Title: masquerade's Replies | WordPress.org --- # masquerade [ ](https://wordpress.org/support/users/masquerade/) * [Profile](https://wordpress.org/support/users/masquerade/) * [Topics Started](https://wordpress.org/support/users/masquerade/topics/) * [Replies Created](https://wordpress.org/support/users/masquerade/replies/) * [Reviews Written](https://wordpress.org/support/users/masquerade/reviews/) * [Topics Replied To](https://wordpress.org/support/users/masquerade/replied-to/) * [Engagements](https://wordpress.org/support/users/masquerade/engagements/) * [Favorites](https://wordpress.org/support/users/masquerade/favorites/) Search replies: ## Forum Replies Created Viewing 15 replies - 1 through 15 (of 270 total) 1 [2](https://wordpress.org/support/users/masquerade/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/masquerade/replies/page/3/?output_format=md)… [16](https://wordpress.org/support/users/masquerade/replies/page/16/?output_format=md) [17](https://wordpress.org/support/users/masquerade/replies/page/17/?output_format=md) [18](https://wordpress.org/support/users/masquerade/replies/page/18/?output_format=md) [→](https://wordpress.org/support/users/masquerade/replies/page/2/?output_format=md) * Forum: [Installing WordPress](https://wordpress.org/support/forum/installation/) In reply to: [Serving cached static html pages with LightTPD or NGINX?](https://wordpress.org/support/topic/serving-cached-static-html-pages-with-lighttpd-or-nginx/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [18 years, 10 months ago](https://wordpress.org/support/topic/serving-cached-static-html-pages-with-lighttpd-or-nginx/#post-654985) * Permalinks in Lighttpd is incredibly easy and should be found easily with a quick google search, but in case its not: * $HTTP[“host”] == “yourwebsite.com” { server.error-handler-404 = “/index.php? error=404” } * That’s all really. Looking up lighttpd syntax should be able to let you restrict the 404 handler to specific directories. There are also old lighttpd rewrite rules which are much more efficient than the apache ones, but really using rewrite rules over a 404 handler doesn’t matter anyways, and WP will be stubborn and parse the request itself if it can. * Lighttpd has always gotten along with me and handles very high traffic and loads well, I’d recommend it for daily usage over apache for almost any task. * Forum: [Themes and Templates](https://wordpress.org/support/forum/themes-and-templates/) In reply to: [How to have a Home page and a Blog page](https://wordpress.org/support/topic/how-to-have-a-home-page-and-a-blog-page/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years ago](https://wordpress.org/support/topic/how-to-have-a-home-page-and-a-blog-page/#post-458827) * Try this plugin: [http://www.ilfilosofo.com/blog/home-page-control/](http://www.ilfilosofo.com/blog/home-page-control/) * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [reporting syntax error](https://wordpress.org/support/topic/reporting-syntax-error/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 1 month ago](https://wordpress.org/support/topic/reporting-syntax-error/#post-440067) * WordPress is regular PHP. Turn your PHP error reporting on. * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Preview Pictures…(possibly with Ajax)?](https://wordpress.org/support/topic/preview-picturespossibly-with-ajax/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 1 month ago](https://wordpress.org/support/topic/preview-picturespossibly-with-ajax/#post-442953) * A search that might interest you is lightbox wordpress plugin. They should automate the process quite a bit. * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Errors After Upgrading](https://wordpress.org/support/topic/errors-after-upgrading/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 1 month ago](https://wordpress.org/support/topic/errors-after-upgrading/#post-440452) * [http://codex.wordpress.org/Answers-Trouble_Shooting#Headers_already_sent](http://codex.wordpress.org/Answers-Trouble_Shooting#Headers_already_sent) * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [posts NOT Saved–several threads–no answers–huh?](https://wordpress.org/support/topic/posts-not-saved-several-threads-no-answers-huh/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 1 month ago](https://wordpress.org/support/topic/posts-not-saved-several-threads-no-answers-huh/#post-440420) * With absolutely no information, I’m not sure what you expect anyone to do. Help us help you, at least give us some indication as to what’s happening or a surefire way to reproduce the problem. * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [WP 2.0.4 – running terribly