Doesn’t work for me. When it is installed the plugin redirects requests for my Wordpress blog to my site homepage which is in a higher folder!

Terry, yes this is correct. My blog was in my root directory “/”.

Look for this line:

header(”Location: /”);

Change it to suit your needs, example:

header(”Location: /blog”);

For the next release, I’ll place a define statement at the top to make this easier to change.

Hi, this is a great site.

One of my sites was attacked this week much the same as this:

http://wordpress.org/support/topic/141041

We have since upgraded and removed a suspicous plugin. But I wonder if you could write something in plain English for the non-technical among us as to what was the cause of the problem and what we can do to protect against it. I’d like to alert friends and colleagues, but I’m not sure I understand how this attack occurred and what could have been done to prevent it.

Thank you.

Anita

PS, I tried to insert this into your contact form, but it just hung and hung.

Anita, thank you for your message. We did receive your email via our Contact form in will be in touch with you shortly. Thanks.

[…] 1.2 of the BlogSecurity WordPress Sandbox plugin has been released. See its tool page for details and for the latest download.     Enjoy the article? Please take a […]

I just realised this plugin will not work if your blog is not in your webroot. Will get this resolved in the next release.

can you add possible other scenario for the permitted list? why and what should i add to this list maybe?

seppelb, I’ll add some more functions in the next release that you can add/remove. If you have anything specific in mind, let me know.