Home Page

WordPress 2.3.2 is an urgent security release that fixes a bug that can be used to expose your draft posts. 2.3.2 also suppresses some error messages that can give away information about your database table structure and limits and stops some information leaks in the XML-RPC and APP implementations. Get 2.3.2 now to protect your blog from these disclosures.

As a little bonus, 2.3.2 allows you to define a custom DB error page. Place your custom template at wp-content/db-error.php. If WP has a problem connecting to your database, this page will displayed rather than the default error message.

For more detail on what’s new in 2.3.2, view the list of fixed bugs and see the changes between 2.3.1 and 2.3.2.

Special thanks to Alex Concha for his help on this release.

A least for those of your in the Northern hemisphere, it’s been a little chilly recently. If you’re like me you’re thinking, “WordPress keeps my servers running hot, couldn’t it warm me too?”

Yes, it can.

You can now buy hip WordPress hoodies in our store so when you’re not blogging you can loiter around the neighborhood like the people in the picture above. As before, we ship locally and internationally.

If you find you’re still in the Open Source Hoodie mood afterward, you can check out this cool Firefox one from our friends at Mozilla.

Hint: Buy the hoodie a size larger than you normally would, they run small. They’ll begin processing the orders on January 2^nd.

I testi di legge e gli atti normativi in versione integrale legati a servizi e inchieste degli inserti in edicola con il Sole 24 Ore ogni mercoledì…

WordPress 2.3.1 is now available. 2.3.1 is a bug-fix and security release for the 2.3 series.

2.3.1 fixes over twenty bugs. Some of the notable fixes are:

• Tagging support for Windows Live Writer
• Fixes for a login bug that affected those with a Blog Address different than
  their WordPress Address
• Faster taxonomy database queries, especially tag intersection queries
• Link importer fixes

Unfortunately, some security issues were found in 2.3. Janek Vind found an XSS problem that can be exploited if your php setup has register_globals enabled. For this reason, upgrading to 2.3.1 is advised.

The full set of changes between 2.3 and 2.3.1 is available for viewing on trac.

Get 2.3.1 from the download page and enjoy.