WP-Forum Plugin Security Bulletin
WP-Forum Plugin Security Bulletin
If you are currently using the latest release of the WP-Forum plugin, listen up. The websec security team has discovered a vulnerability within this plugin that can be exploited by malicious users to conduct SQL injection attacks. According to Secunia: Input passed to the “user” parameter in the WordPress installation’s index.php script (when “forumaction” is […]
If you are currently using the latest release of the WP-Forum plugin, listen up. The websec security team has discovered a vulnerability within this plugin that can be exploited by malicious users to conduct SQL injection attacks. According to Secunia:
Input passed to the “user” parameter in the WordPress installation’s index.php script (when “forumaction” is set to “showprofile” and “page_id” to a page with the “” tag) is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
This vulnerability when exploited successfully allows the individual to retrieve usernames, password hashes, and email addresses for all users, including administrators. However, the user has to have knowledge of the proper database table prefix. This vulnerability has been confirmed in version 1.7.4 which is currently the most recent version available for download.
Description:
WP-Forum is a WordPress plugin that enables you to have a forum directly attached to your WordPress installation. The plugin is based on Simple Forum.
[EDIT] We wish the plugin author was notified of the vulnerability and given a chance to fix it, but there was no mention of it in the advisory. So until a fix is released, we suggest that the plugin is disabled and removed.
[EDIT] As pointed out in the comments, not the same as Simple Forum WP Plugin.
Mobile Phone optimized WordPress
Mobile Phone Optimized WordPress: Thanks to a tip from Amit, I found a quick and painless way to optimize a WordPress blog (or any blog with a feed for that matter) for use with a mobile phone. The trick is to use Google’s excellent mobile news readers to display your blog. The resulting content is […]
Mobile Phone Optimized WordPress: Thanks to a tip from Amit, I found a quick and painless way to optimize a WordPress blog (or any blog with a feed for that matter) for use with a mobile phone. The trick is to use Google’s excellent mobile news readers to display your blog. The resulting content is not only lightning fast, it is also well formatted and relatively easy to navigate. To see for yourself, craft the following URI in your browser.
http://www.google.com/reader/m/view/feed/[Your Feed URI]
This is the optimized mobile version of Weblog Tools Collection. Once you have the feed, just create a link on your blog for readers to follow and/or bookmark. Of note is the excellent WordPress Mobile plugin from Alex for those who like a one stop shop.
Free Fonts Of The Month: Newcastle, Anziano
Every now and again we take a look around, select “fresh” high-quality free fonts and present them to you in a brief overview. The choice is enormous, so the time you need to find them is usually the time you should be investing in your current projects. We search for them and we find them, so you don’t have to.
This month we’d like to present you Newcastle, Anziano, Sovereign and Inconsolata. Please read the license agreements carefully before using the fonts — they can change from time to time.
You can find over 150 more high-quality fonts in
- the article 40 Excellent Free Fonts For Professional Design,
- the article 80 Beautiful Typefaces For Professional Design,
- and in our section Fonts.
Every now and again we take a look around, select “fresh” high-quality free fonts and present them to you in a brief overview. The choice is enormous, so the time you need to find them is usually the time you should be investing in your current projects. We search for them and we find them, so you don’t have to.
This month we’d like to present you Newcastle, Anziano, Sovereign and Inconsolata. Please read the license agreements carefully before using the fonts — they can change from time to time.
You can find over 150 more high-quality fonts in
- the article 40 Excellent Free Fonts For Professional Design,
- the article 80 Beautiful Typefaces For Professional Design,
- and in our section Fonts.
Free Fonts Of The Month
Newcastle
The link was removed due to copyright infringement.
Freefont.de released Newcastle as the “Free font of the month”. Newcastle is available as TrueType format and PostScript Type 1 format for PC and PostScript Type 1 for Mac.
Anziano™ SC (Fountain)
Small caps of the Stefan Hattenbach’s Anziano typeface is available for free download. Formats: Mac PS, PC PS + TrueType.
