Category Archives: Wordpress Theme

I was using Redoable Lite, but realised at lunchtime that there’s no method to get to older posts not on the first page. Hence, the sudden theme change. This is Freshy. Still not perfect, but at least readers can get to my older (though not necessarily better!) posts.

I might one day cough the dosh and get the CSS upgrade, switch to Sandbox and design something truly shitty and unique.

Thankyou for your understanding.

I just noticed that Scott (in a comment on Ryan’s post about 2.3) has released version 1.0 of Sandbox specifically for WordPress 2.3.

Sheesh! Something else to play with! :)

Why do people do it? Over at Blog Security there are regularly reports of people finding and publishing on their blogs security vulnerabilities in WordPress.

Do not get me wrong. I like the fact that there are people working to discover the vulnerabilities. At the end of the day it means that WordPress will become more secure. Obviously, the limited time and resources of the application’s developers means that they can’t test every single element of what is a huge and powerful application.

Hell, Microsoft do it all the time. Look at Windows XP. MS released the OS and within three months Service Pack 1 was released.

The problem with people doing this work is that rather than tell the developers (there are various methods outlined at WordPress.org), they will shout about it on their blogs.

What does this mean? Think about it. There are a hell of a lot of unscrupulous “users”, hackers, spammers and script kiddies out there who are quite happy to hack your blog and use it for nefarious purposes. Be it Google Juice for their own AdSense promotion or inserting spamming scripts into your code. And if the person that finds the vulnerability shouts about it on their blog, gets it linked by other people and then it’s all over the ‘net before developers have a chance to fix it. WordPress gets a reputation as an insecure application and we all lose the best blogging application on the market.

If you DO find a vulnerability, whether it’s in core code, a theme or a plugin, please please please let the developer of that piece of code know. Certainly shout about it, but wait until later, after it’s fixed!

If you are interested at all in the security of your blog then Blog Security is a must read.

As well as alerts to the latest vulnerabilities, they have posts such as Top 11 WordPress Plugins (It’s unfortunate that one of the 11 is the Adsense plugin - That’s a completely separate rant!) and Top 10 Vulnerable WP Themes.

The results of the theme vulnerability shows that out of 1000 blogs tested, 220 had obvious vulnerabilities. Including the default Kubrick theme and Connections!

They also offer an excellent WP Scanner Tool which (with a plugin downloaded from the Site) will scan your blog for vulnerabilities. You can then (with not much effort) figure out what you can do to sort them.

Well, it’s not really surprising. A BBH* wins the Sandbox Design Competition. Don’t get me wrong, it’s a great looking theme, but it looks so much like so many others it’s no different to any of them. Personally, I think Prima is the best looking theme. Ok, I’m not a beige kinda guy so the colours might change a little but it’s not blue and, from the screenshot, it looks to be well laid out too.

Andy also mentions that Sandox will be upgraded for wordpress.com “very soon”.

*Big Blue Header. Ask That Girl Again.