wordpress

upgraded to WordPress 2.5

March 30, 2008

Thus far everything seems to be working smoothly. All my plugins are working fine that I can see (knock on wood). The new layout and aesthetics are quite clean and nice. I also like the widgetized Dashboard. I’ll just jump in start using it and see what my thoughts are after a week.

Read the full article →

wavatars updated

March 26, 2008

Shamus announces an update to his wavatars plugin. However, as noted earlier, the pending release of WordPress 2.5 will likely break most avatar plugins due to its built-in avatar support. It think it makes more sense to wait for the post-upgrade version of wavatars for the time being; I still would like to see a [...]

Read the full article →

close the barn doors

March 16, 2008

I thought I was done with this, but it seems that WordPress v2.3.3 did not fix the injection spam loophole; I was just hit by another injection spam attack on my previous post (now cleaned up). I’ve closed user registration on the blog for now, though of course you needn’t register to comment thanks to [...]

Read the full article →

WP 2.3.3 does not close injection spam loophole

March 16, 2008

Over a month ago, I’d upgraded to WordPress v2.3.3 which addressed a security hole that was permitting spammers to “inject” spammy links directly into posts via xmlrpc.php, and thereby avoid the “nofollow” attribute that is automatically applied to links in comments (to deprive comment spammers of the PageRank mojo they seek). The spam was surrounded [...]

Read the full article →

why did MT lose and WP win?

March 13, 2008

ma.tt responds to Anil Dash by pointing out that WordPress is fully open source: WordPress is 100% open source, GPL. All plugins in the official directory are GPL or compatible, 100% open source. bbPress is 100% GPL. WordPress MU is 100% open source, GPL, and if you wanted you could take it and build your [...]

Read the full article →

blog CMS infrastructure

March 11, 2008

Moveable Type is making a play for WordPress users to “upgrade”, with Anil Dash firing a broadshot across Automattic’s port side. Dash makes some good points but fails to articulate a compelling reason to switch, primarily because the basic premise is flawed, that WordPress is hard to upgrade and that its architecture is an impediment [...]

Read the full article →

WP 2.5 has built-in gravatar support

March 4, 2008

Seems that WordPress v2.5 (which will be out this month) will include support for Gravatars by default: Theme Authors: Adding Gravatars to Your Theme The function to add Gravatars to your theme is called: get_avatar. The function returns a complete tag of the Avatar. The function get_avatar is setup as follows: function get_avatar( $id_or_email, $size [...]

Read the full article →

wordpress folksonomy progress

February 15, 2008

The experiment of adding Scott’s WP_Folksonomy plugin to my blog has been a success so far. My blog, haibane.info, is by no means a giant traffic draw but it does have enough that the userbase has been adding some tags of their own. I have at least one user (Scott himself?) who reliably adds tags [...]

Read the full article →

injection spam

February 7, 2008

I’ve upgraded to v2.3.3 which closes a security hole that was permitting spammers to “inject” spammy links directly into posts via xmlrpc.php, and thereby avoid the “nofollow” attribute that is automatically applied to links in comments (ie, the usual mechanism to deprive comment spammers of the PageRank mojo they seek). The spam was surrounded by [...]

Read the full article →

Lorelle pushes Gravatars

December 31, 2007

WordPress maven Lorelle has a post about creating gravatars and adding them to your blog. I left a comment in advocacy of Shamus’ and Scott’s alternatives. One thing I didn’t mention was that using a locally-generated solution like Wavatars or MonsterID also lends a kind of consistency to the avatars that show up, which in [...]

Read the full article →