x10 Home Automation - Control Lights, Irrigation, Appliances

Wordpress Version 2.0.3 Review

WordPress, the premier free open-source blogging utility, has gone through several upgrades in its life. Today it's one of the most popular blogging tools on the Internet; it's easy to use, powerful, and very versatile. It also has a very active base of skilled users who are eager to improve the product and to help out those who haven't tried it before.

Though the Strayhorn 1.5 version is the favorite for many, it is not as stable or as secure as the newest version 2.0.3. The best part of the new version is the security patch; the new "nonce" security key reduces the chances of a malicious hacker finding a way into your admin panel. Besides the security patch, though, several minor bugs have been squashed with this version. Though a major upgrade to 2.1 is due out soon, the 2.0.3 is something you should definitely download and install if only because of the security fixes, which were actually backported from the major upgrade files.

In addition to the 2.0.3 install, you should be aware that some bugs have already been found, and that a plugin will need to be installed to repair those bugs. If you modify any of the files that this patch plugin fixes, you'll need to either merge the changes with the new files or make those changes manually once again. You can find these issues by running a diff to locate changes; if the only changes you find are your own, then you're fine, and otherwise you'll need to merge them manually into the new files.

The short list of what WordPress 2.0.3 fixes includes:

?Small performance enhancements ?Movable Type / Typepad importer fix ?Enclosure (podcasting) fix ?The aforementioned security enhancements (nonces)

One mostly annoying bug shipped with 2.0.3 as well. It gives you an "Are You Sure?" dialog when you edit comments, and adds a backslash before each quotation mark in the post you're editing. Make certain to download the patch.

What's Up With The Security Problem?

The security problem seems minor, but the WordPress team is fixing it before it grows into something major. It's a bug that takes advantage of the cookie you download when you sign into WordPress. The cookie in question prevents anyone unauthorized from accessing your admin panel. It's tied to your user account, and verifies that you are the authorized administrator of the account you're working on.

The bug that's being fixed is one that takes advantage of a sociological trick. If someone created a link or a form pointing to your WordPress admin account, they might possibly be able to trick you into clicking the link. In the case of the one here, you delete a post. This sounds both minor and highly unlikely; but a small crack in the door can be exploited later by a dedicated hacker. And this is also the kind of bug that, a few years ago, allowed a hacker access to the Microsoft databases, from which he stole portions of the Longhorn and other codes. So yes, you do need to take it seriously.

WordPress had ensured you were safe from this kind of hacking by using a utility called HTTP_REFERER. But this utility has some issues. For instance, with JavaScript in Internet Explorer, it can be spoofed. In addition, certain firewalls and proxies can strip the information it's supposed to carry out, causing some people to be unable to use their WordPress admin accounts the way they're supposed to be able to.

Now, instead of the HTTP_REFERER, a nonce is used; this is a number used once. It's like a password that changes every twelve hours, and is valid for twenty-four hours. The nonce is unique to the specific WordPress install being used, the WordPress user logged in, the action, the object of the action, and the 24-hour time of the action. When any of these is changed, the nonce is no longer valid. All plugin authors will have to ensure the nonce is added to their forms and other interactive capabilities that may be affected.

Upgrading from WordPress 2.0.2 to 2.0.3

As with any upgrade, the first thing you should do is back up everything: the files in your WordPress directory, the database plugin with any changes, and any data you have added should be backed up as well. In addition, it might be a good idea to do a second backup of your entire WordPress directory just in case something goes wrong with your install.

Now remove the wp-admin directory entirely. Also remove the wp-includes directory, except for any translation and language files or directories you may have added; add these files to the backup files you created earlier. Finally, remove all the files where WordPress is installed with the exception of the file http://wp-config.php.

Now you're ready to start your install. Download and unpack the 2.0.3 version in a separate install directory. You want to make sure you can control files and directories you copy over. Now install the new wp-admin and wp-includes directories.

Install the rest of the files of the top directory, with the exception of the http://wp-config-sample.php file.

Now enter the admin panel. You should see the following message: "Your database is out of date. Please upgrade." Follow the link provided to update the database, and follow the directions there. Now remove the files wp-admin/upgrade.php and wp-admin/install.php. Download the plugin fix; add it and activate it. Replace your backup files where they need to be, and do the comparisons if you've modified any of your earlier files. This should take care of the whole thing.

For geeks, there is also an upgrade package that only includes the changed files. Look for it under Changes Diff (2.0.2 > 2.0.3). It consists of a zip file that is much quicker to install, but you should be certain you can handle it before using it.

http://www.theinternetone.net

MORE ARTICLES:

Autonomic Controls Announces Touch Panel Software For Home Theater and Whole-House Audio
Autonomic Controls, the leading provider of media integration software for AMX, Crestron and HAI systems has announced a new product that enables remote access to digital music and video media using UMPC's and touch panels.

