Group Wordpress's feed | Diigo - Groups

Common SEO Mistakes Bloggers Make – Part 2

Wed, 16 Dec 2009 04:44:24 -0000

So you’ve learned about the first six Common SEO Mistakes Bloggers Make , then here are the rest.
a. Keywords are Lost in the Pages

Organizing your pages into categories and attaching tags is a great way to optimize you site for the use of search engines. However, those tags loose their focu

Comments:

So you’ve learned about the first six Common SEO Mistakes Bloggers Make , then here are the rest.
a. Keywords are Lost in the Pages

Organizing your pages into categories and attaching tags is a great way to optimize you site for the use of search engines. However, those tags loose their focu - kumar app

Tags: seo, blogger, wordpress, blog, mistakes, nofollow, permalink, Indexing, rss

by: kumar app

Upgrading WordPress to WordPress 2.8x

Tue, 15 Dec 2009 03:01:24 -0000

A few months ago, Wordpress has updated its website with the release of WordPress 2.8. However, upon its release there have been a few complaints from WordPress bloggers which led to the question of how long must a blogger wait before WordPress can be upgraded when a new version is out.

Normally,

Comments:

A few months ago, Wordpress has updated its website with the release of WordPress 2.8. However, upon its release there have been a few complaints from WordPress bloggers which led to the question of how long must a blogger wait before WordPress can be upgraded when a new version is out.

Normally, - kumar app

Tags: wordpress, upgrade, blog, community

by: kumar app

Wordpress Template Designer CheatSheet / Wordpress / SPLASHnology - Web Design & Web Technology Community

Sat, 12 Dec 2009 16:26:16 -0000

Tags: no_tag

by: Tom Foley

wplover | wordpress thingamajig

Sat, 12 Dec 2009 11:32:13 -0000

Tags: WordPress, themes

by: jdr santos

WPBeginner - Beginner's Guide for WordPress

Sat, 12 Dec 2009 11:28:17 -0000

Tags: WordPress, resources, plugins, themes, tutorials

by: jdr santos

200+ Christmas Icons to Decorate Your Blog

Fri, 11 Dec 2009 05:55:08 -0000

We are almost 10 days away from our favorite Christmas! All the shopping malls and streets in India and Singapore are now filled up with decorations! Have you started to decorate your blog yet? Below you can find more than 200 Christmas icons to use in your blog. Each icon can be used in a unique st

Comments:

We are almost 10 days away from our favorite Christmas! All the shopping malls and streets in India and Singapore are now filled up with decorations! Have you started to decorate your blog yet? Below you can find more than 200 Christmas icons to use in your blog. Each icon can be used in a unique st - kumar app

Tags: Blog, wordpress, christmas, icons, design, psd, templates

by: kumar app

Common SEO Mistakes Bloggers Make – Part 1

Thu, 10 Dec 2009 17:49:10 -0000

Bloggers write to let people know about their personality. It is every bloggers goal to gain a huge fan base and loyal following. Now how does one get a lot of eye-catching attention? If you did a search, on any search engine, about a topic you wrote and found a hit, then you my friend have accompli

Comments:

Bloggers write to let people know about their personality. It is every bloggers goal to gain a huge fan base and loyal following. Now how does one get a lot of eye-catching attention? If you did a search, on any search engine, about a topic you wrote and found a hit, then you my friend have accompli - kumar app

Tags: seo, bloggers, mistakes, blogger, wordpress, blog, nofollow, permalink, Indexing

by: kumar app

about Scriblio

Thu, 10 Dec 2009 12:08:22 -0000

Tags: wordpress, opac, opensource, scriblio, library2.0, library, cms, web2.0, wordpressplugin, plugin, plugins

by: awqi zar

WordPress › Custom Coming Soon Page « WordPress Plugins

Thu, 10 Dec 2009 10:56:24 -0000

Tags: plugins, wordpress, wordpressplugin, plugin

by: awqi zar

FoxRecord - Page Popularity Meter Widgets for blogs and websites

Thu, 10 Dec 2009 06:56:59 -0000

Tags: foxrecord, rss, feed, blogging, plugin, wordpress, blogspot, plugins, blog

by: awqi zar

Common WordPress SEO Mistakes and How To Fix Them

Tue, 08 Dec 2009 17:51:54 -0000

Tags: wordpress, seo, blogging

by: Rick Powell

Wordpress Tools and Resources Checklist

Tue, 08 Dec 2009 13:02:56 -0000

Over the past few days I have come across numerous tools and resources for working with Wordpress. This is one of the benefits of using an Open Source, however on the negative side you see that there is no central management system, neither is there any quality check on them. I hope to provide some

Comments:

Over the past few days I have come across numerous tools and resources for working with Wordpress. This is one of the benefits of using an Open Source, however on the negative side you see that there is no central management system, neither is there any quality check on them. I hope to provide some - kumar app

Tags: wordpress, checklist, theme, blog

by: kumar app

FAQ for Wordpress

Mon, 07 Dec 2009 14:09:35 -0000

An easy way to add and manage an FAQ on your Wordpress blog!

