jami1955

Above post not really clear. The version showing for this problem is 2.8.5, but I am referring to sites which are much later, like 3.0 which were compromised, and the only way poss. was thru comments. I also would love to passwrd protect my admin folder, but this makes the media uploader impossible to work with. (see thread) It’s still a fab. wonderful script, and security is not what it could be…

I’m changing this to resolved, but it’s not really. I have a working site now again, but my work around for the security issue was simply to disallow all comments, since that seems to be the main security hole. I have several sites where I’d love to get comments going, but don’t dare because of the security risk. But, for now it’s ok.

excellent, thanks.

I went with the galleria plug in, instead of trying to integrate the pikachoose slideshow, which gives a lot more options. Galleria works fine.

Sorry, I didn’t provide enuf info. My home page is diff. from my blog index page. You’re right, that code will work. But I have another function at work, which is in my theme the ability to take the short content from a page, and print it somewhere else, like on the “homepage”. Here’s the code that does that:

<?php $events = _get_page_by_name('events'); ?>
<?=_get_short_info($events->post_content)?>

The 2nd line of code calls the page name and writes the specified content ($events->post_content). That call cannot have any spaces in it. Hence it only works with page titles of one word. Is there a way to modify that second line of code, or set it up so that it can work with a page name of more than one word (which therefore has spaces in it)?
thanks
JSC

Thanks for the detailed instructs. I will follow them. I think I will scrape the domain (erase everything) before installing the new version, including erase my theme file, and upload it again from my computer.
JSC

I have

re-uploading the wp-admin and wp-includes folders from a fresh download of WordPress 2.8.5.

the admin looks fine again. Sooooo . must be code injection. I had another installation of 3.0 which got completely hacked. I’d really like to find out where the injection comes from.
thanks for the suggestion.
JSC

I’m a little worried upgrading is not so simple as uploading my theme directory into a new version, if the new version doesn’t accommodate it, I’m _____ed. How would YOU upgrade? With the upgrade link in the admin section?
JSC

I’ve written to security. But it is fine to say this publicly, that version 3.0 was hacked completely, after the database was restored from a backup, it worked fine again. It was indeed limited to WordPress, there is no other site out of the 15 others on that account that have any trouble. Nothing else was done. Just that domain that hosted wordpress. It was from an IP in Turkey.

that is awesome, it certainly sounds like a quick fix to me, getting code that solves the problem!
I’m going to try it and let you know. thanks a million!

JSC

Sorry here’s the link:
https://osholeela.net/?p=95

Yo, the link is here, this is the gallery page with thumbs, click on any thumb and you will see it 300×199 big, they were uploaded at 450×300.

thanks,
JSC

The two settings for image size (other than thumbs) is
max ht 450 max width 450 for “medium”
and
max ht 1024 and max width 1024 for “large size”

that’s why I don’t get where it’s getting this size 300 x 199 !! However, remember my point about the thumbnails and full size pics. The thumbnail size shows up on the “gallery” index page, and when one clicks on the thumb, it goes to a separate page where the “full size” pic that was uploaded is supposed to show. So that second page is calling the picture also, but it’s a different call than the gallery page.

Thanks for the reply.
However, the link you’ve provided is for sizing the thumbnails on the page where all pictures are displayed. In the default gallery, I have attached the collection of pics to one post. Then I have put the [gallery columns="4"] code into the post which diplays all those attached pics.

IF I then click on one of those pics – it goes to a separate page, where the pic I clicked on is supposed to be full size. In this case that would be 500×300 px. However the “full size” image is only 300x199px. It has been resized somewhere for the blowup. Any ideas where that resizing for the “full size enlargement” is happening?
thanks again,
JSC

Sorry I was unclear. I meant the PAGE TEMPLATE – how do I specify I want a page I create to use a particular page template?