Latest TweetsWordPress and the Blank Target Vulnerability (aka rel noopener + noreferrer): perishablepress.com/wordpress-… #WordPress #security #html
Perishable Press

Perishable Press Upgraded to WordPress 2.3.3

Just a note to announce a site upgrade to WordPress 2.3.3. The upgrade went well, but overall server performance continues to suffer. I am aware that some people are experiencing difficulties leaving comments and even accessing the site in general. Rest assured, I am working with my hosting company, A Small Orange, to get everything back on track and running smooth. In the meantime, I appreciate your patience as we work to resolve the issues, restore full functionality, and return to reliable performance.

Please share any helpful observations regarding the site here. — Thanks!

Jeff Starr
About the Author Jeff Starr = Fullstack Developer. Book Author. Teacher. Human Being.
Archives
8 responses
  1. Hi,

    I just wanted to tell you that when I submitted a comment at this post, a download window appeared and I could download the wp-comments php file.

  2. Well, I did not download the file so I don’t know whether the actual php code is included in the file.

    But if it were to be downloaded by someone else, I doubt that downloading the wp-comments.php will allow someone to exploit your site…unless they can get the wp-config.php!

  3. Jeff Starr

    Hi Ibnu,

    Sorry for the weird behavior.. Things have been utter chaos around here for the past week or so. The good news is that server performance finally seems to be improving. I see that your comment did go through on the “Blacklist Candidate” post.. hopefully the contents of the wp-comments.php were not included with the file!!

  4. Jeff Starr

    Downloading PHP files upon leaving a comment is one of the symptoms of the myriad server issues that we have been trying to fix. Apparently, when the server’s PHP memory runs low, certain pages are downloaded instead of processed. It’s a long story, trust me. The good news is that the downloaded PHP files appear to contain consistently blank contents (whew!). As far as know, it is not possible to download the wp-config.php — that would definitely suck! In any case, I appreciate the heads up.. please let me know if you continue to experience any problematic site behavior.

  5. Mister Gibson August 14, 2008 @ 12:52 pm

    Wow that sounds scarey, i’ve heard all sorts about people being able to hack wordpress, that’s why i keep my wordpress updated with the latest version, perishable please don’t take this the wrong way but the grey writing on a black background really hurts my eyes, it makes me feel like im getting headache, just a suggestion, it’s not good for your readers, regards, mick..ps my site is dofollow too if you want to call by and comment..

  6. Jeff Starr

    Thank you for the feedback, Mister Gibson. I hear your concerns and assure you that I am working diligently on a new default theme for the site. Lord willing, the new design will feature strongly contrasted text and nice, big font sizes. In the meantime, there are several options for users who may have trouble reading the contents of this site or any other:

    • disable stylesheets in your browser
    • use a JavaScript bookmark to toggle the CSS styles of problematic pages
    • highlight the text using Ctrl+A

    ..and specifically for this site:

    • use the sun icon in the lower-right corner of the screen to brighten things up a bit
    • select an alternate theme (currently more than 16 available)

    I know the current site is hard to read for some people; fortunately there are several great options for easier viewing — I hope one of them works for you! :) Thanks again for voicing your concerns :)

    Regards,
    Jeff

  7. Mister Gibson August 17, 2008 @ 9:12 am

    Hey jeff, the sun button on the bottom right has sorted it right out, that looks much much better, regards, mick…

  8. Jeff Starr

    Glad to hear it, Mister Gibson! Thanks for the follow-up :)

[ Comments are closed for this post ]