Community News: WordPress Security Upgraded
524718
Just a quick note for all of you Wordpress users ou there: if you'll remember a little bit back, there were some security issues that popped up in the code. Well, they've released a new version to correct the issues.
413093
If you downloaded WordPress version 2.1.1 within the last week, upgrade to 2.1.2 right now to avoid exploitable code inserted by a cracker. Plus: We try out Opera's spill-proof OLPC. In Monkey Bites.
353737
News, Infocus, Columns, Vulnerabilities, Bugtraq ...
261826
PHP Magazine has posted their latest issue of the PHPBarnstormer (Issue #19):
236579
With all of the push to move to PHP5 these days, some people are asking more questions of some of the most common PHP applications as to how they plan to proceed. Nick Halstead asks his question on his blog today - should the community boycott WordPress?   Technology moves forward and PHP will long term lose its dominant position unless it gets everyone to move along with it. [...] Frankly I use WordPress because it has the best plugins but it is no coding wonder and Matt [Mullenweg]'s energies would be better placed helping to move it to PHP 5 only.   The reference there is to a post from Matt (from the WordPress project) going after the community a bit for trying to force a move to PHP5 and that it's "not a big deal" like some are making it out to be. Nick feels that, if it's the case that Matt doesn't even see the move to PHP5 as a big deal, maybe WordPress shouldn't be the one of the blogging tools of choice.
555963
On his blog today, Ryan Malesevich brings us yet another spotlight on a useful WordPress plugin. This time, it's a look at a tool that could save your entire site if used - the WordPress Database Backup plugin.   Wordpress ships with a couple plugins installed like Akismet which is a great help. I'm not sure what the Hello Dolly one is and am afraid to try it because it sounds lame. But it also comes with a Wordpress Database Backup. I've been using this for a while and thought I would share it with you.   He shows the installation and use of the plugin, including screenshots of what the various bits of functionality look like. Making backups is always a good thing, and making it this easy is even better.
12856
We are all used to IE getting a monthly new security bug found, but Winamp? In fact, this is not the first security flaw found in the application.
93571
A zero-day flaw in Firefox and third-party Windows patches turn up the heat for Net users. Plus: Buyout boom in security.
49129
Over on the SecurityFocus website, there's an interview posted with Stefan Esser of the Hardened-PHP Project (as interviewed by Federico Biancuzzi.   Federico Biancuzzi discussed with him how the PHP Security Response Team works, why he resigned from it, what features he plans to add to his own hardening patch, the interaction between Apache and PHP, the upcoming "Month of PHP bugs" initiative, and common mistakes in the design of well-known applications such as WordPress.   Some of the topics discussed include  the Hardened-PHP Project Suhosin the PHP Security Response Team (his role in it and why he left) PHP5's security focus versus PHP4's and more...  Check out the full interview to have all of your questions answered.
150896
In yet another "security via randomly generated images" kind of article, DevShed has posted their latest - Security Images with PHP and ImageMagick.
672660
Sam blogs about his wiki spam problems  and implements a posting throttle.  With new spam-capable zombie PCs and with wikis that aren't updated very often this isn't a solution.  If I were to go back to my wiki after a month it would be covered with spam links.  One strong solution is emergent and distributed social whitelists (AKA my FOAFKey  proposal).  With a FOAFKey enabled wiki/weblog you could allow a whitelist of a few hundred thousand users to post to the wiki without any problems.  All they would need to enter is their email address for confirmation (or the SHA1 hash of their email).  For the rare times when the user isn't within the original whitelist we can just have the user uplo ...
636915
Popular posts from PHPDeveloper.org for the past week:RefreshinglyBlue Blog: PHP vs Ruby - Practical Language DifferencesAndreas Gohr's Blog: Determine StumbleUpon RankingsPHP.net: PHP 5.2.4 ReleasedThe Bakery: Five New Posts - Custom Views, CSS, ViewInFile, ActsAs and Email ValidationPHPBuilder.com: File uploads made easyStefan Mischook's Blog: Turning on display_errors in WAMP - Video Tutorialphp|architect: Pro::PHP Podcast - Newscast for August 2007MT-Soft Blog: Creating a secure PHP production environment from Source CodeCommunity News: Andi Gutmans to Present at AjaxWorld 2007HowTo Forge: How To Set Up A Facebook RSS Feed Reader
767479
Here's what was popular in the PHP community one year ago today:Matthew O'Phinney's Blog: svn:externals (and the Zend Framework)Mark Jaquith's Blog: WordPress 2.0.6: Feedburner issue, and fixJob Posting: Unborn Media Inc Seeks PHP/MySQL Developer (Boston, MA)Zend Developer Zone: Tutorial : Using Zend Framework Without PDONetmag.co.uk: Make your own SoapChristopher Jones' Blog: Duplicate Columns in "2 Day Plus PHP Developer Guide"International PHP Magazine: Poll Question: Which is the Best PHP MVC Framework?William Candillon's Blog: phpAspect alpha 0.1.0 is released!Community News: phpthrowdown Registration OpenZend Developer Zone:  AJAX Chat Part Tutorial 6 : Updating the User ListIBM developerWorks: U2 PDO Driver Tutorial, Parts 1 & 2Stoyan Stefanov's Blog: Reusing an existing database connection with MDB2DevShed: Introducing the Memento PatternNexen.net: PHP statistics for December 2006Sandro Groganz's Blog: Syntax Highlighting & Migrating Permalinks in WordPress
394439
Popular posts from PHPDeveloper.org for the past week:PHPBuilder.com: AJAX and PHP Part 2 - XML Communication/ProcessingCommunity News: Zend Framework 1.0.0 ReleasedMike Potter's Blog: Slides for today's e-seminar on Flex and PHPBlogSecurity.net: Interview with Stefan Esser on WordPressCommunity News: India's First PHP UnconferencePro::PHP Podcast: Newscast for 2007.06.28JSLabs Blog:  How to create Microsoft Office Documents with PHPPEAR Blog: Request for ideas: New developer FAQPHP-Coding-Practices.com: Composing Methods: Split Temporary VariableRob Allen's Blog: Spanish versions too!
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
725665
New tools let nontechnical users build modules, and security is improved, among other additions.
149334
On the heels of a rant posted by Matt Mullenweg (of Wordpress), Ed Finkler has posted some of his own thoughts and rebuttals to the points Matt made.   Among these points are comments about PHP5 features that "could be helping Wordpress users right now" including:   Parameterized SQL input to eliminate SQL injection attacks Filter extension to combat XSS, CSRF, etc. attacks Prepared statement/transaction support in PDO and MySQLi Improved OOP features and support (code quality, extensibility)   Ed pushes that it's not about the slow adoption of PHP5 in other places. Its about the slow adoption of it in Wordpress so far as it relates to Matt:   The thing is, support of PHP5-only features in WP would give it better speed and security right now. And especially in the case of security, Matt's reliance on what users say they want is a critical error: users don't ask about security until well after it becomes a serious issue. Wordpress has one of the worst security records of any PHP application, so I'll go out on a limb and say that it's a problem now. Even if WP users aren't talking about it, WP's core dev team should have addressed this already.