Diavlo (new release)
Jos Buivenga has released an improved version of his font Diavlo. The new release contains 5 weights: Light, Book, Medium, Bold and Black. Among new features are the extended language support (Latin, Central European, Croatia, Romanian, Icelandic, Turkish and Esperanto are now supported), improved glyph shapes (such as S, s, W, w, f, t, diactitics, fractions etc.) and extended kerning (over 3.200 kerning pairs).
Sovereign
Sovereign is a distinctive font from Nick Cooke’s G-Type foundry. Serif Caps and semi-serif lower case characters make for an unusual blend but one which works well, particularly at larger display sizes. Tapered stems and calligraphically influenced serifs give plenty of movement and character. Mac PostScript and PC TrueType.
Inconsolata
Inconsolata is a monospace, humanist sans design. Some details will be most apparent in print, such as the subtle curves in lowercase “t”, “v”, “w”, and “y”. Inconsolata also borrows “micro-serifs” from some Japanese Gothic fonts, which enhance the appearance of crispness and legibility. Available in the OpenType-format.
Matt Cutts On Securing WP
Matt Cutts has published an article which highlights three different ways to secure your WordPress installation. The first tip involves locking down your Admin directory. Matt configures his .hatccess file so that only his IP address is allowed to access the WP-Admin directory. For the second tip, you should create a blank index.html file to […]
Matt Cutts has published an article which highlights three different ways to secure your WordPress installation. The first tip involves locking down your Admin directory. Matt configures his .hatccess file so that only his IP address is allowed to access the WP-Admin directory. For the second tip, you should create a blank index.html file to place into your wp-content/plugins directory. Not doing so allows your plugin folder to be wide open, giving nosy people an idea as to what plugins you have installed.
Matt’s third and final tip involves subscribing to the official WordPress development blog - http://wordpress.org/development/feed/ As we should all know by now, this is the best way to stay up to date.
Matt also offers a bonus tip where he suggest removing the line of code within your header.php file that publishes your WordPress version.
All of these are excellent tips. But what do you do to secure your WordPress installation?
Music has always been an excellent source of inspiration. Particularly if you are stuck with some problem you can’t find a workaround for, a beautiful song can give you a new perspective, let you see the problem from a different angle. And sometimes it’s just useful to make a break — for instance, watching some music videos.
In this post we present some unusual music videos for your monday’s coffee break. Some of the videos are thought-provoking, some of them are funny and some are bizarre. While many of them are well-known, you’ll probably find some videos you’ve never watched before. The videos all perfectly to the music which is being played in the background. Hopefully, everyone will find something new and inspiring for himself/herself. Please notice that you might need to watch some videos at least twice to get the idea behind them.
You might want to read the descriptions of the videos — they are provided below every link. The screenshots often don’t reveal that much about the videos they stand for.
Music has always been an excellent source of inspiration. Particularly if you are stuck with some problem you can’t find a workaround for, a beautiful song can give you a new perspective, let you see the problem from a different angle. And sometimes it’s just useful to make a break — for instance, watching some music videos.
In this post we present some unusual music videos for your monday’s coffee break. Some of the videos are thought-provoking, some of them are funny and some are bizarre. While many of them are well-known, you’ll probably find some videos you’ve never watched before. The videos all perfectly to the music which is being played in the background. Hopefully, everyone will find something new and inspiring for himself/herself. Please notice that you might need to watch some videos at least twice to get the idea behind them.
You might want to read the descriptions of the videos — they are provided below every link. The screenshots often don’t reveal that much about the videos they stand for.
Music Videos
Unkle - Rabbit in your Headlights
What is this guy whispering? Who is the guy? And what is he doing in the tunnel? You need to watch this video till the very end. You won’t be disappointed.
Jason Forrest - “War Photographer” (2005)
These freaking vikings are both cool and strange. But it doesn’t make them less sympathetic. And they can play both on drums and guitars pretty well.
Bat for Lashes — What’s A Girl To Do
00:38 is the best moment in the history of music videos. Well, this one is kind of scary. Hares driving on the bicycles and clapping their hands at the same time? A masterpiece from the year 2007.
