Displaying 1 To 30 Of 38 Comments WordPress Not The Direct Cause Of Mass Site Attacks I’ve had a client site recently hacked and displaying a “blackhole exploit kit” being the issue, I’m by no means a security expert as I’ve seldom had to deal with such issues but I learning quickly, any advice on this particular exploit? any help would be great. Just to chime in as a general rule my WP sites have been secure, out of a very large number of site I’ve worked on and monitor this has only happened twice, on the site I’ve mentioned and previously with the timthumb hack (again – not really WP’s fault) from both personal experience and the stats I could find, WP is fairly secure as far as al of its competitors which I think is largely due to its active and well, massive community. » Posted By Paul On March 12, 2012 @ 5:27 PM Bad Behavior In The WordPress Community Thats absolutely awful. I am often quite evangelical about WordPress, I love it and so do many of my clients, though I know not everyone experiences the world in the same way I do, and I also know that there is no panacea when it comes to creating an online solution, WordPress often checks many of the boxes and is incredibly flexible, its not always going to be the right fit. As ed said above we’re better than that, and I think on the whole the community is better than that, its really a shame that our community could be marked by such poor behavior. » Posted By Paul On January 23, 2012 @ 12:28 PM Some Orgnizations And WordPress Just Don’t Mix I love using WP, but the attitude of people behind it ( core team ) really turns me off. The more popular it gets, the more it turns its back against community. » Posted By Paul On January 13, 2012 @ 11:46 PM Lester Chan Interviewed By Singapore Magazine Lester Chan is the guy who paginates the world. » Posted By Paul On January 2, 2012 @ 4:55 PM WordPress Swag Store Open For Christmas Shopping I’d like to see some more exciting designs. Honestly, I’m a hardcore WordPress fan, but this stuff is ugly. » Posted By Paul On November 23, 2011 @ 4:50 AM Plugin Review – Expanded Admin Menus It’s not about the menu, it’s about the power. Certain group of people want it their ways. That’s why the plugin is not to solve the problem, So +1 for Aaron ( most people will just give up and live with it, right ? ) » Posted By Paul On October 18, 2011 @ 5:30 AM Removing Links In Favor Of Menus? Wow, you hit all the right notes ! » Posted By Paul On September 29, 2011 @ 11:17 PM I have a subscription with » Posted By paul On September 9, 2011 @ 4:49 PM WordPress 3.0 Upgrade Woes Starting To Come In there’s an issue with db-cache-reloaded too » Posted By paul On June 18, 2010 @ 8:39 PM Guest Review Of The Book: WordPress & Ajax how does ones get the introductory price? It says 24$ on the site » Posted By paul On June 7, 2010 @ 6:29 AM Jason Schuller Did It – I Can Do It To @Jeffro This is unarguably a touching piece of writing, and with help and support from the community, However… You said and that’s not a healthy attitude. No one should ever really hate whatever job they do » Posted By Paul On May 8, 2010 @ 4:38 AM Review Of The Limit Login Attempts Plugin I use Login lockdown » Posted By paul On May 5, 2010 @ 9:13 AM PremiumThemes.net Club Membership Giveaway I’d do screencast tutorials about beginnier to advanced stuff, webinars with Q&A sessions, premium theme giveaways, add a job section » Posted By paul On November 9, 2009 @ 6:39 AM I just today listened to the WP Weekly episode about SimplePie, and the discussion towards the end about the low bar for entry left a bad taste in my mouth. There were some pretty harsh comments made, and one even referring to the “dumbest users” being catered to by the new WP.com image widget. Quite a bit deal seemed to be made out of such a little thing. I feel that there is a part of the WP community that is building an unhealthy resentment against the mainstream adoption of WordPress. For anyone who would prefer to continue working with a complex, difficult CMS with a much higher entry bar I suggest looking towards the products that well and truly cater to that already (Drupal, Joomla etc). Or just get over it and keep using WordPress the way you like to and not worry about someone else getting a new easy to use feature to play with. » Posted By Paul On October 25, 2009 @ 4:13 AM Remember when Nirvana hit the big time and suddenly realised they didn’t like most of their mainstream fans (instead of attracting just cool grunge fans they starting getting jocks and metalheads at their shows). Anyway, shoddy analogy but the core message is you can’t attract the masses and also choose your audience. The worst possible thing is when a online community starts taking an exclusionist stance on those who need the most help. Lets not kick the slowest kids out to the special class, lets find a way to help them without slowing the rest of the class down. Take a page from Microsoft *gasp* and build automatic updates into WordPress. Here’s how it should work: » Posted By Paul On October 20, 2009 @ 6:54 PM Do You Think WordPress Is Secure? Security vs Features is a trade off in any software. I answered trick question, because: - out of the box the current version of WP is thought to be secure In IT we always say security is a ongoing process not a single state or point in time. » Posted By Paul On September 12, 2009 @ 6:02 AM Magazine/News Themes The New Black? I like them because the classic blog look is horrible for quickly scanning a site’s homepage looking for interesting articles to read. It forces the latest post to always be an absolute killer to draw new homepage visitors into your site (note: some A-list bloggers achieve this anyway). I dislike them though because it increases the development time for new sites and (sometimes) increases the time per post as you deal with all the extra post backend stuff that goes along with a lot of them. But overall I think they’re a great thing for self-run sites/blogs in general. » Posted By Paul On September 1, 2009 @ 10:38 PM Does Scheduling Posts Freak You Out? I agree, and good to see little usability things like this identified and fixed so quickly. » Posted By Paul On September 1, 2009 @ 10:25 PM Which Theme Company Has The Best Word Of Mouth? Polls are great fun until people take them seriously ;-) Did Adii intentionally