By Jeffro on December 28, 2012
Automattic or more aptly VaultPress, has acquired security company, CodeGarage. This is the first time I’ve ever heard about CodeGarage but they appear to be a VaultPress alternative. Looking over the pricing and plans for each service, I see that CodeGarage was definitely cheaper as you can monitor 5 websites for $25 a month while VaultPress charges a flat fee PER website. The acquisition appears to be a talent grab as well as being a learning exercise. As an example, CodeGarage has a great pricing structure that allows businesses to have multiple websites monitored for a nominal fee, something which VaultPress doesn’t have.
I have to say though, I’m a bit perplexed as to why Automattic/VaultPress would continue to build and expand upon CodeGarage considering the existence of VaultPress. Even though it was not announced, if I were a customer of CodeGarage, I’d be watching the news very carefully to watch for any hints of the service shutting down and everyone having to migrate over to the VaultPress platform.
Posted in News | Tagged acquired, codegarage, security, vaultpress
By Jeffro on December 28, 2012
Over the past few days, I’ve read various posts regarding a security hole discovered in the popular W3 Total Cache plugin. According to a security bulletin published by Jason Donenfeld on Seclist.org, after installing the plugin from the WordPress plugin repository through the backend of WordPress, there are two avenues of attack left open.
1) Directory listings were enabled on the cache directory, which means anyone could easily recursively download all the database cache keys,
and extract ones containing sensitive information, such as password hashes. A simple google search of “inurl:wp-content/plugins/w3tc/dbcache” and maybe some other magic reveals this wasn’t just an issue for me. As W3 Total Cache already futzes with the .htaccess file, I see no reason for it not to add “Options -Indexes” to it upon installation. I haven’t read any W3 documentation, so it’s possible this is a known and documented misconfiguration, but maybe not.
2) Even with directory listings off, cache files are by default publicly downloadable, and the key values / file names of the database cache items are easily predictable. Again, it seems odd that “deny from all” isn’t added to the .htaccess file. Maybe it’s documented somewhere that you should secure your directories, or maybe it isn’t; I’m not sure.
However, within the plugin’s support forums on WordPress.org, Otto suggested that until a fix is released, to check and see if you’re using “Disk: Basic” or “Disk: Enhanced” for database caching. If so, disable database caching and clear out those caches.
Posted in Plugins | Tagged Plugins, security, w3 total cache
By Jeffro on December 28, 2012
John James Jacoby has published the 2012 year in review post for bbPress. It’s been one year since the project went from being stand alone software to a WordPress plugin. So far, it looks like the project is progressing along quite steadily. Among some of the cool stuff added to bbPress during 2012 are retina support, theme compatibility, multiple user roles, private/hidden forums, BuddyPress integration, Akismet integration, and improved multisite support. Although it’s taken awhile, it looks like the community is really starting to rally behind the project again.
For those of you that are using the plugin version of bbPress, what are your thoughts on the new project so far?
Posted in bbPress | Tagged bbPress, forums, Plugins
By Jeffro on December 18, 2012
With all the hub bub surrounding the Terms of Service changes for Instagram, users are flocking to various competitive services like Flickr. However, one of the safest bets in insuring that your photos remain the property of the person who took them, is to host them on your own website, particularly a WordPress powered one. If you’re looking to move your photos from Instagram to your WordPress powered website, take a look at the DsgnWrks Instagram Importer plugin.
In the spirit of WordPress and “owning your data,” this plugin will allow you to import and backup your instagram photos to your WordPress site. Includes robust options to allow you to control the imported posts formatting including built-in support for WordPress custom post-types, custom taxonomies, post-formats. You can control the content of the title and content of the imported posts using tags like **insta-image**, **insta-text**, and others. Add an unlimited number of user accounts for backup and importing.
Personally, I hate Instagram and what it does to everyone’s photos. It’s as if it easily allowed the idea for everyone to photoshop everything. Instead of seeing photos as the photographer sees them, I have to view them after some stupid filter was applied.
Posted in Plugins | Tagged importer, instagram, photos
By Jeffro on December 12, 2012
To celebrate the unique date of 12/12/12, ColorlabsProjects is offering each single pack theme for just $12. When checking out, you’ll need to use the special coupon code to take advantage of the deal. Here are is the list of coupons.
