Comments on: A Common-Sense WordPress Security Primer: http://www.wordpressblue.com/2010/02/a-common-sense-wordpress-security-primer/ Easy WordPress Setup and Modification Fri, 22 Apr 2011 11:04:25 +0000 hourly 1 http://wordpress.org/?v=3.3 By: jonathansoroko http://www.wordpressblue.com/2010/02/a-common-sense-wordpress-security-primer/comment-page-1/#comment-803 jonathansoroko Sun, 07 Mar 2010 20:44:39 +0000 http://www.wordpressblue.com/?p=660#comment-803 Andy, you're entirely right. Often the main upgrade comes with new vulnerabilities - which are patched later in the "smaller" upgrades. For a small operation - a lot to keep up with. Andy, you’re entirely right. Often the main upgrade comes with new vulnerabilities – which are patched later in the “smaller” upgrades. For a small operation – a lot to keep up with.

]]> By: Andy http://www.wordpressblue.com/2010/02/a-common-sense-wordpress-security-primer/comment-page-1/#comment-800 Andy Sat, 06 Mar 2010 02:22:32 +0000 http://www.wordpressblue.com/?p=660#comment-800 Thank you for this post! It is a breath of fresh air that you get it. You can't always upgrade, and simple upgrading isn't always enough. When I discover a serious Wordpress security issue, I generally find a patch for my current version, or I make one myself. Ironically, the advocates of upgrading early and often point to the automated web-based upgrade feature. But using that creates additional security holes that can't be prevented. I know you need a sysadmin to do it, but the manual upgrade is so much safer. Thank you for this post! It is a breath of fresh air that you get it. You can’t always upgrade, and simple upgrading isn’t always enough. When I discover a serious WordPress security issue, I generally find a patch for my current version, or I make one myself.

Ironically, the advocates of upgrading early and often point to the automated web-based upgrade feature. But using that creates additional security holes that can’t be prevented. I know you need a sysadmin to do it, but the manual upgrade is so much safer.

]]>