Alex Reidy

Create a subdomain, copy the files from your root directory and move them to your subdomain directory, and log in.

Are you sure it’s wrong about being up to date?

If you’re not already on 3.4.1, try a manual upload. Remove all of the files in your WordPress directory and replace them with the files in the latest download zip file.

When I visit your site the directory listing shows that you only have a directory called /cgi-bin. Make sure you’ve uploaded everything correctly. Once you have, you should be able to go through the install process by going to https://puddleduckvalley.co.uk/wp-admin.

You can always download the WordPress zip file and manually replace your 3.0.1 files with the new ones.

A fresh WordPress installation is somewhat vulnerable when the database configuration page is open because it allows the user (or hacker) to create an admin user if they can provide the correct database information (that’s the hard part that might thwart a hacker). Once there is one user, the page doesn’t show up anymore. It’s probably not a huge vulnerability, but I wouldn’t leave my new WordPress site in the initial user creation and database connection phase for long.

You can use the PHP function strip_tags() to remove the tags from any string. For example, you might have something like this:

$user_info = $_POST['info'];
$user_info = strip_tags($user_info, '<i>');

You can choose tags that you want the user to have available – just exclude them from the stripping by passing them in as the second argument like I did for the italics tag.