Comments on: WordPress 2.3.3 Is A Security Fix http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix WordPress Guides, Tips And Strategies For Successful Blogs Fri, 10 Feb 2012 23:22:56 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Clement Nyirenda http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12737 Clement Nyirenda Thu, 21 Feb 2008 05:19:25 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12737 I have uploaded the xmlrpc.php file. I will wait for version 2.5 for a full upgrade I have uploaded the xmlrpc.php file. I will wait for version 2.5 for a full upgrade

]]> By: TheSpot-er http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12633 TheSpot-er Sun, 10 Feb 2008 21:04:24 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12633 Thanks guys, I tried earlier version of the plugin and decided not to use it. Perhaps it is worth to re-visit. Alex Thanks guys,

I tried earlier version of the plugin and decided not to use it. Perhaps it is worth to re-visit.

Alex

]]> By: Epiphany http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12632 Epiphany Sun, 10 Feb 2008 18:32:10 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12632 OH GOOD, Lyn, you're welcome! I'm so glad you found the plugin as useful I do. :) I do my upgrades manually using the plugin also (which is still super fast). Just make sure you can actually <i>open</i> those back up files it provides for you, because for some reason I seem to have trouble with them (the format maybe, I don't know). That's why I mentioned saving the database separately so you are sure you have a copy. I suppose if you wanted to be extra EXTRA careful you could also save your WP-Content folder separately too (so you have all your plugins and your theme with all your modifications). Anyway, I'm so happy you found it useful. <i>-Epiphany</i> <em>Epiphany's last blog post..<a href='http://feeds.feedburner.com/~r/InspiredEpiphany/~3/228539285/progress-income-report-january-2008' rel="nofollow">Progress & Income Report - January 2008</a></em> OH GOOD, Lyn, you’re welcome! I’m so glad you found the plugin as useful I do. :) I do my upgrades manually using the plugin also (which is still super fast). Just make sure you can actually open those back up files it provides for you, because for some reason I seem to have trouble with them (the format maybe, I don’t know). That’s why I mentioned saving the database separately so you are sure you have a copy. I suppose if you wanted to be extra EXTRA careful you could also save your WP-Content folder separately too (so you have all your plugins and your theme with all your modifications). Anyway, I’m so happy you found it useful. -Epiphany

Epiphany’s last blog post..Progress & Income Report – January 2008

]]> By: Lyn http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12630 Lyn Sun, 10 Feb 2008 15:57:10 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12630 Epiphany, Thank you so much. What a brilliant plug in. One of the very few that tells you what to do! And The-Spot-er, if you choose the manual option (which I did, because I wanted to know what it was doing as it went throught the process) it makes the backup point very clear. You can't miss it. Also I did find out how to backup the MySql in hostgator first, but I think the plug in instructions would have taken care of it. And..... drumroll please..... the update appears to have taken care of the error messages I had with 2.3.1. So all in all I am really pleased. Thank you both for your help. Lyn Epiphany,

Thank you so much. What a brilliant plug in. One of the very few that tells you what to do! And The-Spot-er, if you choose the manual option (which I did, because I wanted to know what it was doing as it went throught the process) it makes the backup point very clear. You can’t miss it. Also I did find out how to backup the MySql in hostgator first, but I think the plug in instructions would have taken care of it.

And….. drumroll please….. the update appears to have taken care of the error messages I had with 2.3.1. So all in all I am really pleased. Thank you both for your help.

Lyn

]]> By: TheSpot-er http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12623 TheSpot-er Sat, 09 Feb 2008 23:28:10 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12623 Yes, that plugin is good - but as you mentioned, people need to be aware it doesn't create a backup! So backup first. Yes, that plugin is good – but as you mentioned, people need to be aware it doesn’t create a backup! So backup first.

]]> By: Epiphany http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12622 Epiphany Sat, 09 Feb 2008 21:39:54 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12622 It's very easy to upgrade Wordpress using the <a href="http://techie-buzz.com/wordpress-plugins/wordpress-automatic-upgrade-plugin-update.html" rel="nofollow">automatic upgrade Wordpress plugin</a>. It only takes a couple minutes and it does all the work for you! :-) I use it every time I have to upgrade. I do personally recommend manually saving a copy of your MySQL database separately though too (it can never hurt to have multiple copies). Even though the plugin gives the ability to download a saved copy of your database, I once had trouble opening that file when I needed it... so now I'm just extra cautious. All the best, <i>Epiphany</i> <em>Epiphany's last blog post..<a href='http://feeds.feedburner.com/~r/InspiredEpiphany/~3/228539285/progress-income-report-january-2008' rel="nofollow">Progress & Income Report - January 2008</a></em> It’s very easy to upgrade WordPress using the automatic upgrade WordPress plugin. It only takes a couple minutes and it does all the work for you! :-) I use it every time I have to upgrade. I do personally recommend manually saving a copy of your MySQL database separately though too (it can never hurt to have multiple copies). Even though the plugin gives the ability to download a saved copy of your database, I once had trouble opening that file when I needed it… so now I’m just extra cautious.

