Lester Chan's WordPress Plugins
Lester Chan's WordPress Plugins Development Blog
I have release 2 security updates to WP-Polls and WP-PostRatings which basically removes a malicious code that allows code injection. The malicious code is as follows: if ($_SERVER[‘PHP_SELF’] == @links_add_base_url(“/”, $_SERVER[‘HTTP_REFERER’])) return; The code itself does nothing, but hackers are spoofing the $_SERVER[‘HTTP_REFERER’] that allows…
I have released WP-PostRatings 1.61 which fixes a code injection via “HTTP Referrer” and affects users who are on WP-PostRatings 1.50 only. This is the same code injection fixed for WP-Polls few days back. I have checked the rest of my plugins to ensure that…
I have released WP-Polls 2.61 which fixes a code injection via “HTTP Referrer” and affects users who are on WP-Polls 2.60 only. I also took this chance to port the readme.html to the proper readme.txt which WordPress.org is using and now you can see all…
WordPress 3.0.5 & 3.1 RC4 has been released: WordPress 3.0.5 WordPress 3.0.5 is now available and is a security hardening update for all previous WordPress versions. This security release is required if you have any untrusted user accounts, but it also comes with important security…
WordPress 3.1 RC3 has been release. In summary, RC3 has removed the AJAX list tables implemented in RC2 because of bugs and usability issues. Here is the blog post from WordPress.org: WordPress 3.1 Release Candidate 3 is now available. After careful evaluation of the 3.1…