Another Useful WordPress Security Plugin

WordPress Exploit Scanner 0.1 has been released, in response to a comment on a recent thread about old versions of WordPress sites being hacked. You may have spotted this in your WordPress dashboard. Problem is, it only works for v2.5.1+, so it will only be useful in keeping you safe going forward. I just installed it on a basic WordPress site with K2, and got the following results:

Suspect Plugins
These plugin files look suspect. Please verify they are files you uploaded.

  1. ../themes/k2/app/includes/k2-sbm-loader.php

No suspicious posts or comments found

Hooray! No suspicious text found in your posts or comments tables!

For a brand new plugin that’s not bad, but throwing a false negative on such a popular theme is something that will need to be addressed. I’ll be keeping an eye on this one.

WordPress 2.5 is Out!

This may be the biggest upgrade to WordPress since the jump from 1.5 to 2.0. There are numerous changes on the front-end and the back-end. The admin panel has probably seen the most radical changes, as it has been completely redesigned from the ground up. And they redesigned wordpress.org to boot! So that’s why it took 6 months for v2.5 to come out… :)

A quick round up of the new features:

  • Multi-File Uploading
  • Upgrade Plugins with a single click
  • Photo Galleries
  • A Dashboard you can Customize
  • Salted Passwords and Encrypted Cookies to increase the security of the project
  • A Media Library of all your uploaded assets
  • A WYSIWYG that doesn’t mess up your code (zomg!)
  • Protection against Concurrent Post Editing
  • Writing in Full Screen Mode
  • And a search engine that covers both posts AND pages (long the domain of a plugin)

You can read all about it in the official announcement.