PHP Web Host - Quality Web Hosting For All PHP Applications $35/month $250/year (Unlimited) - $25/month - 200,000 impressions - Your Ad Could be Here - Click For Details
  Login or Register
 • Home • Downloads • Your Account • Forums • 
  Forum FAQ  •  Search  •  Memberlist  •  Usergroups  •  Profile  •  Log in to check your private messages  •  Log in

WordPress an insecure system
 View next topic
View previous topic


Google
 
Web RavenPHPScripts (This Site)
Post new topic   Reply to topic  Ravens PHP Scripts And Web Hosting Forum Index » Security - Other
Author Message
Susann
Moderator


Joined: Dec 19, 2004
Posts: 2202
Location: Germany:Moderator German NukeSentinel Support
PostPosted: Tue Nov 20, 2007 5:01 pm Reply with quote Back to top
Only registered users can see links on this board!
Get registered or login to the forums!
Rolling Eyes

Is there an other recommend blog software where I can easily switch over with my db ?
I have more and more that feeling WordPress is more like a toy.
View user's profile Send private message Visit poster's website
evaders99
Moderator


Joined: Apr 30, 2004
Posts: 2796
PostPosted: Tue Nov 20, 2007 10:07 pm Reply with quote Back to top
If you can get the password hash, you can exploit many PHP systems (phpNuke included). I am working out some code to hash the cookie so it appears different from the database.

Wordpress is constantly being updated, I don't see it as being a toy project at all. They have a pretty good open-source community.
View user's profile Send private message Visit poster's website
Susann
Moderator


Joined: Dec 19, 2004
Posts: 2202
Location: Germany:Moderator German NukeSentinel Support
PostPosted: Wed Nov 21, 2007 3:50 am Reply with quote Back to top
Sure its constantly being update but to secure WP better they need to change the structure said Stefan Esser a time ago and I believe as long as this isnŽt done its still insecure.
I know thats not the only security problem with WordPress quess we Žll see in the future more and more hacked WordPress sites.
View user's profile Send private message Visit poster's website
montego
Site Admin


Joined: Aug 29, 2004
Posts: 7339
Location: Arizona
PostPosted: Wed Nov 21, 2007 6:13 am Reply with quote Back to top
You could look into b2evolution. This is what I am using. But, Wordpress definitely has a huge following.
View user's profile Send private message Visit poster's website
Susann
Moderator


Joined: Dec 19, 2004
Posts: 2202
Location: Germany:Moderator German NukeSentinel Support
PostPosted: Wed Nov 21, 2007 7:06 am Reply with quote Back to top
Will do Montego.Serendipity is also interesting. I just will not loose all my entries from the last years.
View user's profile Send private message Visit poster's website
Display posts from previous:       
Post new topic   Reply to topic  Ravens PHP Scripts And Web Hosting Forum Index » Security - Other


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Forums ©
 

All logos and trademarks in this site are property of their respective owner.
The comments are property of their posters, all the rest © 2002-2008 by Raven
Proud to be listed at Lobo Links Web Directory

You can syndicate our news using the file xml

CSE HTML Validator Helped Clean up This Page! [Valid RSS] valid RSS 2.0 Valid robots.txt Stop Spam Harvesters, Join Project Honey Pot

Website engines core code is © copyright by PHP-Nuke but has been heavily patched and modified by myself and others.
PHP-Nuke is a free software released under the GNU/GPL.

:: fisubice phpbb2 style by Daz :: PHP-Nuke theme by www.nukemods.com ::

:: fisubice Theme Recoded To 100% W3C CSS & HTML 4.01 Transitional Compliance by Raven and 64bitguy ::

:: W3C CSS Compliance Validation :: W3C HTML 4.01 Transitional Compliance Validation ::

zerosum