ucan-post plugin, anybody?

Were did you get it? I mean plugin. I searched but I can’t found it. Can you give me a link?

Interesting observations with this plugin:

https://www.exploit-db.com/exploits/18390/

The plugin was closed and should not be used.

https://www.google.com/webhp?sourceid=chrome-instant&ix=h9&ie=UTF-8#hl=en&output=search&sclient=psy-ab&q=%5Bucan-post%5D&oq=&aq=&aqi=&aql=&gs_l=&pbx=1&fp=58be24787b2df664&ix=h9&bav=on.2,or.r_gc.r_pw.r_cp.r_qf.,cf.osb&biw=1680&bih=891

Is there a way to find out why it was closed and why it should not be used? Thanks

neononcon,

Some vulnerable, probably xss-vulnerable I guess..
But I use it, lol

Yes, Ipstenu is right. The plugin was one of my first ventures into the PHP world and contains some serious security holes — especially if you’re allowing users to edit their own posts.

Rather than attempt to fix something that was a bad idea from the start ?? — I’ve decided to pull uCan Post off the shelf permanently.

I’ve learned a lot since and will be releasing a new Blog Post submission plugin in the future which will be far more secure and feature rich. It’s about 75% completed at this time. I don’t have a name for it yet.