Do you have/host a wordpress site?

If so, go read this:
http://digwp.com/2009/06/xmlrpc-php-security/

And then delete xmlrpc.php or use the .htaccess method described to protect your site.

A large number of very prominent blogs have been hacked in the last couple of days and as the major sites take steps to protect themselves and block the hack I'm pretty certain that script kiddies will start attacking sites much lower in the rankings (as they're less likely to be monitored and protected).

So basically, if you want to prevent your server/site getting hacked... go protect your site now.

I'm pretty sure if you are using the most up to date version you are safe - but I could be wrong

You're wrong.

techcrunch has been hacked twice in the last 24 hours. The problem is on all versions including the latest.

ONLY if you are running Wordpress from the SVN dev branch and you updated in the last 24 hours are you safe from this SPECIFIC hack, but even then this still leaves you exposed to hacks that aren't as widely known. Still best to protect your xmlrpc.php regardless of whether you are on the SVN dev branch.

Bump.

And on a slightly different note...

There's loads of stuff I'd like to do with my blog, but I can't tell my arse from my elbow.

I want to add tags, but everywhere I look online it just presumes you know how to add tags what they are for...

So.

How do I add tags?

What do they do?

Any decent tagging tips?

(puts on flame proof suit)

When you create a new post, there's a field where you can type tags (comma separated, I think).

Yeah under Quick Press, it's down the bottom. When creating a normal post, it's on the right.

It allows you to group types of posts. So, all posts tagged with "bike" can quickly be returned as a set if a person wants to only read your bike-related posts.
When they're viewing your blog they'd just click 'bike' below one of your posts and it would show all the posts tagged with 'bike'.

Nice one!

I'll get on it, report back.

It worked!

There's no stopping me now HAHAHAHHAHAHAH!!!

Aherm...

You can pay my consultancy fee in a number of ways..

1. Direct Debit
   
2. Cheque
   
3. 
   
   

...

1. Midgets
   

sticks moustache on youngest child and shoves him towards the Australian

They better know the words to the Oompa Loompa songs!

so wrong

So right.

I'm going to have to report you...to you.... urr...bollocks

You did the right thing.

bumping this... with a question.

I was thinking of switching my whole site over to wordpress. At the moment it is all html and template files which I update in dreamweaver. The guy who originally did all my techy stuff told me not to, because it was so insecure ('too many people using the platform makes it easier to hack').I'm not sure whether this is loaded information because he wants me to keep still using him, as another techy friend told me to switch. I see more and more sites switching to wordpress and as I have a blog attached to my site it seems to make sense to switch to it as a platform. Plus there are a couple of plug-ins which would be very useful to me.

Is wordpress totally insecure? Anyone have any thoughts on the subject?

I've made 100+ wordpress sites and haven't had any of them hacked.

As with anything they are as secure as you make them.

Keep the software updated and you should be fine

Thanks for the feedback. I'm going to go with my gut instinct and cross over.

Been keeping the software up to date and it looks like I've been hacked. My web guy is insisting it has happened via wordpress. Anyone got any tips on cleaning up the files?

I was wondering if there is anyone on here who'd be willing to lend me some advice on setting up a wordpress website.

I know it's simple but I'm simple and could do with some basic advice/guidance.

Probably - drop me with a PM and I'll see what I can do.

Pm'd with my idiocy, thanks.

I'm currently having an odd issue with one of my wordpress sites and wonder if anyone can help.

I'm going to update (via FTP) and then it gets stuck on "enabling maintenance mode". No errors, correct password, and I hadn't changed any settings. The same applies if I've tried to update relevant plugins.

I've since added another FTP, changed the theme, deactivated all the plug-ins etc. and tried again, but it is still the same. I have another site that is on the same server that is still updating without errors. Please does anyone have a clue?

1 Attachment

I've been using bootstrap to build and manage our current website but after a year or two we've outgrown it.

I know a designer/developer down here in Brighton who I'd like to build us something new. Initial discussions have seen him suggesting Wordpress as the answer to my problems. I've used Wordpress (templates only) in the past and was never that impressed, although his effort would be bespoke. Although the ease of changing stuff/adding posts was fine I've just never seen really nice design using it and that's important to us.

My question is: how much has Wordpress come on recently (past 10 years) and can it do cool things beyond just simply bloggy sites? Could it do stuff like filter results from a portfolio on a page of panels? Could it do cool interactive stuff? Can nice design be applied to it? I've got money to spend on the site I just can't get my head around the idea that Wordpress (in my day) was just used to do sites for hobbyists talking about their leek collection. Obviously he sings its praises but are there any impartial thoughts? Does anyone have any examples of amazing WP websites? Does the amazing stuff rely on plugins and how viable is a wordpress/plugin combo? (I.e. client portals to review work and manage accounts etc)

There really isn't any limitations with WordPress. If you get a good devoloper you also won't need to use any plugins...