Thomas Mackenzie alerted us to a problem where logged in users can peek at trashed posts belonging to other authors. If you have untrusted users signed up on your blog and sensitive posts in the trash, you should upgrade to 2.9.2. As always, you can visit the Tools->Upgrade menu to upgrade.

Changelog: WordPress 2.9.2
Download: WordPress 2.9.2
Download: Modified files since WordPress 2.9.1

I just graduated from university in December 2009 and have been jobless for 2 months. However, things change for the better. I was offered a full-time job and will be starting work this coming Monday on the 1st February 2010.

I regret to say that I am not able to provide support for my plugins anymore due to my full-time job commitment. I will leave my WordPress plugins support forums open and let the community help one another.

However, I will still update my plugins when I can and you still can report bugs to me via email and I will try to fix it.

Thanks to everyone who posted a comment and being supportive. I really appreciate it =)

Thanks to Jeff who donated numerous time to me and posted it in Weblog Tools Collection

This release addresses a handful of minor issues as well as a rather annoying problem where scheduled posts and pingbacks are not processed correctly due to incompatibilities with some hosts.

Changelog: WordPress 2.9.1
Download: WordPress 2.9.1
Download: Modified files since WordPress 2.9

Here are some of the highlights:

1. Global undo/”trash” feature, which means that if you accidentally delete a post or comment you can bring it back from the grave (i.e., the Trash). This also eliminates those annoying “are you sure” messages we used to have on every delete.
2. Built-in image editor allows you to crop, edit, rotate, flip, and scale your images to show them who’s boss. This is the first wave of our many planned media-handling improvements.
3. Batch plugin update and compatibility checking, which means you can update 10 plugins at once, versus having to do multiple clicks for each one, and we’re using the new compatibility data from the plugins directory to give you a better idea of whether your plugins are compatible with new releases of WordPress. This should take the fear and hassle out of upgrading.
4. Easier video embeds that allow you to just paste a URL on its own line and have it magically turn it into the proper embed code, with Oembed support for YouTube, Daily Motion, Blip.tv, Flickr, Hulu, Viddler, Qik, Revision3, Scribd, Google Video, Photobucket, PollDaddy, and WordPress.tv (and more in the next release).
5. We now have rel=canonical support for better SEO.
6. There is automatic database optimization support, which you can enable in your wp-config.php file by adding define('WP_ALLOW_REPAIR', true);.
7. Themes can register “post thumbnails” which allow them to attach an image to the post, especially useful for magazine-style themes.
8. A new commentmeta table that allows arbitrary key/value pairs to be attached to comments, just like posts, so you can now expand greatly what you can do in the comment framework.
9. Custom post types have been upgraded with better API support so you can juggle more types than just post, page, and attachment. (More of this planned for 3.0.)
10. You can set custom theme directories, so a plugin can register a theme to be bundled with it or you can have multiple shared theme directories on your server.
11. We’ve upgraded TinyMCE WYSIWYG editing and Simplepie.
12. Sidebars can now have descriptions so it’s more obvious what and where they do what they do.
13. Specify category templates not just by ID, like before, but by slug, which will make it easier for theme developers to do custom things with categories — like post types!
14. Registration and profiles are now extensible to allow you to collect things more easily, like a user’s Twitter account or any other fields you can imagine.
15. The XML-RPC API has been extended to allow changing the user registration option. We fixed some Atom API attachment issues.
16. Create custom galleries with the new include and exclude attributes that allow you to pull attachments from any post, not just the current one.
17. When you’re editing files in the theme and plugin editors it remembers your location and takes you back to that line after you save. (Thank goodness!!!)
18. The Press This bookmarklet has been improved and is faster than ever; give it a try for on-the-fly blogging from wherever you are on the internet.
19. Custom taxonomies are now included in the WXR export file and imported correctly.
20. Better hooks and filters for excerpts, smilies, HTTP requests, user profiles, author links, taxonomies, SSL support, tag clouds, query_posts and WP_Query

Download: WordPress 2.9 (2.2MB)
Changelog: WordPress 2.9

Upgraded this site to WordPress 2.9 RC1, my plugins seems to work well.

Changelog WordPress 2.9 RC1
Download: WordPress 2.9 RC1

I tested my plugins on WordPress 2.9 Beta 1 and it all works without any problem. I don’t think I will have time to release any updates till I get back from my holiday at the end of December 2009. Having said that, the current version of my plugin should work fine with WordPress 2.9 as well.

