHP $_SERVER variables in forms?
photo credit: Melissa Maples I came across an interesting point that outlines that dangers of using $_SERVER variables to submit form, a practice that’s pretty common in WordPress plugins. The problem is that it opens the form up to be … Continue reading
If your WordPress up to date?
Is your WordPress installation up to date? If it’s not, you’ll get a constant warning message on every page telling you that you need to upgrade. And upgrading is really easy on the later versions too. There’s no messing around … Continue reading
WordPress v2.8.4
Hot on the heels of the latest version of WordPress comes a new version with another security hole fixed. This wasn’t a major one, just an annoyance that lets a malicious user keep reseting a particular user’s password. It wouldn’t … Continue reading
Authentication in WordPress 2.8
Just came across an interesting post called Authentication in WordPress 2.8. It talks about the implementation of OAuth in WordPress and it’s impact on users and plugin authors. The great thing about OAuth is that it would let applications and … Continue reading
Help, my WordPress blog is giving a virus warning!
I got called in to resolve an issue on a WordPress blog today. On the surface it looked as if the administration side of the site had broken, but the real cause turned out to be much darker than that. … Continue reading
Wordpress 2.6.1 Exploit: Upgrade to avoid hack
I was reading around today after cleaning up a website that got hacked when I saw an example of a vulnerability that exists in WordPress 2.6.1 The security hole is this: Imagine a blog site using wordpress 2.6.1 and its … Continue reading