WordPress 2.1.1 dangerous, Upgrade to 2.1.2
Tadi aku jejalan, baca-baca apa yang patut… so aku terbaca pasal wordpress 2.1.1 kena inject kat dalam server download dorang. Ada orang pecah masuk ke dalam server dan modified fail yang akan didownload dari server tu. Ada dua fail yang terlibat, dorang edit code supaya lerh guna remote untuk PHP execution. So kepada sesaper yang baru upgrade ke version 2.1.1 dalam 3-4 hari lepas, sila upgrade ke 2.1.2 secepat mungkin atau kemungkinan website anda akan menghadapi masalah.
Sedikit petikan daripada blog development wordpress:
It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution.
Sila ke http://wordpress.org/development/2007/03/upgrade-212/ untuk membaca artikel penuh dan sila ke http://wordpress.org/download/ untuk memuat turun version 2.1.2. jangan ketinggalan. Baik bertindak sekarang sebelum sebarang masalah lain berlaku.
[...] dah kuar 2.1.2 sesaper yang nak baca pasal bahayanya version 2.1.1 tu… lerh singgah kat sini http://www.eizil.com/2007/03/03/wordpress-211-dangerous-upgrade-to-212/ dan kepada sesaper yang belum upgrade, sila aa upgrade sebelum kena hack. Bebaru ni iznan.com kena [...]