slowly!](https://wordpress.org/support/topic/wp-204-running-terribly-slowly/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 2 months ago](https://wordpress.org/support/topic/wp-204-running-terribly-slowly/page/2/#post-429306) * In the above code I posted for saving database queries, I have two corrections. One is, the define line should be this: * `define('SAVEQUERIES', true);` * And for your footer, the variable should be `$wpdb->queries` instead of `$wpdb- >savequeries`. * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [WP 2.0.4 – running terribly slowly!](https://wordpress.org/support/topic/wp-204-running-terribly-slowly/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 2 months ago](https://wordpress.org/support/topic/wp-204-running-terribly-slowly/page/2/#post-429298) * Alright, since nobody here has yet provided enough insight into what might really be wrong, here’s a checklist of things that you can try to help diagnose the problem if you can, or in the mean time help alleviate the problem. * If you’d like to help diagnose the problem, here’s a few things you can try. First thing we can try is dumping a list of SQL queries. To do so, edit your wp-config.php and add this line, preferably somewhere near the top, maybe even as the second line. * `define(’SAVEQUERIES’, true);` * Then, in the footer of your theme, add the line. * `savedqueries); ?>` * You can add the results to a pastebin or post them here, doesn’t particularly matter to me. Might be easiest to view the results using View Source in your browser. * If you feel a bit more experienced and up to a challenge, you can install xdebug2 for PHP ( [http://xdebug.net](http://xdebug.net) ), and then use either KCacheGrind for linux or WinCacheGrind on windows and save some images of the calltrees which show where WordPress is running slow. A good tutorial is at [http://xdebug.org/docs-profiling2.php](http://xdebug.org/docs-profiling2.php). * Lastly, to temporarily alleviate the problem until someone can track down the cause, the first thing you want to do is _not_ to downgrade. Try asking your host or installing APC yourself, which should boost performance considerably. Also check and see how your MySQL caching is performing, and maybe increase the amount of RAM you allow it to use. There are tons more things you could try, and I don’t feel like writing them all out here, but perhaps someone else can. * Forum: [Installing WordPress](https://wordpress.org/support/forum/installation/) In reply to: [2.0.2 Is out](https://wordpress.org/support/topic/202-is-out/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 7 months ago](https://wordpress.org/support/topic/202-is-out/page/2/#post-353666) * Is there a list of the actual security problem with earlier versions? I dont want to upgrade unless its actually needed! * There is no formal list, but let me say that the upgrade is absolutely necessary, the vulnerabilities are not crackhead zero-chance holes, they could easily be used to bring your blog to its knees. * Forum: [Installing WordPress](https://wordpress.org/support/forum/installation/) In reply to: [2.0.2 Is out](https://wordpress.org/support/topic/202-is-out/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 7 months ago](https://wordpress.org/support/topic/202-is-out/#post-353382) * Index: wp-comments-post.php Index: wp-includes/template-functions-general.php Index: wp-includes/version.php Index: wp-includes/js/tinymce/plugins/wordpress/ langs/en.js Index: wp-includes/js/tinymce/langs/en.js Index: wp-includes/js/tinymce/ tiny_mce_gzip.php Index: wp-includes/classes.php Index: wp-includes/template- functions-links.php Index: wp-includes/comment-functions.php Index: wp-includes/ functions.php Index: wp-register.php Index: wp-settings.php Index: wp-admin/menu- header.php Index: wp-admin/list-manipulation.php Index: wp-admin/admin-header. php Index: wp-admin/post.php Index: wp-admin/admin.php Index: wp-admin/admin- functions.php Index: wp-admin/user-edit.php Index: wp-admin/edit-pages.php Index: wp-admin/import/blogger.php * And for the inevitable “Can we have a patch?” [http://somethingunpredictable.com/tmp/201-202.diff](http://somethingunpredictable.com/tmp/201-202.diff) * Forum: [Requests and Feedback](https://wordpress.org/support/forum/requests-and-feedback/) In reply to: [WP 2.0.2 Update Coming?](https://wordpress.org/support/topic/wp-202-update-coming/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 7 months ago](https://wordpress.org/support/topic/wp-202-update-coming/page/4/#post-347668) * _Give me a fucking break. Four lines of code is bloat? I think not._ * 4 * 357 is. * You also mistake me for having anything to do with what hosts are listed on the page on WordPress.org, or my views even being remotely close to what any of the devs may