
As you have noticed today, your blog is offering to upgrade to new WordPress 2.8. I have been working with WP2.8 for some two months now, and I think it’s a great update. But upgrading to WP 2.8 at this point may prove to be a problem.
On my Dev4Press blog I have posted two articles about WP 2.8. One is a sort of a review of new features, and the other is written today about the process of upgrading:
- WordPress 2.8: http://www.dev4press.com/2009/06/06/wordpress-28/
- Upgrading to WordPress 2.8: http://www.dev4press.com/2009/06/11/upgrading-to-wordpress-28/
As you know GD Star Rating is fully compatible with WP 2.8, so no worries there. But many other plugins are not. So read these articles to find out what you can expect.
loading...




Comment Link
Small issue, it’s no more possible to configure the GD Star widget as some of the parameter are hidden below the border (at least in French). The problem can be solved by using the accessibility mode.
loading...
Comment Link
I don’t understand. Can you post a picture. I don’t have problems setting anything with those widgets.
loading...
Comment Link
Hi, i like to know if the error: VN:F [1.4.3_701], is posible caused by this plugin or update por wp 2.8.
Tnks for all!
loading...
Comment Link
I am reallly tired of this. Read the tutorials about solving problems. This is excerpt problem, not a bug.
loading...
Comment Link
Hey,
I may have mistakenly diagnosed this – but I think an exploit has been found in GD Star Rating, as I think this is how my website has been injected with a few XSS bugs. Anyone know anything about this?
loading...
Comment Link
It’s highly unlikely. Data is cleaned on receiving, plugin uses noonce protection from WordPress and if data is not up to specs, request is denied. Also, no one else reported such a problem. How do you know that it has anything to do with GD Star Rating?
loading...
Comment Link
I don’t really know that it has anything to do with GD Star Rating as such, it’s just that when I disabled it, the repetitive attacks stopped happening – and there were also attempts made to access a GD Ratings directory in the log. Maybe it’s just a pure coincidence, I don’t know. Hopefully I’ll be able to re-enable star ratings again, it’s a great plugin you have.
loading...
Comment Link
Access to folders on the server has nothing to do with plugin itself, it depends on the sever settings. But, as for the AJAX and potential XSS attacks, just to be sure I have made some changes to main AJAX handler file and added additional validation of data. New version will be released tonight.
loading...