Download: WordPress 2.9 Beta 2
View: Changes Since Beta 1

Here is the part where I was mentioned:

And an additional shoutout to plugin authors who take an active role in moderating threads regarding their plugins, again nominated by official moderators for recognition:

scribu, GDragoN, sivel, MikeChallis, GamerZ, alexrabe, arnee, sociable, takayukister, hallsofmontezuma, joostdevalk, filosofo, roytanck, donncha, Hiroaki Miyashita, manojtd, froman118, error, Viper007Bond, alexkingorg, cavemonkey50, azaozz, aaroncampbell, isa.goksu, flipper, joedolson, redwallhp, eight7teen, orenshmu, WebGeek, Otto42, toddiceton, the_dead_one, mywpplugin, MattyRob, markjaquith, TobiasBg, Txanny, elfin, jolley_small, stastoc, anmari, micropat, frekel.

I first joined the WordPress.org forums on 18th September 2003! Time flies, it has been 6 years!

During this period, http://forums.lesterchan.net will be in a read-only mode, meaning you can only search and read topics/replies. Registration of new account, replying to an existing topic and posting a new topic will be DISABLED.

Please make an effort to search or read through the respective forum for your answers. I am 90% sure that your problems had been addressed before.

I WILL NOT entertain any support questions that are sent to me via email during this period. If you urgently need support, you can try posting it in WordPress.org Support Forums.

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended.

The first problem is an XSS vulnerability in Press This discovered by Benjamin Flesch. The second problem, discovered by Dawid Golunski, is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations. Thanks to Benjamin and Dawid for finding and reporting these.

Changelog: WordPress 2.8.6
Download: WordPress 2.8.6
Download: Modified files since WordPress 2.8.5

• A fix for the Trackback Denial-of-Service attack that is currently being seen.
• Removal of areas within the code where php code in variables was evaluated.
• Switched the file upload functionality to be whitelisted for all users including Admins.
• Retiring of the two importers of Tag data from old plugins.

Changelog: WordPress 2.8.5
Download: WordPress 2.8.5
Download: Modified files since WordPress 2.8.4

Here is the list:

• Post Thumbnails: add an image to be automatically displayed with the post in various views (main page, archives, etc.). The WordPress logo on this post is added with this feature, plus a filter I added to my theme’s functions.php file.
• “Trash” status: deleted items such as posts, pages, and comments now go to the “trash”, and can be recovered later, much like delete files in most modern operating systems.
• Image editing: basic image manipulation for your media library. You can rotate, flip, resize, and crop images.
• Widgets outside of sidebars: there is a new template tag called the_widget(), which allows you to put a widget anywhere in your theme.
• Comment metadata: plugins and themes can now take advantage of arbitrary metadata for comments, just as for posts, pages, and users. This should make it easier to create plugins to highlight “popular” or “hot” comments, among other things.
• Custom post types: general support for post types other than ‘post’, ‘page’, and ‘attachment’. This plus the custom taxonomy support we already have will go far to address those to like to claim that WordPress is not a ‘real’ CMS. We’ll be able to organize content in ways that I can’t even think of right now (I need more time to brainstorm).
• Media Embeds: I haven’t had a chance to look over this all the way yet, but it’s basically Viper’s Video Quicktags folded into core (minus the editor buttons at this time), including support for the oEmbed standard. With oEmbed, you can just paste in the URL for a page containing embeddable media, and it can auto-detect the proper way to embed it in your post. Supported services so far appear to be YouTube, Google Video, PollDaddy, and DailyMotion. Plus, theoretically, any service that supports oEmbed, which currently includes YouTube, Flickr, Vimeo, Viddler, Qik, and Hulu, among others (according to the oEmbed site). Whoah, awesome! I’ll post a demo of this soon, but you can read Viper007Bond’s post now for more details.
• register_theme_directory(): plugins can now add additional theme directories to be searched. This means that a theme can basically come bundled with its own themes. I’ve already got a project that’s been on the back-burner that can use this feature. I think we might seem some nifty uses appearing in the future.

For more information, check out Dougal’s post on WordPress 2.9 Features

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

Changelog: WordPress 2.8.4
Download: WordPress 2.8.4
Download: Modified files since WordPress 2.8.3

Unfortunately, I missed some places when fixing the privilege escalation issues for 2.8.1. Luckily, the entire WordPress community has our backs. Several folks in the community dug deeper and discovered areas that were overlooked. With their help, the remaining issues are fixed in 2.8.3. Since this is a security release, upgrading is highly recommended

Changelog: WordPress 2.8.3
Download: WordPress 2.8.3
Download: Modified files since WordPress 2.8.2

WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site.

