Tag: release

WordPress 2.3.2 has been released and this release includes a number of changes including one security fix.

• Performance improvements for post sanitization when raw content is required.
• Changes to is_admin() to ensure that it is only true for admin pages thereby protecting against exposing draft posts.
• Suppression of database errors unless WP_DEBUG is true.
• Check for valid database connection information during install and display and error if the install fails due to database rights.
• Support for a custom database down page to be displayed on database connection errors.
• Changes to make sure we are more selective in what we make clickable, this introduces different rules for different uri types.
• Changes to wp-mail.php to escape the error messages when displaying them to avoid a possible XSS attack.
• Changes to ensure that the post password is only exposed by the xmlrpc method metaWeblog.getRecentPosts to users with rights to edit a post.
• Changes to the information exposed the wp.getAuthors xmlrpc method to reduce the information exposed and add a capabilites check.
• Addition of extra capabilites checks to xmlrpc methods.
• Addition of extra capabilites checks to APP server.
• Changes to validate_file() to improve its traversal attempt detection when running on windows.

Get yours today.

WordPress 2.3.1 has been released and this fix is a bug-fix and security release for the 2.3 series.

An XSS issue has been fixed here:

A security fix to ensure that edit-post-rows.php cannot be directly loaded to prevent XSS attacks when register_globals is enabled

Get yours today.

WordPress 2.3 has been released and I have updated this site to it without any problems.

Copy + Paste from Development Blog

1. Native tagging support allows you to use tags in addition to categories on your post, if you so choose. We’ve included importers for the Ultimate Tag Warrior, Jerome’s Keywords, Simple Tags, and Bunny’s Technorati Tag plugins so if you’ve already been using a tagging plugin you can bring your data into the new system. The tagging system is also wicked-fast, so your host won’t mind.
2. Our new update notification lets you know when there is a new release of WordPress or when any of the plugins you use has an update available. It works by sending your blog URL, plugins, and version information to our new api.wordpress.org service which then compares it to the plugin database and tells you what the latest and greatest is you can use.
3. We’ve cleaned up URLs a bunch in a feature we call canonical URLs which does things like enforce your no-www preference, redirect posts with changed slugs so a link never goes bad, redirect URLs that get cut off in emails on similar to the correct post, and much more. This helps your users, and it also helps your search engine optimization, as search engines like for each page to be available in one canonical location.
4. Our new pending review feature will be great for multi-author blogs. It allows authors to submit a post for review by an editor or administrator, where before they would just have to save a draft and hope someone noticed it.
5. There is new advanced WYSIWYG functionality (we call it the kitchen sink button) that allows you to access some features of TinyMCE that were previously hidden.
6. Full and complete Atom 1.0 support, including the publishing protocol.
7. We’re using the new jQuery whis is “800% faster.”
8. Behind the user-facing tags system is a really kickass taxonomy system which, which adds a ton of flexibility. It’s probably the biggest schema upgrade since version 1.5.
9. The importers have been revamped to be more memory efficient, and you can now add an importer through a plugin.
10. Through hooks and filters you can now override the update system, the dashboard RSS feeds, the feed parser, and tons more than you could in 2.2.
11. The new $wpdb->prepare() way of doing SQL queries.
12. Finally there were over 351 tickets in Trac closed for this release, with over a hundred people contributing. This is the polish, the hundreds of tiny bug fixes and features that make WordPress what it is.

More detailed changes can be found in WordPress Codex.