WordPress 3.0.3 was released to the public yesterday (December 8, 2010). This latest release is a security update for all previous versions, which according to WordPress:
Fixes issues in the XML-RPC remote publishing interface which under certain circumstances allowed Author- and Contributor-level users to improperly edit, publish or delete posts.
If you have users operating at those levels, it's a good idea to update your blog ASAP!
These are great WordPress resources – I actually just started digging into a really really solid book on WordPress 3.0. It’s got some really nice code samples, and is written by a few pro WordPress developers (including some from Envato). I’m actually giving away 2 copies of the e-book on my site – check out the details about the e-book and the giveaway here – I think you’ll dig it : http://bit.ly/lq20Ff
Hello Rosalind, I have a question on making a contact page for my website. How do you put the Grunion Contact Form thing on the page? I’d really like you to answer this.
Hi Frankie,
I’m not familiar with the Grunion Contact Form, but you can get more info here:
http://wordpress.org/extend/plugins/grunion-contact-form/
Cheers,
Ros
Well from your blog on the security issue that wordpress had with contributors been able to delete a persons posts well it appears my fears came through on that one as It looks like I had all my posts deleted on one of my sites as when I go to that site all I see is Holly World.
I am beginning to wonder if this is all worth the effort.
Kenneth c Young
I updated to 3.03 and it messes up my Askimet. While annoying the fix was easy. Just had to uninstall and reinstall the latest version of Askimet.
Thanks Roz,
Been there–updated–feel better! ahhhhh
sandy