Ebay Auction Software: Automated Gold Mining For Auctions On Ebay And Elsewhere Using Software
You may already know how to grab great bargains on eBay and other auction websites because the titles are misspelled. In fact, you may spend a great deal of time hunting around for them, one by one. You may even know of a website or two that offers you a free list of these misspelt auction listings. Do you ever wonder if you're missing out on a bunch of them, just because it's too tedious to plow through them all by hand?

Control The Air Flow Of Your Home: Ceiling Fan Remote Control
If you market something that is effective but caters towards convenience then you are on a winner at the moment. People specifically buy convenient items for their household because they just want to unwind at home after a long and stressful day?s work. They do not want to be bothered with technical things anymore because their hectic lifestyle does not allow it. Take the TV remote control for example. Why get up to change the channel if you do not have to? They will pay anything for a little extra comfort, which is why the ceiling fan remote control has been such a hit!

Strategic Healthcare Programs (SHP) and Thornberry Ltd Announce Automated Interface between Healthcare Software Programs
Web interface enables SHP clinician-level analysis of NDoc® clinical point of care patient data. New automated web interface speeds the transfer of data from the NDoc clinical system to Strategic Healthcare Programs (SHP) software. Web services technology transfers OASIS assessments with clinician-level detail from NDoc to the SHP database.

Automated Forex software review
For the time being automated trading in forex is the buzzword.

SmartLabs Introduces NetLinc - INSTEON Central Controller: Turns iPhone into a Home Automation Touch Screen
SmartLabs, Inc. announces the release of NetLinc, a plug-in web server that puts the power of controlling an INSTEON home automation network in the palm of your hand. This revolutionary new product allows communication from an iPhone, iPod touch, the internet or any mobile Wi-Fi / web-enabled PDA or cell phone to remotely control and set timers for INSTEON devices.

Motion Sensor Home Security Cameras
Many security cameras do not record well in the dark. This implies that a slinky presence can get away with any deed as long as the dark provides a shield. This is where a security camera with motion sensor comes in. The motion sensor triggers an automatic response as soon as it picks up a movement in its vicinity. Some of these cameras come equipped with floodlights that power up as soon as a motion is registered, flooding the area with light and catching the culprit in the act. This is further enhanced by the fact that a security camera with motion sensor often offers a connection to a TV or computer monitor. As soon as the sensor is triggered, images of the perimeter can be captured immediately.

AlterPoint and Compliance Spectrum Partner to Automate Network Compliance Controls across Multiple Regulatory Mandates
AlterPoint, Inc., a leading provider of open network management software, today announced that it has partnered with Compliance Spectrum, a leading provider of governance, risk and compliance (GRC) solutions, to help enterprises ensure the continuous compliance of networks with multiple regulatory mandates. The agreement will pair Compliance Spectrum's in-depth policy controls solution with AlterPoint's automated network governance solution, enabling network stakeholders to proactively reduce compliance exposures and mitigate liability.

Windows Macro - Create Macros To Automate Common Tasks
Want to automate and record mouse clicks and keystrokes? Want a program that records macros on Windows OS?

SmartLabs Introduces HouseLinc 2 - INSTEON Desktop Software w/ USB Interface: Easy INSTEON and X10 Home Automation Control and Management from a PC
SmartLabs, Inc. announces the release of HouseLinc 2, the next generation of the award-winning the HouseLinc - INSTEON Desktop Software. Building on the original software designed for the management of INSTEON-compatible devices in the home, HouseLinc 2 includes new features like background link management, enhanced product support and an all new look. It is available as a kit for first time users or as a free upgrade kit for original HouseLinc owners. Each kit comes with a required HouseLinc 2-enabled INSTEON PowerLinc Modem.

Outdoor Motion Detectors & Motion Sensor Lights
Who goes there? In this day and age, it might not be feasible for you to hire a 24-hour watchman to guard your house or property, but we can provide you with the next best thing

Tomorrow Incorporated Lights Up the Holidays with Motion-Sensing Britepack(TM) Apparel
New consumer products company ushers in next craze in technology-forward and trend-setting school accessories.

Allied Home Mortgage Implements Automated Compliance Controls Across Hundreds of Branches with ComplianceEase Solutions
One of the nations largest mortgage broker networks automates its compliance risk management with state-of-the-art technology.

Skylink, Leader in Wireless Automation Products, Announces INSTEON Motion Sensor
Skylink unveils the release of the Skylink INSTEON Wireless Motion Sensor, a battery powered motion detection module for indoor and outdoor applications. It reliably communicates via INSTEON radio frequency (RF) to turn INSTEON compatible devices or scenes on and off. Skylink has assigned Smarthome (www.smarthome.com) as Master Distributor.