ENGINEERING LEADER

WordPress Developer

Speaker

Unapologetic Punk

Mitch Canter

WordPress 3.0.5 is Released

Mitch Canter

Reading time: 1 minute

Another security release – here’s what it fixes:

  • Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer additional sanitization to various fields. Affects users of the Author or Contributor role. (r17397, r17406, r17412)
  • Fix XSS bug: Preserve tag escaping in the tags meta box. Affects users of the Author or Contributor role. (r17401)
  • Fix potential information disclosure of posts through the media uploader. Affects users of the Author role. (r17393)
  • Enhancement: Force HTML filtering on comment text in the admin (r17400)
  • Enhancement: Harden check_admin_referer() when called without arguments, which plugins should avoid. (r17387)
  • Update the license to GPLv2 (or later) and update copyright information for the KSES library.

Go forth, and update!

  • The State of WordPress Plugin Development

    The State of WordPress Plugin Development

    Reading time: 4 minutes

    Seeing all the fun plugins you guys posted to the site today has reminded me of a topic that I’ve both seen published on other sites as of late and been pondering myself lately – the authors.  I’ve co-created a plugin, and it’s currently residing well in the plugin repository, but it hasn’t been all…

  • The Hidden WordPress Options Panel

    The Hidden WordPress Options Panel

    Reading time: 1 minute

    Did you know that there’s a hidden options panel in WordPress? It’s one page you can visit that will allow you to set every single option available to you on your site – even some of the hidden ones that are set via plugins and/or other functions.