WordPress XSS Vulnerability

If you’re a WordPress blogger be sure to update to the latest 3.0.4 build as soon as possible, While no new features have been fixed a major security hole has been patched.
Basicly 3.0.3 allows users to insert comments with malicious code, the 3.0.3 WordPress only sanitizes lowercase HTML allowing a malicious user to pass bad code to obtain cookies of a logged in user.

For now if your still running 3.0.3 check all pending and new comments for base 64 code or JavaScript links and if you see some delete the comment right away.

See http://wordpress.org/ for the complete announcement from the wordpress team.

No tips yet.
Be the first to tip!

Like this post? Tip with bitcoin!

1FRxrBB6wQHQGRLHWZ3xjhJY1XT9WimVxw

If you enjoyed reading this post, please consider tipping me using Bitcoin. Each post gets its own unique Bitcoin address so by tipping you're not only making my continued efforts possible but telling me what you liked.

How to forward your cell phone to your Google Voice phones before going to Voicemail.

So I decided the other day that I really don’t like getting voice mail on my phone. So I opted to forward my voice mail to my Google Voice account, I find it much more convenient to check my voice mail online, but after activating the feature in my Google voice settings, I discovered something even better than simple voice mail forwarding.

As you can see from the image Google Voicemail is activated on my mobile phone, if its not enabled on yours the link will enable you to activate it. Google will provide you a string of symbols and numbers to enter into your cell phone to enable your phone to forward its calls to Google in the event you do not pick up instead of going to voice mail.

However after enabling Google Voicemail on your phone if you click the edit button you will see a new option at the bottom of the page, Forwarding Options. witch will allow you to ether have calls you do not pick up on your mobile forwarded directly to Google Vociemail or have the call foarded to all your other phones first. In my case this means ringing to my Skype account first. The other day I left my phone in my living room while I was working at my desk, I never heard my phone ring but I still got the call once it was patched over to my Skype account.

So if your a Google Voice user, go check out this feature and let me know what you think of it.

No tips yet.
Be the first to tip!

Like this post? Tip with bitcoin!

15bBhH6x8cybvv1kTcCVThSFWY2eeULt8J

If you enjoyed reading this post, please consider tipping me using Bitcoin. Each post gets its own unique Bitcoin address so by tipping you're not only making my continued efforts possible but telling me what you liked.

Hide WordPress Stats Smilie

If you use the WordPress Stats plugin, you may have noticed the smilie added at the bottom of the page. The plugin itself offers no way to remove the smilie, and is actually required for the plugin to function properly. I myself use the service to keep tabs on traffic to my site.

However not all users myself included like seeing the little graphic in the bottom corner of the page, but just because its needed doesn’t mean you have to see it. Using a little CSS trickery we can hide the graphic from the user. Simply toss the following line in the bottom of your stylesheet and while the image will still be loaded it will be hidden from view, keeping the plugin functioning as it should.

img#wpstats{width:0px;height:0px;padding:0px;border:none;overflow:hidden}

No tips yet.
Be the first to tip!

Like this post? Tip with bitcoin!

1H8WRv8WQDQs712dyAqYToT8tT7HKmrYbJ

If you enjoyed reading this post, please consider tipping me using Bitcoin. Each post gets its own unique Bitcoin address so by tipping you're not only making my continued efforts possible but telling me what you liked.

WordPress 3.0 Release Candidate

WordPress is aiming for a June release of the 3.0 version of there popular blogging software. So far they are right on track, they just released the first RC of the 3.0 platform, whats an RC? The term release candidate (RC) refers to a version with potential to be a final product, ready to release unless fatal bugs emerge. In this stage of product stabilization, all product features have been designed, coded and tested through one or more beta cycles with no known showstopper-class bug.

If your a WordPress developer or even just a WordPress blogger and want to get a peak at the new version you can head over to WordPress.org and download the new RC, DO NOT install this on your live blog, remember its only a candidate for the new version, further testing still needs to be done to ensure all bugs have been discovered and removed.

If your curious whats been changed heres a quick list.

  • Custom menus.
  • Multi-site. (run multiple blog’s off a single install)
  • The look of the WordPress admin has been lightened up a little bit, so you can focus more on your content.
  • There are a ton of changes, so plugin authors, please test your plugins now, so that if there is a compatibility issue, we can figure it out before the final release.
  • Plugin and theme *users* are also encouraged to test things out. If you find problems, let your plugin/theme authors know so they can figure out the cause.
  • There are a couple of known issues.

If you do decide to give RC1 a test spin and come across any bugs please help WordPress out.

Download WordPress 3.0 RC1

No tips yet.
Be the first to tip!

Like this post? Tip with bitcoin!

1JxwyK8BtVJbHmAD6GEfp1dHneqCJeL2xn

If you enjoyed reading this post, please consider tipping me using Bitcoin. Each post gets its own unique Bitcoin address so by tipping you're not only making my continued efforts possible but telling me what you liked.

Rumor: Apple to buy Twitter?

First it looked like Google was interested in purchasing twitter. Now according to TechCrunch Apple is showing an interest in the service. Sources state Apple wants to announce the purchase during WWDC in June, if the deal goes through the price-tag is going to be $700 Million.

twitter

so far even though Twitter is incredibly popular it has not developed a way to generate a profit and is running off venture capital. Lets hope should Apple actually make the purchase, nothing changes.

No tips yet.
Be the first to tip!

Like this post? Tip with bitcoin!

12x74gj8SKEAPPpjXCZd1MVZLxVAUq6wu6

If you enjoyed reading this post, please consider tipping me using Bitcoin. Each post gets its own unique Bitcoin address so by tipping you're not only making my continued efforts possible but telling me what you liked.