WordPress 2.5 to be released today

Discussion in 'WordPress' started by minstrel, Mar 10, 2008.

  1. minstrel

    minstrel Illustrious Member

    Messages:
    15,082
    Likes Received:
    1,243
    Best Answers:
    0
    Trophy Points:
    480
    #21
    How well does that actually work, though?
     
    minstrel, Mar 12, 2008 IP
  2. Dondon2d

    Dondon2d Peon

    Messages:
    3,193
    Likes Received:
    146
    Best Answers:
    0
    Trophy Points:
    0
    #22
    By automated update I meant about the plugins, it's not the one shown by Dean though. Let me find it. I always use Fantastico for phpBB updates, don't know it does not work properly for Wordpress :\
     
    Dondon2d, Mar 12, 2008 IP
  3. Houdy

    Houdy Peon

    Messages:
    267
    Likes Received:
    18
    Best Answers:
    0
    Trophy Points:
    0
    #23
    Still running 2.1 and tagging with UTW and happier than a pig in sh$%, upgrading WP isn't all its cracked up to be!
     
    Houdy, Mar 12, 2008 IP
  4. minstrel

    minstrel Illustrious Member

    Messages:
    15,082
    Likes Received:
    1,243
    Best Answers:
    0
    Trophy Points:
    480
    #24
    And now that you've just announced this to the world, in a curiously proud way, let's see how long it takes before some hacker exploits one of the known vulnerabilities pre version 2.33. :rolleyes:
     
    minstrel, Mar 12, 2008 IP
  5. victorqd

    victorqd Well-Known Member

    Messages:
    521
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    105
    #25
    yeah its really frustrating.Thus i have left the idea of upgrade.I will do it when they settle down with some consistent version.
     
    victorqd, Mar 13, 2008 IP
  6. minstrel

    minstrel Illustrious Member

    Messages:
    15,082
    Likes Received:
    1,243
    Best Answers:
    0
    Trophy Points:
    480
    #26
    That may or may not be a bad idea. My strategy is to look at the change list: If any are security issues, upgrade now. If none are security issues, feel free to take your time.

    There is a new form of comment bot roaming these days looking for some sort of vulnerability - trying to run database queries. It's not working in my installation (2.33) but it must be looking for some known vulnerability in an earlier version.

    Caveat emptor.
     
    minstrel, Mar 13, 2008 IP
  7. Pixelrage

    Pixelrage Peon

    Messages:
    5,083
    Likes Received:
    128
    Best Answers:
    0
    Trophy Points:
    0
    #27
    True. That's the scary part. I wonder what it is that makes Wordpress so exploitable? Other open source CMS's don't have nearly this much trouble.
     
    Pixelrage, Mar 13, 2008 IP
  8. ThreeGuineaWatch

    ThreeGuineaWatch Well-Known Member

    Messages:
    1,489
    Likes Received:
    69
    Best Answers:
    0
    Trophy Points:
    140
    #28
    Maybe they need to fork the development process and have a STABLE version that includes only security updates and any major performance enhancements, and then a separate CURRENT version that includes all the half-baked bells and whistles. This way, people can track the STABLE version and get all necessary security patches without having to worry about new features breaking their themes and plug-ins and other cosmetics.
     
    ThreeGuineaWatch, Mar 13, 2008 IP
  9. ThreeGuineaWatch

    ThreeGuineaWatch Well-Known Member

    Messages:
    1,489
    Likes Received:
    69
    Best Answers:
    0
    Trophy Points:
    140
    #29
    Last week, I had someone append some encoded javascript to my index.php file on one of my blogs running v2.3.3. The box it is hosted on is very secure (not just my opinion, also that of independent security people too) so, yes, I strongly suspect there is already exploit code for v2.3.3 in the field.
     
    ThreeGuineaWatch, Mar 13, 2008 IP
  10. Pixelrage

    Pixelrage Peon

    Messages:
    5,083
    Likes Received:
    128
    Best Answers:
    0
    Trophy Points:
    0
    #30
    Good point. I think the biggest blunder of all was making the new major WP release be incompatible with UTW. What a nightmare...
     
    Pixelrage, Mar 13, 2008 IP
  11. Dondon2d

    Dondon2d Peon

    Messages:
    3,193
    Likes Received:
    146
    Best Answers:
    0
    Trophy Points:
    0
    #31
    Hackers go for the more famous and commonly used ones.
     
    Dondon2d, Mar 13, 2008 IP
  12. pipsbank

    pipsbank Banned

    Messages:
    1,187
    Likes Received:
    21
    Best Answers:
    0
    Trophy Points:
    0
    #32
    I dont really looking forward to upgrade with the new wordpress but it look cool with the new security features
     
    pipsbank, Mar 14, 2008 IP
  13. FPS_Wes

    FPS_Wes Peon

    Messages:
    69
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #33
    What ever happend to this so called release of WP 2.5?
     
    FPS_Wes, Mar 14, 2008 IP
  14. Kencake

    Kencake Well-Known Member

    Messages:
    430
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    138
    #34
    Ah once it comes out, it would be my first time updating... I hope I don't run into any weird problems.
     
    Kencake, Mar 14, 2008 IP
  15. minstrel

    minstrel Illustrious Member

    Messages:
    15,082
    Likes Received:
    1,243
    Best Answers:
    0
    Trophy Points:
    480
    #35
    The releqase has been delayed for at least a week.
     
    minstrel, Mar 14, 2008 IP
  16. Pixelrage

    Pixelrage Peon

    Messages:
    5,083
    Likes Received:
    128
    Best Answers:
    0
    Trophy Points:
    0
    #36
    if you have any stagnant domains, install WP on it, copy over your template and test out the upgrade....it will save you a lot of trouble if something goes wrong. Sure beats having it happen on your live site!
     
    Pixelrage, Mar 14, 2008 IP