Category Archives: Wordpress

WordPress 2.8.3 Vulnerability

Beberapa minggu lalu mendapat informasi melalui twitter milik @milw0rm, bahwa telah ditemukan bug baru pada WordPress 2.8.3 yaitu Remote Admin Reset Password. Bagi yang masih menggunakan WordPress versi 2.8.3 hendaknya mengupdate ke versi terbaru yaitu versi 2.8.4 Bug ini menyerang pada file wp-login.php dengan mengubah nilai aray $key pada file wp-login.php tersebut. Maka otomatis password [...]
Also posted in Hacking, News | Tagged , , | 5 Comments

What's Wrong With Bad Behavior ?

Yesterday morning, when I checked my blog for umpteenth time. I try to view the log of my blog from Bad Behavior plugin. Wow, I surprised when I saw my password is show there What’s wrong with this plugin ? I dont know exactly.. I see ip address and its time, yeah maybe they are [...]
Posted in Wordpress | Tagged , , , | 27 Comments

5 Steps To Protection WordPress

1. Create .htaccess Create .htaccess file like this : <IfModule mod_rewrite.c> RewriteEngine On php_flag register_globals off RewriteBase / RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] </IfModule> <Files wp-config.php> Order Deny,Allow Deny from All </Files> 2. Create Robots.txt User-agent: * Allow: / Disallow: /wp-admin/ Disallow: /wp-includes/ Disallow: /wp-content/ 3. Create file index.html Create [...]
Posted in Wordpress | Tagged , | 84 Comments

I'm Using WordPress 2.8-bleeding-edge

Yesterday, my web server at this blog getting down because someone has attacking / DDOS this server. Until 1 days, my server is down. So my friend, Hamid asking me whether to move to his server.  I answer if i do. So, at tonight I backing up all of my database and files from old [...]
Also posted in Intermezzo, News | Tagged , , , | 25 Comments

BernadSatriani.NET | Catatan Perjalanan is Digg proof thanks to caching by WP Super Cache