game the poll? No, but he intentionally promoted it. It skewed the results because no one else did, thats all. Did Woothemes gain more exposure from this? No, the people on WPTavern would mostly already be aware of them (or already become aware of them by seeing the name in the poll), and his Twitter followers already know about him/them. Did Woothemes win some coveted prize? No, its just an unscientific poll on a blog like so many others that we all enjoy from time to time. Did Adii do anything good? Yes, he delivered a whole bunch of traffic to WPTavern, some of whom may never have been here, and some of those might subscribe and stick around. Isn’t that nice? » Posted By Paul On September 3, 2009 @ 10:14 PM I’d say Woothemes currently. I think Brian Gardner lost a bit of word of mouth momentum transitioning to the new Studiopress name but will climb back pretty easily anyway. » Posted By Paul On September 1, 2009 @ 10:28 PM Have You Enjoyed Your Stay At The Tavern So Far? There is no bigger WordPress fan than Jeff and I mean that in the nicest possible way. Simply put Jeff, without you and the tavern I’d struggle to keep up with developments in the WP community on my own. » Posted By Paul On August 22, 2009 @ 7:58 AM Top 5 WordPress Security Tips You Most Likely Don’t Follow the book Digging into WordPress has an entire chapter dedicated to security, well worth the read » Posted By paul On July 24, 2010 @ 4:36 AM I followed your advice on #5 ,htaccess lockdown and it took my entire site down! What ended up happening is that it blocked EVERY visitor except myself. I don’t believe I did anything wrong as I followed your instruction, but BE CAREFUL of this one. I lost an entire day of traffic and earnings because of it and didn’t even know until the end of the day when I checked my stats. » Posted By Paul On May 11, 2010 @ 3:13 AM Interview With Ryan Imel Of CommentBits.com Man I hate styling comments sometimes. $7 for a nice clean design? What a great deal, nice work Ryan. » Posted By Paul On July 9, 2009 @ 9:15 PM Aaron Brazell Author Of ‘The WordPress Bible’ Might buy a copy if there is some great stuff in there but its a tough call with WordPress books. I think the WordPress plugin development book that came out recently was a good, long lasting book (ie won’t be obsolete the next time WP releases a new version with new interface). If WordPress Bible can pull that off it would be worth a buy. Personally I’d love one of these publishers to sell a PDF version that you get say 6-12 months free revisions for so that you get the edits for whatever new WP versions come out in that time. For PDF distribution I would even say they could edit and release a new revision within 30 days of a new WP release. » Posted By Paul On July 6, 2009 @ 7:56 AM Listener Poll: How Should I Review A Theme? I use WAMPServer and a series of test installs. Typically I’ll have one clean install of the current version plus one install that was upgraded from the previous version to the current version (for working through upgrade bugs). Populating test installs is as easy as using the WP Candy sample content mentioned earlier, then adding a few “typical” posts of your own to it. I also tend to have at least one instance going that is for some ongoing project such as an ebook or tutorial series that I’m working on. I never test themes or plugins on my live sites before trying them on a test site first. » Posted By Paul On June 21, 2009 @ 10:16 PM Is WordPress Information Too Fragmented? Its one of those great ideas that probably wouldn’t work unless it came from the top (ie from Automattic). If they arranged some kind of site, portal, or newsletter and invited the top WP experts and bloggers to contribute in return for backlinks that would probably work. Maybe you “pay” your way in to get something published by contributing to the Codex documentation as well. All pie in the sky of course, hard to work out how it would get off the ground. Any third party iniative would probably fail for most of the reasons people already listed. Its hard to launch such a site and keep good content coming in without monetization causing disputes, and if you do it purely for free people will not give it a high priority and it will just die from lack of content. I’m in the “would love to get involved but don’t see how it would work” camp myself. » Posted By Paul On June 3, 2009 @ 10:26 PM My Child Theme Technical Hurdle I like plugins that either: Plugins that require direct coding are my least favourite but some good ones require this so you live with it. This is where learning a bit of coding or learning to code for a framework becomes a necessity. Its also a nice earner for those that can do it. » Posted By Paul On May 27, 2009 @ 11:22 PM You complain about the people who create non-GPL compliant themes and plugins as only being interested in the money, but yet you are quite happy to accept advertising money on WPTavern from sites that promote and/or sell non GPL themes and plugins. Hmm » Posted By Paul On May 25, 2009 @ 7:46 AM @Chip Bennett – nothing (not sure I indicated that I do). But calling it (or anything visually similar) the “Thesis-like Theme” is what would draw attention. » Posted By Paul On May 4, 2009 @ 9:19 PMComments Posted By Paul
it’s there to prove that – hey we are here too.
http://www.videousermanuals.com/
it’s 24$ per month, and you get more than just the videos. I pass on the cost to my clients, but to be honest I don’t know if they’re using them or not.
full of passion ( which soon to be monetized. )
( look at all the comments above ! )
I think you will be more than okay on this.
“I really hate the grocery store where I work.”
It’s part of life, doing things we sometimes don’t feel comfy with.
http://wordpress.org/extend/plugins/login-lockdown/
- by default, WordPress will auto-upgrade 7 days after a new release. Each day the admin screen nag *as well as* an email nag to the admin account will remind them of this countdown. On day 7, boom, you’re upgraded.
- advanced users who want to manage their upgrades themselves can turn this feature off via wp-config.php
- any version of WP is securable
- any version of WP can be made insecure
- go where they are supposed to go just by activating them (or via a plugin admin panel)
- go where you want them to go as a widget
«« Back To Stats Page