Nick Cave & Kylie Mingoue — Where The Wild Roses Grow
Probably one of the most beautiful music videos ever made. There is no need for words. Watch it.
Rob Dougan — Clubbed To Death
Incredible editing and directing. So symbolic, so powerful.
Fujiya & Miyagi - Ankle Injuries
What about a music video which is made with thousands of 6-sided dice? Exactly. And the music fits perfectly.
Radiohead – “Street Spirit (Fade Out)” (1995)
The video for this song was shot using different film frequencies, allowing various actions to unfold at different rates within the same frame. The emotional effects of this practice range from silly to unsettling. Try not to watch this video too many times; it begins to feel a little more disturbing each time. [Jeff Shreve]
Sia – “Breathe Me” (Quicktime)
The production of this video clip took several thousands Polaroid photos. The result is… at least unusual.
Citizens Here and Abroad - You Drive and We’ll Listen To Music
Jason Koxvold’s video pairs crashing cars with crashing guitars. Rock. Very well executed and perfectly edited. Must see.
Moby - Porcelaine
Such a beautiful song. One of the videos you are amazed about once, and you never forget again.
The Strokes - You Only Live Once (Imeem)
With a Hundred ways to do a dozen things, why not try it all? Directed by Warren Fu.
Arctic Monkeys - A view from the afternoon (Quicktime version)
A song about a passion and unstoppable willingness to do what you love. Simple, yet so effective.
“Glosoli” - Sigur Ros
“Glosoli” depicts a young drummer boy gathering up the other denizens of what appears to be an adult-free utopian land, and leading a revolution to freedom. So beautiful and so touching. Don’t miss the last scene.
The Avalanches - “Frontier Psychiatrist”
This is freaky. Sometimes the most obvious concept for a video also turns out to be the best. The ghost choir is the best. Except for the nightmarish old-man turtle, of course. [via PitchForkMedia]
Royksopp - Remind Me
We’ve featured this movie already, but it’s worth mentioning it in this post. You can watch it dozens times and still not catch everything. A day in the life of an average working Jill, broken down into its minutest component parts. The unstated joke: mankind has erected immense, resource-devouring systems of almost incomprehensible complexity just so you can sit in your cubicle.
Blur - “Coffee & TV” (Quicktime)
Actually, this song is about a dancing milk carton. However, its adventures are funny, cute, but with a pleasing streak of cruelty. The milk-carton protagonist even has its own fan site.
Boards of Canada: “Dayvan Cowboy” (Quicktime)
It’s pretty easy to get wrapped up in the grainy, existential pulchritude of this thing and completely miss the cheeky self-reference. So, um, where can one surf in Canada? Directed by Melissa Olson.
Move Your Feet - Junior Senior
That’s weird. And that’s what makes it special. A pixel-based video clip.
Daft Punk - One More Time
Probably one of the most colorful animated music videos of all time. Daft Punk, one more time.
Xploding Plastix - Joy Comes In The Morning
A music video about the world we live in and the world we’d like to live in.
Unkle - Eye For Eye
A haunting track with a creepy animation, which won an award at the Edinburgh International Film Festival. Nasty weirdness drops from the sky and then moves on.
Vitalic - Poney
Flying dogs in light of a laser and in slow-motion. Nobody has ever done something like this before.
Justice “D.A.N.C.E.” (Quicktime)
Sometimes even T-Shirts can speak. For instance, in this music video. “D.A.N.C.E.” was nominated for “Video of the Year at the 2007 MTV Video Music Awards. On the first of November Justice received the “Video Star” award at the European Music Awards in Munich.
Forss - “City Ports”
The visualization fits perfectly to the music.
Radiohead - Just
What could the man on the street possibly have said?
Prodigy - Out Of Space
Prodigy’s “Out of Space” is probably one of the weirdest videos ever created. Welcome back to the 90s — this is how some videos looked like then. The song which was * for the whole generation.
The Verve - Bitter Sweet Symphony
A video everybody has seen. And everybody would see again.
RJD2 - Work It Out
This guy just want to have some fun with his crooks and his skateboard. A one-shot-video from 2007.
