Is WordPress Safe Part 2.

by: WanderingTechy September 7, 2009

The most common excuse I can find for not upgrading is that it breaks plugins.  Sorry but security is more important than playing a YouTube video.   This blog has gone from V6 of Wordpress all the way up to 2.8.4 when a plugin broke (once) I fixed it.
Now the wordpress team cannot test every single [...]

Is WordPress Safe?

by: WanderingTechy September 7, 2009

Recent posts on news sites and famous blogs are starting to question the safety of WordPress.
For example The Register, The Guardian and Some guys called Robert Scoble who is apparently a famous tech blogger.
The first thing that struck me about these posts.  Here is a quote from Robert Scoble.
“A few weeks ago some hackers broke [...]

phpList exploit and ModSecurity Rule

by: WanderingTechy February 9, 2009

In case you weren’t aware phpBB.com was breached using an exploit in phpList. Here is a quick and very dirty rule to protect your servers while you get phpList updated.
SecRule ARGS_NAMES “ConfigFile” “deny,log,auditlog,redirect:http://127.0.0.1″
Anyone passing the Argument ConfigFile via the URL needs shooting >.<
Please note the fix that phpList have released fixes this problem but [...]