Vulnerability in phpMyAdmin Requires Immediate Patch

A critical CSRF Vulnerability in phpMyAdmin Database administration tool has been found and a patch is available for all computers and servers running the MySQL database. Does this include you? If you are using WordPress, yes it does. Contact your web host to ensure phpMyAdmin is updated immediately. If you are self-hosted and manage your […]

What Does WordPress, iThemes, Goodwill, Home Depot, and Target Have in Common? Your Identity and Security.

We received a new credit card in the mail today to replace our old one AGAIN. An “unsuccessful attempt” to access our secure security data happened and this is a precaution the bank is taking to protect us. I have no other information so I’m left wondering. Yesterday I received an email supposedly from Home […]

Blog Exercises: If You Wouldn’t Do It In Public, Would You Do It Online?

If you wouldn’t do it in public, would you do it online? Unfortunately for many, the answer is a resounding YES! However, most of us have some…whatever you call it…oh, yeah, class, ethics, moral fiber, manners – etiquette. I’m not the Dear Abby of social norms, but I’m first in line to tell you that […]

Update to WordPress 3.6.1 Now

It is upgrade time again. Time to upgrade your WordPress. WordPress 3.6.1 Maintenance and Security Release was announced today. It includes fixes to WordPress 3.6 and some security issues, so this is a mandatory update. WordPress.com users are automatically updated, as are all those on managed WordPress hosting like WP Engine. This update applies to […]

Blog Exercises: Protect Your Privacy

The web world thinks my birthday is January 1. Does the web know your birthday? Among the many Blog Exercises so far this year, I’ve mostly focused on your blog. Today, I want to talk about something related to your blog but mostly to your exposure and presence on the web: your private and personal […]

WordPress Anniversary: Comment Spam Lessons

It’s hard to believe that I’ve learned much from comment spammers over the years. I’ve learned that they are among the most hated folks in the world, yet you have to respect them as well. As I look back on ten years of blogging with WordPress on this 10th Anniversary year, I realized that comment […]

The Brute-Force Password Attack on WordPress Sites

My mother emailed me and asked if WordPress was under attack. With all the news of last week’s attack of the Boston Marathon, the attacks on WordPress and other PHP-based web publishing sites was low on the priority list for myself and others, but this is something to take seriously. As we get back to […]

Blog Exercises: Site Policies and Bloggers Code of Ethics

It’s time to start working on all of your site policies, one by one. So far, we’ve touched on some of these in Blog Exercises: The Don’ts of Blogging, Blog Exercise: Taking a Risk With What You Blog About, Blog Exercises: Comments and The Blog Bullies, and Blog Exercises: Quoting and Blockquotes. The basic policies […]

WordPress Anniversary: WordPress and Evil

As I look back on the ten years of WordPress, there is a dark side to blogging. While many blamed WordPress for the evil, like guns, WordPress doesn’t cause evil, people cause evil. In fact, WordPress, Automattic, and the WordPress Community has fought longer and harder against the evil doers in the world than most […]

Happy Holidays and Onward!

We survived the Mayan Calendar. We’ve survived planets lining up. We’ve survived attacks on our person, our community, our faith, and our country. Just another year. As we charge forward this coming year, here are some things to look forward to here on Lorelle on WordPress and on my other sites, and many things to […]

DuckDuckGo: The Search Engine You Need to Meet

Recently, DuckDuckGo has been turning up in my referrers list. Curious about the name, and thinking it was a spam site, DuckDuckGo needed investigation. Seems I’ve been missing out on what could be the major competition to Google as a search engine. Here is a quick summary of what I learned about DuckDuckGo. It is […]

Update WordPress Now: WordPress 3.4.2 Released

WordPress 3.4.2 Maintenance and Security Release arrived today, and it’s time to update. This is both a maintenance and security release, therefore it is mandatory, not optional. Recently, I wrote about keeping WordPress updated for security reasons, and I’m singing the same song again. Don’t wait. Don’t hesitate. Use the automatic, one-click update feature. In […]

Update WordPress Now: Reuters Hacked

It is an old song. I’ve sung it for years. UPDATE WORDPRESS NOW! Reuters was hacked recently and many blame WordPress, though most honest reporters are quick to state that it is the webmaster/site owners fault for not updating. Seems they were running a version from over a year ago. According to PC Magazine’s Security […]

What You Most Need to Know About WordPress

At the recent WordCamp Portland 2012, I was asked by several attendees to cover the basics of WordPress and we came up with What You Most Need to Know About WordPress. Here are the “notes” from that unconference presentation. The Difference Between Categories and Tags I hear this question at WordCamps, from readers, students, and […]

Defying Brute Force Attacks on WordPress Logins

Sucuri, the web security specialists, published “Brute force attacks against WordPress sites,” an in depth look at not just the importance of a strong password but the brute force nature and anatomy of login and registration access attacks. There is a technique known as brute-force attack. Like the name implies, access is gained to your […]