Tagged and Bagged: hack, Wordpress
…especially if it involves your reputation. If you want to make a mark on the net and not have that being a “black mark”, then you want to upgrade your Wordpress site to version 2.6.2 to avoid an embarassing hack. Thanks to Ray for his notice of the Wordpress team’s upgrade, as I like to keep this place secure for you to curse and swear in, of course. Do it, but back up first.
And let’s not forget, to ensure that you don’t get hacked because of a recently discovered security hole. Not saying there was one, but there could always be one!
WP is so easy to upgrade though, not any real sweat involved
Its easy to describe the upgrade as well. I posted a quick reply to a few “I’m scared” answers on Ray’s blog, which sums it all up. I’d track back to the post, but I’ve already linked to it int he body of the post.
(personally, I think that some of the comments are just there for links back, but they’re on topic, so I can see why Ray left them there – as I would have).
I do delete comments – usually they’re either Busby flaming SEO comments or they’re copy/paste jobs. I will admit that I am fairly lenient – if a comment looks as though it’s good and the link isn’t questionable I let it stay.
The upgrade is a piece of cake, delete a couple of directories, copy/move some files and folders and leave your content folder alone. I would go down the auto update route, but I’m not happy about a third party tool having that much access and the manual upgrade is so easy there’s no point.
The SVN upgrade is even easier I hear….
I should check and see if my host has svn installed. I might start that route. I usually back up my home directory about once a month and I get database backups emailed to me every night with a cron job. I also usually export my blog with the Wordpress tool as well, now and then, so I could try the latest and greatest with little danger of being left without my posts and comments. Of course, as anybody who’s followed will remember, I did learn that the hard way.