mosco
Forum Replies Created
-
Forum: Fixing WordPress
In reply to: WordPress 3.0.1 hack or exploit?No more hacks since we upgraded to 3.0.2, we were getting hit twice a day before that.
If that holds then I think 3.0.1 has an sql injection vulnerability that was fixed in 3.0.2 (something more serious than the xss vulnerability that was announced fixed in 3.0.2)
Forum: Fixing WordPress
In reply to: my blog is being attacked by some scriptIf you don’t mind can you share what version of wordpress you were running when you got hacked?
What is the code that is being inserted? Is it a <script src tag at the bottom of each post?
We were also getting hacks on wordpress 3.0.1, just upgraded to 3.0.2 but not sure yet if that resolves the issue.Forum: Fixing WordPress
In reply to: WordPress on IIS 7 – plugin update problemAdding the plugin directory to the wp-config doesn’t fix the problem
I think it’s due to a wincache bug, see this discussion:
http://forums.iis.net/t/1169832.aspxthere’s a fix coming up, hopefully in the next version
Forum: Fixing WordPress
In reply to: Blank Pages after upgrade to 3.0.1last time it happened to me, there was a function.php file in our themes folder that was missing its closing ?> php tag, also make sure it has no extra line breaks after the closing tag. and check your wp_config.php file for the same.
hope that helps.Forum: Fixing WordPress
In reply to: WordPress 3.0.1 hack or exploit?Yes, but that’s the only one other site.
All the hacked sites have the Akismet plugin + commeting on, the one that didn’t get hacked doesn’t allow comments anywhere and doesn’t have Akismet enabled.Forum: Fixing WordPress
In reply to: Serious hacking threat to newest WordPress?we use akismet, all the hacked blogs have it (latest version)
we don’t use wp-db-backupFrom what we’ve done to narrow it down to me it looks like the most likely source is the commenting system, or maybe akismet?
the only blog we have that doesn’t get hacked, doesn’t allow comments and doesn’t have akismet active, all the others do.
Forum: Fixing WordPress
In reply to: Serious hacking threat to newest WordPress?we’re also seeing an active exploit, not sure yet but to us it looks like it affects only blogs that have commenting enabled and the hack does not need access to the wp-admin (we have it completely blocked off for some blogs and it still happens.)
See here: http://wordpress.org/support/topic/wordpress-301-hack-or-exploitForum: Fixing WordPress
In reply to: WordPress 3.0.1 hack or exploit?IIS 7 fully patched, with latest php version and fastcgi, there is no command line shell available and no remote users can login.
There are a lot other php and non-php apps on there, non are hacked, this looks very specifically like a wordpress hack, it’s only inserting the code inside wordpress posts
the only other way I would see someone doing this is using phpmyadmin, but there is no phpmyadmin installed that’s accessible to outside users.
If the host itself was compromised I would expect to see that same code inserted into other mysql table to make it show up on other parts of the hacked sites. That is not happening.
Forum: Hacks
In reply to: Facebook Like Button isn't work properlyvery weird, in the forum (last post from today by darkwolf):
http://forum.developers.facebook.net/viewtopic.php?id=73769apparently changing the width of the Like plugin from the default 450 to 350 (in wordpress settings) fixes the problem… I tried it and it works.
Forum: Hacks
In reply to: Facebook Like Button isn't work properlyLooks like they updated the like button:
http://developers.facebook.com/blog/post/407It’s broken on our wordpress blog also, we’re using the Like plugin
Forum: Fixing WordPress
In reply to: Firefox Crash only with WordPressCrash still happens even with searchstatus plugin removed, so it doesn’t look like it’s a plugin issue.
Forum: Fixing WordPress
In reply to: Firefox Crash only with WordPressHave the same issue. With several copies of firefox on different computers and different wordpress users.
All on Mac OS X with firefox 3.0.10, but this was also happening with ff 3.0.9
What plugins do you have? I think it may be due to a plugin, one that we have in common so far for users crashing is SearchStatus (Alexa), but I am testing with that plugin removed to see if it doesn’t crash anymore.It happens every time we try to load the wordpress admin (wp 2.7.1) the comments section in particular, although it could just be the login (the page never loads it crashes).
The only work around so far I found was to create a new firefox profile and copy+paste my old ff profile files in there (bookmarks, saved passwords, etc.)
Safari has no problems.
Forum: Plugins
In reply to: Tag Cloud Over Period of Time or Number of PostsI would also love to have this feature. I read that UTW used to be able to do this in archive pages based on the wp loop’s date range, not sure if that is something that could work with the new 2.3 tagging system.
Forum: Fixing WordPress
In reply to: tag cloud only most recent N posts?I would second this request. It would be really great to be able to get a tag cloud for the most recent N requests, or for a specific date range. Ultimate Tag Warrior (doesn’t work with wp 2.3) I believe used to be able to do this for archive pages using the loop’s date range for example.
Forum: Fixing WordPress
In reply to: Google and WordPress permalinks questionAh ok, actually I see that some of my pages are also linking to index like you instead of the actual entry, but the weird part is that it seems random. Some of my google links correctly go to the actual post while others go to the index page…
The ones linking to index have this URL: wordpress/index.php?paged=1 , and the ones linked to an actual post have a URL like: wordpress/?p=452But I’m not sure permalinks would change anything to that. It seems just to be that google decides to follow some links and not others.
Are all your links going to index or just some of them?