inspired2write

I am scared to update wordpress because I have so many plug ins running, but given the sorry state of the site right now, no time like the present!

Yobeat, the hassles of upgrading are far less than the hassles if your site gets compromised (as mine did when it was 2.7.1). So, the sooner you can upgrade the better.

In regards to who can post, and who cannot post to your blog:

You have to select what you desire for your blog for who will be authorized, and who will not be authorized to post blog posts. Here’s where to find that:

Go into your WP dashboard and then from the left sidebar column, select “Users”. Then above the user list you will see a drop down menu where you see, “Change Role to” and select the role you want assigned to each individual registered member. If you do not want someone to post to your blog, then you only want them as a ‘subscriber’ status.

In regards to your question about the login and registration page, it is different in appearance that the rest of of your front end of the website, by default. The best way to start learning your way around in the admin area is to start exploring! Hope that helps!

EDIT: Forgot to mention. First look in your “General” settings from the admin panel. There you will see, “New User Default Role”. Be sure it’s set to “Subscriber” until you determine if an individual is trust-worthy enough to be permitted to post to your blog. Otherwise, if you have spammers register, and you have a default role set to more permissions than a ‘subscriber’ then they will be able to write a blog post.

Have you done any searches for bad codes in your database? Like searching for hidden text etc? This article is very helpful with a good checklist of things to go through:
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
(Note: Article is not mine, and not from my site)

Well, dah – I forgot this too. Install this plugin, if you don’t already have it.
WordPress Exploit Scanner

Then run it from your wp admin dashboard. It may help you to determine exactly which files, or directories may be affected as well as where in the database it could be. That plugin helped me tremendously when dealing with a hacked site.

t31os_
Moderator,
I wanted to also thank you for your offer of help in this thread, and I haven’t yet tried what you suggested since I figured I better first check to see if my htaccess file codes are correct or not. (Above) Thanks again.

Still trying to resolve my issue too and wanted to check my htaccess before trying anything else.
ja2006 showed this code above:

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /wordpress/
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /wordpress/index.php [L]
</IfModule>

# END WordPress

But mine is this: (following the super cache codes, so I’ll start with the supercache code end):

# END WPSuperCache

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

#END WordPress

So mine is messed up? It’s missing the wordpress name in there. And, should it be written in the htaccess file prior to the WPSupercache codes, or after?

Also, just to clarify the location of mine is here:
root/myurl.com
Then there’s the 3 directories for WP, with the files below including the htaccess file.
wp 2.9.1 is what I’m running, if that makes any difference. Thanks.

The goofed up url lands on your homepage. Did you take a look at the blog post from your admin dashboard to see if everything looks clean? Also, did you take a look in your database and see what it shows for that blog post url?

Prior to upgrading to 2.9.1 my site got hacked, and it resulted in a variety of crawl errors and strange permalinks, so did you rule that out as a possibility? Hopefully that’s not what your dealing with.