a problem where logged in users can peek at trashed posts belonging to other authors. If you have untrusted users signed up on your blog and sensitive posts in the trash, you should upgrade to 2.9.2.
The majority of readers here are probably not effected but you should be aware.
Added the video on upgrading if you need it below.
The method of upgrading has not changed so even though it says 2.7.1 it is still valid.
About the author
Mike Paetzold got started blogging in 2003 and has become an expert on using WordPress. He has become known as The WordPress Guy.
After being an under ground niche marketer using his blogs he has surfaced to share some of the ways he uses blogs to enter various niches profitably.
As I mentioned previously WordPress would have a relatively quick update to the new 2.9 version. It was just released. This was done primarily to fix a problem with some hosts on scheduled posts and trackbacks.
There were quite a few other minor changes but those two were the big reasons. You can see more about this at the announcement post WordPress 2.9.1.
If you have not upgraded to 2.9.1 you can upgrade directly to this version from your previous version.
I have added the video on backing up your database and the automatic upgrade below. That has not changed since 2.7 so the video is current despite the title .
Will get back to answering your questions tomorrow. As always you can add questions you would like addressed or leave your comments below.
About the author
Mike Paetzold got started blogging in 2003 and has become an expert on using WordPress. He has become known as The WordPress Guy.
After being an under ground niche marketer using his blogs he has surfaced to share some of the ways he uses blogs to enter various niches profitably.
Well as they predicted earlier this week when they put out a release candidate they released Wordpress 2.9 by the end of the week.
I had hoped that the author of Simple Tags would get an update out to make it work as they have done on the last 2 major releases. It hasn’t happened yet and as this is not a security update I will not be pushing to upgrade quickly.
If in a week there is no update on Simple Tags then I will be looking for a replacement and once I test it only then will I be upgrading all of my blogs.
Simple tags was the only plugin that I have been recommending that seems not to work with this version and I do expect an update shortly. Then it will be time to take advantage of some of the new features.
I did add in the upgrade video for those that do not use Simple Tags.
Will keep you updated and put out some more information as the plugin compatibility gets resolved.
About the author
Mike Paetzold got started blogging in 2003 and has become an expert on using WordPress. He has become known as The WordPress Guy.
After being an under ground niche marketer using his blogs he has surfaced to share some of the ways he uses blogs to enter various niches profitably.
Yesterday I posted a quick blurb when I first saw the upgrade link in one of my blogs. It actually showed a few minutes before the upgrade notice in the feed reader. From the WordPress blog.
2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended.
If you have multiple author accounts it is an upgrade that you should do ASAP. For others I would still upgrade when you get the opportunity but it is not a hot priority. I have added the upgrade video for those that will be upgrading.
Yes it says WordPress 2.7.1 but the way to do it is the same.
Upgrading is relatively painless but if you would like it done for you go to WordPress Upgrade.
About the author
Mike Paetzold got started blogging in 2003 and has become an expert on using WordPress. He has become known as The WordPress Guy.
After being an under ground niche marketer using his blogs he has surfaced to share some of the ways he uses blogs to enter various niches profitably.
Have to love the automatic notification function in WordPress. Saw the upgrade link in one blog before their blog posted the release information.
This looks like a minor fix that is important if you have multiple authors but not really super time sensitive if you are the only one posting items and have no users with posting privileges.
You can see the release from WordPress at this link.
Will have more information after I upgrade and test a few blogs with this version.
About the author
Mike Paetzold got started blogging in 2003 and has become an expert on using WordPress. He has become known as The WordPress Guy.
After being an under ground niche marketer using his blogs he has surfaced to share some of the ways he uses blogs to enter various niches profitably.
Really glad they added the auto upgrade to WordPress. Seems they missed something in the last upgrade and as this is a security issue it is important to upgrade your blog. Here is the notice from the WordPress blog.
I have added in the upgrade video once again below to help you keep upgraded.
Talk to you on Wednesday at the Blog Talk Radio Show.
Woke up this morning and one of the first things I found was a notice of an update from WordPress to version 2.8.2. This one is to fix a vulnerability. From the WordPress blog
WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site.
Take the time to update your blogs asap. As always when they update I have put the video on doing it below.
Make sure to back up your data base and any theme updates before you hit the upgrade button.
WordPress just released the upgrade for version 2.8. Form the WordPress blog
WordPress 2.8.1 fixes many bugs and tightens security for plugin administration pages. Core Security Technologies notified us that admin pages added by certain plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable to this problem, but we advise upgrading to 2.8.1 to be safe.
There are other items that have been fixed also and you can see the full list at that post.
Remember to pull the data base and any themes or plugins that you have edited previously.
I have put the video on doing the upgrade below as nothing has changed as far as the upgrade process since this was made.
If you are not comfortable upgrading your blog I can do it for you just go here and enter your order and follow the steps after the payment.
One of the good things and one of the bad things is the constant evolution of WordPress. It can be a pain to upgrade but the new features and abilities are usually a good payoff.
Now I know that we are still waiting for the WordPress 2.8.1 release but there are some big changes coming in 2.9 that you should be aware of that effect your hosting. This is quoted from the WordPress blog
WP 2.9 will require MySQL 4.1.2 or greater. This is raised from the current requirement of 4.0.
In order to promote migration to PHP 5, the upgrader will suggest that those running PHP 4 switch to PHP 5.
Now for most of us that is a bunch of gobbly gook but it actually is really easy to check if your host meets these requirements and if they don’t to ask them to upgrade now so you will be ready.
Log into your cPanel for your domain (http://yourdomain.com/cpanel) and you can check the status. On the version I use it is on the left hand side at the bottom under general server information. (You may need to expand it to see all the information.
Once you do you can see the version of MySQL you are using and the version of php you are running.
As long as you meet the minimums (and the majority should) you are set but if not you may want to ask your host to upgrade so you will be able to continue now rather than waiting until the release in a few months.
WordPress 2.8 released last night. Still finding new things that have been added each time I play around. The syntax highlighting was a surprise but a nice one. If you are editing your theme it color codes things like your favorite desk top code editor does.
Check out the video below from WordPress.tv
Last nights Blog Talk Radio is available for replay. Thanks to all that attended and to my co-host Steve Roye of Real First Steps. Lots of good information and we always have fun.
Have not seen any problems with upgrading through my main blogs. All have upgraded and seem seem to be working well. Power WordPress Users now have the new files available in the member’s download area.
Well got up way too early this morning as the dampness and my back are not getting along well but it did allow me to get this out much earlier than I normally would.
Finally , a shameless plug – The $20 discount on the re-launch of WordPress Made Easy (upgraded to include all the new features in 2.8) is only available until Saturday
.