Comments:

An easy way to add and manage an FAQ on your Wordpress blog! - awqi zar

Tags: wordpress, wordpressplugin, plugins

by: awqi zar

BlogSecurity

Mon, 07 Dec 2009 09:33:00 -0000

Tags: WordPress, security

by: jdr santos

100 Excellent Free WordPress Themes - Smashing Magazine

Sun, 06 Dec 2009 06:17:39 -0000

Tags: wordpress, themes, design, blog, webdesign, theme, templates, blogging

by: awqi zar

Yoast GA Plugin for WP - Cross Site Scripting Vulnerability

Fri, 04 Dec 2009 17:25:42 -0000

Comments:

Yoast GA Plugin for WP - Cross Site Scripting Vulnerability

Version Affected: 3.2.4 (newest)

Info: The Google Analytics for WordPress plugin automatically tracks and
segments all outbound links from within posts, comment author links, links
within comments, blogroll links and downloads. It also allows you to track
AdSense clicks, add extra search engines, track image search queries and it
will even work together with Urchin.

Credits: InterN0T

External Links:
http://yoast.com/wordpress/google-analytics/

-:: The Advisory ::-
On line 353 in googleanalytics.php the following vulnerable code was identified:
/**
* If this is a 404 page, track the 404 and prevent all other stuff as it's not needed.
*/
if ( is_404() ) {
echo "\t\t".'pageTracker._trackPageview("/404.html?page=" + document.location.pathname + document.location.search + "&from=" + document.referrer);'."\n";
echo "\t".'} catch(err) {}'."\n";
echo '</script>'."\n";
} else if ($wp_query->is_search && $wp_query->found_posts == 0) {
echo "\t\t".'pageTracker._trackPageview("'.get_bloginfo('url').'/?s=no-results: '.$wp_query->query_vars['s'].'&cat=no-results");'."\n";
echo "\t".'} catch(err) {}'."\n";
echo '</script>'."\n";

In order to trigger this bug, a 404 (Not Found) message must be the response when supplying the XSS code into the search-form.

One can either end the script tag or use javascript in order to abuse this issue.

Proof of Concept's:
A. </script>alert(0)</script>
B. ");alert(0);document.write("

Example:
A. hxxp://localhost/wp/?s=</script><script>alert(0)</script>
B. hxxp://localhost/wp/?s=");alert(0);document.write("

If magic_quotes is enabled inside php.ini, Proof of Concept (B) wont work.

-:: Solution ::-
The following patch was supplied to the vendor:

On line 361 in googleanalytics.php the following piece of code is vulnerable to Cross Site Scripting:
echo "\t\t".'pageTracker._trackPageview("'.get_bloginfo('url').'/?s=no-results: '.$wp_query->query_vars['s'].'&cat=no-results");'."\n";

In order to prevent this, One will have to use f.ex. htmlentities or rawurlencode to secure it:
echo "\t\t".'pageTracker._trackPageview("'.get_bloginfo('url').'/?s=no-results: '.rawurlencode($wp_query->query_vars['s']).'&cat=no-results");'."\n";

The reason why we thought rawurlencode might be suitable is because htmlentities in a tracking URL might break the Google Analytics Tracking.

Disclosure Information:
- Vulnerability found 3rd December
- Patch was made available 4th December
- Disclosed on InterN0T 4th December
- Vendor and Buqtraq (SecurityFocus) contacted the 4th December

All of the best,
MaXe

No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 9.0.709 / Virus Database: 270.14.91/2542 - Release Date: 12/03/09 19:36:00 - David McCart

Tags: XSS, wordpress, plugin

by: David McCart

90+ Top Noch Free Wordpress Themes | tripwire magazine

Thu, 03 Dec 2009 14:28:58 -0000

Tags: themes, webdesign, wordpress, wordpresstheme

by: awqi zar

Displaying Twitter Avatars In Your Blog Comments | The Common Hoster

Thu, 03 Dec 2009 03:07:06 -0000

Tags: wordpress, comments

by: James Fields

Digital Nature

Wed, 02 Dec 2009 08:49:18 -0000

Tags: web design, WordPress, themes, showcase

by: jdr santos

Favorite Five: Free Wordpress News Themes | Devlounge

Wed, 02 Dec 2009 08:32:51 -0000

Tags: wordpress, free, themes, news, theme

by: awqi zar