WP-PostRatings 1.61

I have released WP-PostRatings 1.61 which fixes a code injection via “HTTP Referrer” and affects users who are on WP-PostRatings 1.50 only. This is the same code injection fixed for WP-Polls few days back.

I have checked the rest of my plugins to ensure that the code is not in anymore of my plugins. Sorry for any inconvenienced cased.

Similar to WP-Polls, I also took this chance to port the readme.html to the proper readme.txt which WordPress.org is using and now you can see all the details of WP-PostRatings right from the plugins page itself regardless if it is from your WP-Admin or WordPress.org.

All users should upgrade now

Props to Dion Hulse aka dd32 for the report!

Download: WP-PostRatings 1.61

1 Star2 Stars3 Stars4 Stars5 Stars (267 votes, average: 3.93 out of 5)

WordPress 3.5.1

WordPress 3.5.1 has been released and fixes 37 bugs including the following issues:

  • Editor: Prevent certain HTML elements from being unexpectedly removed or modified in rare cases.
  • Media: Fix a collection of minor workflow and compatibility issues in the new media manager.
  • Networks: Suggest proper rewrite rules when creating a new network.
  • Prevent scheduled posts from being stripped of certain HTML, such as video embeds, when they are published.
  • Work around some misconfigurations that may have caused some JavaScript in the WordPress admin area to fail.
  • Suppress some warnings that could occur when a plugin misused the database or user APIs.

Additionally, a bug affecting Windows servers running IIS can prevent updating from 3.5 to 3.5.1. If you receive the error “Destination directory for file streaming does not exist or is not writable,” you will need to follow the steps outlined on the Codex.

WordPress 3.5.1 also addresses the following security issues:

  • A server-side request forgery vulnerability and remote port scanning using pingbacks. This vulnerability, which could potentially be used to expose information and compromise a site, affects all previous WordPress versions. This was fixed by the WordPress security team. We’d like to thank security researchers Gennady Kovshenin and Ryan Dewhurst for reviewing our work.
  • Two instances of cross-site scripting via shortcodes and post content. These issues were discovered by Jon Cave of the WordPress security team.
  • A cross-site scripting vulnerability in the external library Plupload. Thanks to the Moxiecode team for working with us on this, and for releasing Plupload 1.5.5 to address this issue.

Download: WordPress 3.5.1 or visit Dashboard -> Updates in your site admin to update now.

1 Star2 Stars3 Stars4 Stars5 Stars (164 votes, average: 3.93 out of 5)

My Plugins Compatibility With WordPress 2.5

Below is a list of my plugins in development that WILL work with WordPress 2.5. The reason why I consolidated it here is because the current version of the listed plugins does not work properly with WordPress 2.5.

For the remaining plugins, see also Lester Chan’s WordPress Plugins June 2008 Update (Wave 1).

1 Star2 Stars3 Stars4 Stars5 Stars (154 votes, average: 3.92 out of 5)

WP-PostRatings 1.11

There is a bug in WP-PostRatings 1.11 together with WordPress 2.1.x which will not remember any ratings if you have rated the post. The bug seems to go away if you are using WordPress 2.2. I presumed there is some changes to the add_post_meta() and update_post_meta() in WP 2.2. I have since fixed the bug and now it works perfectly on WP 2.1.x and WP 2.2.

If you guys have previously downloaded WP-PostRatings 1.11, kindly re-download it again. Sorry for any inconvenience caused.

WP-PostRatings 1.11
» Readme/Changelog
» Demo
» Download Mirror #1
» Download Mirror #2
» Support Forum

1 Star2 Stars3 Stars4 Stars5 Stars (523 votes, average: 3.91 out of 5)

Away From 7th December 2009 To 27th December 2009

I will be away from the 7th December 2009 to 27th December 2009 to Taiwan and Hong Kong for holidays.

During this period, http://forums.lesterchan.net will be in a read-only mode, meaning you can only search and read topics/replies. Registration of new account, replying to an existing topic and posting a new topic will be DISABLED.

Please make an effort to search or read through the respective forum for your answers. I am 90% sure that your problems had been addressed before.

I WILL NOT entertain any support questions that are sent to me via email during this period. If you urgently need support, you can try posting it in WordPress.org Support Forums.

1 Star2 Stars3 Stars4 Stars5 Stars (481 votes, average: 3.91 out of 5)