DISQUS

DISQUS Hello! banane is using DISQUS, a powerful comment system, to manage its comments. Learn more.

Community Page

banane

I write about SF, writing, and technology.
Jump to original thread »
Author

WordPress Exploits and Patches

Started by banane · 1 year ago

I’m a big fan of WordPress, except for tonight when I’ve finally decided to conquer the random blog spam that has been happening to some blogs I administer. “WordPress Cookie Authentication Vulernability.” It’s an invisible kind of CSS appended to the bottom of a post, as a form no less. The realization is that the [...] ... Continue reading »

2 comments

  • Matt

    1 year ago

    If there is spammy HTML in the footer.php of a theme, it's unlikely that it has anything to do with the cookie thing, it's more likely file permissions and/or an old XML-RPC problem. The cookie thing only applies to you if they've already read your database directly, which is not possible if you're on a secure version, and changing your password protects you if they have. I wouldn't attempt to apply the phpass patch by hand.
    reply
  • banane

    1 year ago

    Oh- thanks Matt! It's not in the footer, but at the end of a post, the individual post content, which users can't see, you can only see if you "view code" in the interface. I will change the db password, seems like the best idea.
    reply

Add New Comment

Returning? Login