All the best,
Epiphany

Epiphany’s last blog post..Progress & Income Report – January 2008

]]> By: Tips For Improving Your WordPress Skills | Uncategorized | Search For Blogging http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12591 Tips For Improving Your WordPress Skills | Uncategorized | Search For Blogging Thu, 07 Feb 2008 15:56:31 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12591 [...] The newest release of WordPress has been launched this weekend. Read Alex Sysoef’s WordPress 2.3.3 Is A Security Fix [...] [...] The newest release of WordPress has been launched this weekend. Read Alex Sysoef’s WordPress 2.3.3 Is A Security Fix [...]

]]> By: TheSpot-er http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12588 TheSpot-er Thu, 07 Feb 2008 14:58:02 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12588 Lyn, Your hosting account should provide you with Backup option. Simply create a backup of your blog's database. If need help I would recommend looking through your host support docs - I can guarantee they explain how to get it done. Upgrade from 2.2 to 2.3 is not a problem but 2.3 introduced some big changes to the way it handles posts and added tags as native option. Many plugins due to those changes became incompatible with 2.3. If you are getting errors (which I didn't see) it should indicate in error a path to plugin. Deactivate that plugin and either install a version of it compatible with 2.3+ or replace its functionality. Lyn,

Your hosting account should provide you with Backup option. Simply create a backup of your blog’s database. If need help I would recommend looking through your host support docs – I can guarantee they explain how to get it done.

Upgrade from 2.2 to 2.3 is not a problem but 2.3 introduced some big changes to the way it handles posts and added tags as native option. Many plugins due to those changes became incompatible with 2.3. If you are getting errors (which I didn’t see) it should indicate in error a path to plugin. Deactivate that plugin and either install a version of it compatible with 2.3+ or replace its functionality.

]]> By: Lyn http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12586 Lyn Thu, 07 Feb 2008 14:48:41 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12586 Do you have any information or advice on upgrading from 2.3.1? I have errors in that, with the database I think, although the blog displays ok. I would love to get rid of them, but don't have a clue. I did a kind of manual update from 2.2 to get to 2.3.1 and I think that caused the problem. But I find the wordpress forums far too geekie to understand. I am not sure what to do. I suppose I could paste copies of the posts etc, and reload from the very beginning? Would that be easier and more reliable? You mention back up. I can download the complete blog to back it up of course. But I have no idea how the blog interacts with the MySql database, and my ignorance makes me nervous. It's the blog at www.ibizreviews.com <em>Lyn's last blog post..<a href='http://www.ibizreviews.com/internet-marketing/geggvgcx/' rel="nofollow">geggvgcx</a></em> Do you have any information or advice on upgrading from 2.3.1? I have errors in that, with the database I think, although the blog displays ok. I would love to get rid of them, but don’t have a clue. I did a kind of manual update from 2.2 to get to 2.3.1 and I think that caused the problem. But I find the wordpress forums far too geekie to understand. I am not sure what to do. I suppose I could paste copies of the posts etc, and reload from the very beginning? Would that be easier and more reliable?

You mention back up. I can download the complete blog to back it up of course. But I have no idea how the blog interacts with the MySql database, and my ignorance makes me nervous.

It’s the blog at http://www.ibizreviews.com

Lyn’s last blog post..geggvgcx

]]> By: TheSpot-er http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix/comment-page-1#comment-12552 TheSpot-er Tue, 05 Feb 2008 16:46:07 +0000 http://www.howtospoter.com/web-20/wordpress/wordpress-233-is-a-security-fix#comment-12552 Frank - correct. For exploit to work that person would have to have an active account on your blog to edit posts of other users on same blog. That is what I have read from the developers release as well. I don't see it as huge issue for blogs with registration not open but since this rpc exploit - I would personally got the safe route and upgrade the file at least. Frank – correct. For exploit to work that person would have to have an active account on your blog to edit posts of other users on same blog. That is what I have read from the developers release as well. I don’t see it as huge issue for blogs with registration not open but since this rpc exploit – I would personally got the safe route and upgrade the file at least.

]]>