Archive for the ‘WordPress’ Category

Platinum SEO WordPress Plugin versus All In One

Sunday, October 11th, 2009
Platinum SEO versus All In One

Platinum SEO versus All In One

Or why I switched my blog from All In One SEO to the Platinum SEO plugin

I used All In One SEO WordPress Plugin about a month. It worked good for me. Thanks to the author. But there is another side of the medal. What I don’t like from the very beginning it is the very aggressive and annoying donation requests and self-advertising this plugin shows on its Settings page. “I enjoy this plugin and have made a donation” checkbox uses some form of psychologic pressure on the plugin user to extort something from him. Is this plugin really free? I see that it is released under GPL (GNU General Public License) in the all_in_one_seo_pack.php file header. Do you agree that this is a freeware software? My doubts about it were very strong up to this moment. And finally when I had installed version 1.6.7 of All In One SEO I have no any doubts that this plugin is not really freeware.

Read the rest of this entry

Thank You Counter Button WordPress Plugin

Monday, October 5th, 2009

thank you counter button wordpress plugin

thank you counter button

This is the visitor’s “Thank you” or “I like it” clicks counter. Every time a new visitor clicks the “Thank you” button one point is added to the total “thanks” counter for this post. Plugin uses AJAX to send data to the server and get it back. So no page reload is required. The plugin stores its counters in its own MySQL table. Only one “thanks” for the same IP-address can be permitted. Plugin can skip all further “Thank you” clicks from that IP-address once it is automatically registered. Total quant of thanks is displayed on the button just to the right from the click invitation text. Invitation text is ‘Thank You’ by default, but it can be changed at the plugin Settings page. Plugin has wide range of options to customize its behaviour and presentation. Live preview will help to select more suitable style.

Read the rest of this entry

Login LockDown WordPress plugin Review

Saturday, September 19th, 2009

WordPress Plugin Review

WordPress Plugin Review

This review is made for Login LockDown v.1.5 WordPress plugin.
Date of review: 19th September 2009
Rating: 4.0
Author profile: Michael VanDeMar
WordPress plugin directory link: Login LockDown

According to author’s description Login LockDown WordPress plugin adds some extra security to WordPress by restricting the rate at which failed logins can be re-attempted from a given IP range. Plugin records the IP address and timestamp of every failed login attempt. If more than a certain number of attempts are detected within a short period of time from the same IP range, then the login function is disabled for all requests from that IP range. This helps to prevent brute force password discovery.
After testing and using it on live site I confirm that Login LockDown WordPress plugin really has functionality declared by its author. But plugin has some security and usability issues.

Read the rest of this entry

WordPress under gpc_10805 attack

Tuesday, September 8th, 2009

WordPress

WordPress


A lot of information about last attack on WordPress managed sites can be found:
http://mashable.com/2009/09/05/wordpress-attack/
http://www.netpassiveincome.com/wordpress-mysql-injection-permalink/
http://www.warriorforum.com/main-internet-marketing-discussion-forum/121131-wordpress-mysql-injection.html
http://www.andysowards.com/blog/wordpress/breaking-wordpress-mysql-injection-how-to-fix-latest-attack-evalbase64_decode_serverhttp_referer/
http://www.seanrees.com/2009/09/02/well-an-update-worth-its-salt/
But pay attention that not only WordPress sites are attacked in this manner, look at the
http://www.webdeveloper.com/forum/showthread.php?p=1032611
Sites in the HTML only are attacked by this robot too.

Read the rest of this entry

WordPress for Joomla: Author Archive SEF Link setup

Monday, September 7th, 2009

WordPress for Joomla

WordPress for Joomla


Recently I setup and tuned CorePHP WordPress for Joomla component for one of my clients site.
One task I had to resolve was to show all posts of the selected author if visitor click on the author name. I used WordPress the_author_posts_link() function to get the URL to the author archive page.
It returned
www.yoursite.com?authour=nnn
URL instead of search engine friendly (SEF) permalink. In order to change that I use the way I was found at
codex.wordpress.org.
In order to setup the author permalink instead of ?authour=nnn I placed this code to the end of functions.php file at WordPress default used theme folder:

Read the rest of this entry

WordPress Security: Silence is golden. Part 2.

Sunday, September 6th, 2009

display_errors OFF

display_errors OFF


Some shared hosting providers don’t turn off php error showing by default. If you don’t change this default PHP configuration settings too, your blog has vulnerability issue or even security problem. Why I talk about security problem? Be cause of this can lead to exposure of the absolute path to your WordPress blog installation. Let’s check together. Put this little script into your blog root folder, for example name it phpinfo.php:

<?php
phpinfo();
?>

Call it from the browser as http://yourBlogURL/phpinfo.php
You will see standard ‘PHP Info’ page with values of different PHP configuration parameters. Check display_errors parameter value under ‘PHP Core section’ now.

Read the rest of this entry

WordPress plugin development book

Thursday, September 3rd, 2009

WordPress plugin development

WordPress plugin development


There are a large quant of information technologies related books which doesn’t contain really valuable information. One book just tells us about software user interface (I can see and investigate that interface myself on the monitor), another one just retell software product documentation (I can read that doc myself again).
“WordPress Plugin Development” book is made by another author and from another material. First of all it is fresh edition. Book is published in 2009. The author of this book Vladimir Prevolac (http://www.prelovac.com) shares with us its own rich WordPress plugins development experience and uses real plugins code as the examples to comment through which he lead a reader from the first page to the last one.
The author goes together with you from very simple basics to more complex things. He explains in details the programming technique and WordPress secrets. Do you wish more? JQuery and AJAX are covered in parts which used in the those plugins too.
It is recommended to read this “WordPress Plugin Development (Beginner’s Guide)” book for every person who decided to develop his own WordPress plugins. You may be sure – it is right place to start.