- STNDLNE12, use this coupon code while purchasing any of the Standalone Themes: Arthemia, Allegro, Adam & Eve, ArchiePlus, BloggingNews, Burogu, Directory, Entreprenium, Equilibria, Galerie, Indulgence, Initiator, Invitora, Minuet, Modernizm, Momentum, Narcilicious, Parasol, Neu, Platformate, Reportage, SimpleReader, Travelous, TypeMagz, UnoPress, Venturos, and Wireline.
- ENTPRSE12, use this coupon code while purchasing any of the Enterprise Themes: AffiliateBoard, Classifier, Courtier, Eureka, EstateExpert, JobJockey, Letters, Piazza, Sneakers Addict, Wardrobe, Opulence, and RoyaleRoom.
- BCKBONFRMWK12, use this coupon code while purchasing the Backbone Framework.
- BCKBONFRMWKCHD12, use this coupon code while purchasing any of the Child Themes (with the Backbone Framework included): Kirei, Vidio, Le Journal, Papuros, Sharpness, Cloth, Persona, FoodMagz, and Nocturn.
- BCKBONCHD12, use this coupon code while purchasing any of the Child Themes (without the Backbone Framework): Kirei, Vidio, Le Journal, Papuros, Sharpness, Cloth, Persona, FoodMagz, and Nocturn.
Posted in Themes | Tagged colorlabs, deals, Themes
By Jeffro on December 12, 2012
CodePoet has published a great interview with WordPress support extraordinaire , Mika Epstein also known as Ipstenu. The interview covers the basics of how she got involved with the web and WordPress. While the interview is great, I’ll take her last words as a great piece of advice.
Remember to have a life, remember you can say no, and remember to ask for help.
Thanks Mika for all you do to help make WordPress better. Be sure to check out her eBooks if you’re looking for help on using WordPress Multisite.
Posted in WordPress | Tagged community, interview, support
By Jeffro on December 12, 2012
The latest version of bbPress was released on the same day as WordPress 3.5. The new version sports a few bug fixes with themes and BuddyPress compatibility. On the topic if bbPress, there is also news that Jennifer M. Dodd has been officially given committ access to the bbPress project. One her tasks for bbPress 2.3 is full forum search. Something of which you can keep tabs on by following ticket 1515.
Posted in bbPress | Tagged bbPress, contributor, version
By Jeffro on December 12, 2012
Terry Sutton shares his experience on contributing to WordPress 3.5. I wonder how many other newcomers to WordPress feel the same way or have gone through the same struggles as Terry. Hopefully, most of his issues along with everyone else’s will be addressed in the Core Contributors handbook.
Posted in WordPress | Tagged 3.5, contributing, handbook
By Jeffro on December 12, 2012
WordPress 3.5 has finally arrived thanks in part to the many people who have volunteered their time to make it happen. Over the next few days, users will be reporting problems and errors that they run into via the WordPress.org support forum. As with every major release, Ipstenu and the support team have put together a master list of issues being reported for WordPress 3.5. This thread is not meant to have any user feedback but is a curated thread that quickly highlights the known issues being reported as well as instructions on how to fix the problem.
As a side note, WordPress 3.5 continues the streak I’ve had in upgrading without any issues.
Posted in WordPress | Tagged 3.5, support, troubleshooting
By Jeffro on December 10, 2012
Whether you’re creating your own Christmas cards or developing a Christmas oriented WordPress theme, there should be something for you in this comprehensive Christmas toolbox put together by Speckyboy.com. Browsing through the toolbox, there are quite a few great looking textures and brushes for use with Photoshop.
Posted in Themes | Tagged brushes, christmas, graphics, icons
Page 1 of 16123...510...»Last »
Automattic or more aptly VaultPress, has acquired security company, CodeGarage. This is the first time I’ve ever heard about CodeGarage but they appear to be a VaultPress alternative. Looking over the pricing and plans for each service, I see that CodeGarage was definitely cheaper as you can monitor 5 websites for $25 a month while VaultPress charges a flat fee PER website. The acquisition appears to be a talent grab as well as being a learning exercise. As an example, CodeGarage has a great pricing structure that allows businesses to have multiple websites monitored for a nominal fee, something which VaultPress doesn’t have. 
