The main changes in this version are to make it easier to use and to permit comments and post previews by default. Also, when a blacklisted page is requested bs-wp-sandbox will redirect the client to “http://yourblog/”. Now you can change the BLOGNAME variable at the top of the file to redirect the client where you [...]

A new version of WordPress (2.3.2) is now available for download.
The update fixes some critical security vulnerabilities.
Interestingly, WordPress have decided to turn off WordPress errors by default now. So, our bs-wp-noerrors plugin is deprecated but still useful for those of us who haven’t trusted WP 2.3 enough to upgrade.
This version also presents some additional clean [...]

Juergen Kreileder over at blog.blackdown.de has a really nice step by step howto on how to enable SSL (HTTPS) for a WordPress blog.
This article does assume that your running Debian Sarge with Apache 2. This should work for Ubuntu as well.
We have received some feedback asking us to add an HTTPS howto into the WordPress [...]

Add WordPress Secure’s protection to ALL your blogs for a cost of a pizza!

Sounds great right? What a load of nonsense. The site "www.wordpresssecure.com" claims to have a plugin that secures your blog, with the slogan:

Don’t be another hacked statistic!

After checking the feature list, the site says it will protect your wp-admin directory…. I scrolled [...]

Lately, a number of high profile sites have been targeted for spam and some don’t even know it. I stumbled across a post from EB where Al Gore’s Climate Crisis blog has been hacked and defaced with hidden Ads.

The image above shows the Ads hidden within the blog. The blog is running a very old [...]