think. I’m simply stating my thoughts on why things should remain as they do, and personally if I had my choice, the list of hosts on the Hosting page would not be what they are today (Dreamhost and Bluehost particularly, they’ve gone to hell over the years, and anywhere with a WP auto-install is pretty low on the list of hosts that should be recommended, as guess what permissions files are left laying around as?), but then again, money speaks, doesn’t it? * Besides, how will hosts ever know that they aren’t configured correctly until someone says “Well shit, because you guys didn’t follow the recommended standards for a PHP host and left error reporting on, my site was hacked, and your server rooted.” It takes learning by hard example to get people to comply, and if that’s so, its fine with me, there’s little other way. * Forum: [Requests and Feedback](https://wordpress.org/support/forum/requests-and-feedback/) In reply to: [WP 2.0.2 Update Coming?](https://wordpress.org/support/topic/wp-202-update-coming/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 7 months ago](https://wordpress.org/support/topic/wp-202-update-coming/page/3/#post-347657) * _I have to agree with one thing .. path disclosure IS a serious issue. Ive submitted it to Mosquito before … Whether you call it a server misconfiguration OR an application issue, its still something that needs adressing. * phpBB adresses it. vbulletin adresses it. b2evolution adresses it. * If ten projects bloat code by adding four lines to each file to protect against path disclosure, should we follow just because they do it? Just because another software does it doesn’t mean its a good idea or even necessary (especially when one of your references is phpBB, of all things to reference. phpBB just **needs** this because their record of security vulnerabilities which this could assist is huge.) * The idea here is to promote the use of webhosts with some bit of sanity. Nobody said for the average user to know how to change settings, but hosts should, and they should be responsible. There comes a limit to what a PHP script should have to do to work around the problems with webhosts, and path disclosure is one of those limits. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [WordPress Forum User Integration](https://wordpress.org/support/topic/wordpress-forum-user-integration/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 7 months ago](https://wordpress.org/support/topic/wordpress-forum-user-integration/#post-348064) * [http://bbpress.org](http://bbpress.org) * From much of the team that brings you WordPress comes a forum where changing one line will integrate the user tables. * Forum: [Requests and Feedback](https://wordpress.org/support/forum/requests-and-feedback/) In reply to: [WP 2.0.2 Update Coming?](https://wordpress.org/support/topic/wp-202-update-coming/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 7 months ago](https://wordpress.org/support/topic/wp-202-update-coming/page/3/#post-347612) * For (hopefully the last) time, there is no XSS vulnerability, the only person’s machine that you can run code on is your own. The vulnerability is bogus, its simply a bug in cookie input validation that could allow someone to execute javascript on their own machine. * Forum: [Installing WordPress](https://wordpress.org/support/forum/installation/) In reply to: [Upgraded, now it says I haven’t installed WP.](https://wordpress.org/support/topic/upgraded-now-it-says-i-havent-installed-wp/) * [masquerade](https://wordpress.org/support/users/masquerade/) * (@masquerade) * [20 years, 7 months ago](https://wordpress.org/support/topic/upgraded-now-it-says-i-havent-installed-wp/page/2/#post-345792) * The problem is that your blog does not have any users that have a level greater than 0. If WordPress detects this, it claims you haven’t installed WordPress. The solution is to manually go into your database and change one of your users back to level 10 (If you have phpmyadmin, that would be ideal). * I’m not sure why or how this problem occurs, the downgrader tries to do this for you, but for some reason, for me, and you apparently, it fails on Windows. Don’t know why or how, but it does. Viewing 15 replies - 1 through 15 (of 270 total) 1 [2](https://wordpress.org/support/users/masquerade/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/masquerade/replies/page/3/?output_format=md)… [16](https://wordpress.org/support/users/masquerade/replies/page/16/?output_format=md) [17](https://wordpress.org/support/users/masquerade/replies/page/17/?output_format=md) [18](https://wordpress.org/support/users/masquerade/replies/page/18/?output_format=md) [→](https://wordpress.org/support/users/masquerade/replies/page/2/?output_format=md)