rawalex

There is a coding error in the plugin, it is attempting to get the images from social_bookmarking but the directory is social-bookmarking.

Line 21 should read:

$this->plugin_dir = get_option(‘siteurl’).’/wp-content/plugins/social-bookmarks/’;

Links to teen porn? You don’t get it… I’m in the adult business. You can manage your one blog, and I’ll manage my 50 blogs and there ya go. If you are going to look down your nose at adult material, well… that’s your issue and not mine. I don’t look at your blog(s) and complain about your posts, although linking to “village idiot” almost seems too classic to comment on.

I clearly stated that the problem occurred on BOTH versions 2.2 and 2.2.1. If the problem was limited ONLY to 2.2, then the upgrade answer would be good. But since I saw the same problem on both versions, the clue is that it isn’t related to something fixed in that upgrade. With 50 upgrades to do, some domains will slip a little while until I get around to them. I looked closely to make sure it wasn’t related to an out of date version.

Proof in the pudding is that the fixes in 2.2.2 appear to be aimed at this exact problem.

I am just disappointed to realize that the “support” board isn’t support at all. Perhaps the powers that be at www.ads-software.com might consider renaming the forum to reflect more of it’s “users helping users” rather than being direct product support.

… and now off to update the renaming 30 or so installations that need to be updated to this weeks version.

Support – as in the people who wrote the code (and release the code) helping out the people who use their code.

I came to a support forum. If I wanted to go to a “chat with other wordpress users” I would have looked for that type of a forum.

IcelandDream, read closely the entire “help” I got from whoooami: “upgrade to the lastest version” when I repeated that the problem was happening on the latest version. That is pretty mindless.

I feel somewhat better understanding that the problem I was having was addresses in this morning’s software update. You know software updates, where the $85 an hour developers do their work.

WordPress should rename this forum to “the blind leading the blind” forum, and keep the term support for things that are done in a somewhat more official manner.

The question isn’t relevant anymore, fixed in 2.2.2.

I am starting to realize that there are people posting here acting as support people when they are just other end users.

I’ll know better than to ask a question in this forum in the future.

whooami, you have made it clear the rest of us don’t merit the time or the attention. It is also clear by today’s release of the 2.2.2 update that this was an actual hole, likely triggered through upload.php.

If you have the urge to be condescending, I would suggest you try it on a family member first. When it doesn’t work with them, consider it a plan to NOT try it on people you don’t know.

My only frustration is dealing with people who think they are too well informed and too mighty to deal with end users. If you don’t like dealing with us, why post rude comments?

Once again, I really hate going in circles, but I checked and ALL of my current versions as 2.2.1 and I once again saw “foo” posts added in the last 24 hours.

As for the content of the site I linked to, I didn’t download or execute any code from them, but rather linked to the site to show that there are potentially issues.

That is took a week and SOMEONE ELSE to post a link to your own blog with the solution makes me wonder what the heck you are thinking. Perhaps you enjoy publically spanking mere “users” as opposed to coders? Might I suggest spanking the coders for a while so they stop leaving gaping holes in their code?

https://mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm/

Thanks for your concern on this issue, it looks like someone else has exposed the hole.

Enjoy.

Thanks for your reply. It certainly helps me to track this issue down. I will remember this always.

The issue occurs on both of them, so I don’t think this relates to 2.2’s security issues.

Okay, so what is the upgrade past 2.2.1 ?

Read the above post… seeing the same issue on 2.2 and 2.2.1 (I have about 50 instances of wordpress running).

Okay, bad example. But the drafts do appear inside my admin panel, when I go to write a post, it says “Drafts: Foo” and when I open the draft, it is just a title and blank. One site had 20 of them.

I use PHP files all the time, the file type is correct without issues. It is only on wordpress that it happens, which is pretty strange for me.

I will make sure that pingomatic isn’t there, I hate slow servers! ??

I have seen the same thing on all of my installations of 1.5. If I open another browser and check, the new entry is visible, but the admin takes upwards to 2 minutes to “process” the new entry.

Typically I only have one or two links on my entries.