Alex Concha

Yes, it is posible.

You can do it changing page_structure in WP_Rewrite::get_page_permastruct (wp-includes/rewrite.php) or hack it with a plugin:

add_action('init', 'change_page_permalink', -1);
function change_page_permalink() {
	global $wp_rewrite;
	if ( strstr($wp_rewrite->get_page_permastruct(), '.html') != '.html' )
		$wp_rewrite->page_structure = $wp_rewrite->page_structure . '.html';
}

You’re using an old and insecure WordPress that doesn’t use jquery which is required by Sexy Comments plugin.

You should upgrade to the latest version of WordPress or at least to 2.2.3

When the inbox is empty wp-mail.php calls wp_die [1] with the proper message, but that function also sends a 500 status header and that’s why you are seeing these “errors”.

[1] https://trac.www.ads-software.com/browser/trunk/wp-mail.php#L18

Dave, what is your blog’s URL?

If you want to keep it private, you can contact me to track down this bug.

alex at buayacorp dot com

If you are using WordPress 2.3.x (for older versions you should change other line), replace line 484 of wp-includes/link-template.php with:
if ( true || !$wp_rewrite->using_permalinks() || is_admin() ) {

However, what permalink structure are you using?
I don’t have any problem using /%postname% .html as the permalink structure.

Search on all your files and delete lines that contain “eval(unescape”.

On the other hand, you should upgrade and change all your passwords to prevent future attacks.

Please read manual installation steps [1].

Regarding to step 5, if you do not have access to create the symbolic link, upload wp-cache/wp-cache-phase1.php to wordpress_location/wp-content on your server and then rename it to advanced-cache.php.

[1] https://www.ads-software.com/extend/plugins/wp-cache/other_notes/

Well, the plugins you listed can be optimized but I wonder why you do not use any caching plugin.

Anyway if you still need paid support, as moshu said, post your request at wp-pro mailing list.

[moderated]

How much traffic does your site get?
What plugins are you using?

Hmm, I created a test user on your site and didn’t see any error regarding cookies (tested on Firefox and IE7).

spotme10, what is your blog’s URL?

Edit: Please, add information about your hosting environment too.

WCityMike, I can not reproduce the bug but I modified a bit the wp-login.php file [1], can you test it on your site?

If you prefer diff files, see [2].

[1] https://wordpress.pastebin.com/m4da02e75
[2] https://wordpress.pastebin.com/m1174dd0c

As I said, unfiltered_upload capability was introduced in WordPress 2.3 (see changeset)

What version did you have before that incident?

Only admin users are allowed to upload anything (it was introduced in WP 2.3). To avoid this behaviour you can remove unfiltered_upload capability from your admin users, but your site won’t be secure even if you allow only images.

sahaskatta, disabling it won’t save too much bandwidth, wlwmanifest.xml is only downloaded if you configure Windows Live Writer for your site (your visitors will never download this file).

Anyway, you can use the following plugin if you don’t use any Blog client:

<?php
/*
Plugin Name: WLW Disabler
*/

remove_action('wp_head', 'wlwmanifest_link');
remove_action('wp_head', 'rsd_link');
?>