Changelog: WordPress 2.8.2
Download: WordPress 2.8.2
Download: Modified files since WordPress 2.8.1

WordPress 2.8.1 fixes many bugs and tightens security for plugin administration pages. Core Security Technologies notified us that admin pages added by certain plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable to this problem, but we advise upgrading to 2.8.1 to be safe.

Some of the fixes:

• Certain themes were calling get_categories() in such a way that it would fail in 2.8. 2.8.1 works around this so these themes won’t have to change.
• Dashboard memory usage is reduced. Some people were running out of memory when loading the dashboard, resulting in an incomplete page.
• The automatic upgrade no longer accidentally deletes files when cleaning up from a failed upgrade.
• A problem where the rich text editor wasn’t being loaded due to compression issues has been worked around.
• Extra security has been put in place to better protect you from plugins that do not do explicit permission checks.
• Translation of role names fixed.
• wp_page_menu() defaults to sorting by the user specified menu order rather than the page title.
• Upload error messages are now correctly reported.
• Autosave error experienced by some IE users is fixed.
• Styling glitch in the plugin editor fixed.
• SSH2 filesystem requirements updated.
• Switched back to curl as the default transport.
• Updated the translation library to avoid a problem with mbstring.func_overload.
• Stricter inline style sanitization.
• Stricter menu security.
• Disabled code highlighting due to browser incompatibilities.
• RTL layout fixes.

Full Changelog in WordPress 2.8.1

Download: WordPress 2.8.1

Now my plugins uses jQuery for AJAX instead of TW-Sack. I have also updated the widget code to make use of the new WordPress 2.8 new Widget class and that supports multi-instances widgets. The widget code has now been merge with the main plugin file so the standalone widget plugin file is no longer in use. Please delete the whole plugin folder and upload it again to avoid any error.

As WordPress 2.8 supports loading of JavaScript in the footer, all my plugins’ JavaScripts will be loaded in the footer. Be sure you have in your theme footer.php.

Be sure to read the readme.html and checkout the changelog for more information and most importantly NOTE THE TABS AT THE TOP

WP-Ban 1.50
» Readme/Changelog
» Download Mirror #1
» Support Forum

WP-CommentNavi 1.10
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-DBManager 2.50
» Readme/Changelog
» Download Mirror #1
» Support Forum

WP-DownloadManager 1.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-EMail 2.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-PageNavi 2.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-PluginsUsed 1.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-Polls 2.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-PostRatings 1.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-PostViews 1.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-Print 2.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-RelativeDate 1.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-ServerInfo 1.50
» Readme/Changelog
» Download Mirror #1
» Support Forum

WP-Stats 2.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-Sticky 1.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

WP-Useronline 2.50
» Readme/Changelog
» Demo
» Download Mirror #1
» Support Forum

If you like or love my plugins a lot, do consider making a donation to me. My Paypal email address is lesterchan AT gmail DOT com. Thank you =D

Here is the quote from Matt:

I’m very excited to announce to everyone that the latest and greatest version of WordPress, version 2.8 “Baker,” is immediately available for download. 2.8 represents a nice fit and finish release for WordPress with improvements to themes, widgets, taxonomies, and overall speed. We also fixed over 790 bugs. This release is named in honor of noted trumpeter and vocalist Chet Baker.

Major New Improvements
First and foremost, 2.8 is way faster to use. We’ve changed the way WordPress does style and scripting.

The core and plugin updaters in previous versions of WordPress have been such a success we decided to bring the same to themes. You can now browse the entire theme directory and install a theme with one click from the comfort of your WordPress dashboard.

If you make edits or tweaks to themes or plugins from your dashboard, you’ll appreciate the new CodePress editor which gives syntax highlighting to the previously-plain editor. Also there is now contextual documentation for the functions in the file you’re editing linked right below the editor.

If you were ever frustrated with widgets before, this release should be your savior. We’ve completely redesigned the widgets interface (which we didn’t have time to in 2.7) to allow you to do things like edit widgets on the fly, have multiple copies of the same widget, drag and drop widgets between sidebars, and save inactive widgets so you don’t lose all their settings. Developers now have access to a much cleaner and robust API for creating widgets as well.

Finally you should explore the new Screen Options on every page. It’s the tab in the top right. Now, for example, if you have a wide monitor you could set up your dashboard to have four columns of widgets instead of the two it has by default. On other pages you can change how many items show per page.

Download: WordPress 2.8

View: WordPress 2.8 Changelog

Download: WordPress 2.8 RC1

Download: WordPress 2.8 Beta 2

This site is running the development versions of all my plugins, so it should work with WordPress 2.8. Please let me know if you encounter any bug.

Download: WordPress 2.8 Beta 1