<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Personal Web Tech Development &#187; plugin</title>
	<atom:link href="http://suraja.com/website/tag/plugin/feed" rel="self" type="application/rss+xml" />
	<link>http://suraja.com</link>
	<description>My other personal approach on tech and website development</description>
	<lastBuildDate>Tue, 17 Jan 2012 20:23:50 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>How to avoid WordPress Remote SQL Injection</title>
		<link>http://suraja.com/website/website-development/how-to-avoid-wordpress-remote-sql-injection.html</link>
		<comments>http://suraja.com/website/website-development/how-to-avoid-wordpress-remote-sql-injection.html#comments</comments>
		<pubDate>Thu, 26 Jun 2008 10:18:00 +0000</pubDate>
		<dc:creator>Web Tech</dc:creator>
				<category><![CDATA[Programming]]></category>
		<category><![CDATA[SEO]]></category>
		<category><![CDATA[Website Development]]></category>
		<category><![CDATA[Wordpress]]></category>
		<category><![CDATA[bug]]></category>
		<category><![CDATA[plugin]]></category>
		<category><![CDATA[sql injection]]></category>
		<category><![CDATA[vulnerable]]></category>

		<guid isPermaLink="false">http://suraja.com/website/website-development/how-to-avoid-wordpress-remote-sql-injection.html</guid>
		<description><![CDATA[WordPress Remote SQL Injection could be a pre-disaster for your WordPress blog, it has been discovered a SQL Injection vulnerability that allows an attacker to retrieve remotely any user credentials from a vulnerable site, this bug is caused because of early database escaping and the lack of validation in query string like parameters. Wordpress Remote [...]]]></description>
			<content:encoded><![CDATA[<p><a href='http://suraja.com/website/website-development/how-to-avoid-wordpress-remote-sql-injection.html/picture-of-wordpress-remote-sql-injection/' rel='attachment wp-att-138' title='Picture of WordPress Remote SQL Injection'><img src='http://suraja.com/wp-content/wordpress-sql-injection.jpg' alt='Picture of WordPress Remote SQL Injection' /></a><strong>WordPress Remote SQL Injection could be a pre-disaster for your WordPress blog, it has been discovered a SQL Injection vulnerability that allows an attacker to retrieve remotely any user credentials from a vulnerable site, this bug is caused because of early database escaping and the lack of validation in query string like parameters.</strong><br />
Wordpress Remote SQL Injection most likely not a destructive job for your WordPress blog, they just inject a redirect or iframe to their own page/website. This is a blackhat SEO injection technique that could hurt your website SEO campaign.</p>
<p>To prepare yourself, read some tips below:<br />
- Always check your AWSTATS to determine your suspicious visitor activity.<br />
- Backup your WordPress files and database weekly incase you need to restore it if needed<br />
- Always update your WordPress instalation to the latest stable version. On the main dashboard, you&#8217;ll always see new release information.<span id="more-137"></span></p>
<p>If you have to keep to use an old WordPress version, make sure that you hide your WordPress version. A lot of attackers and automated tools will try and determine software versions before launching exploit code. Removing your WordPress blog version may discourage some attackers and certainly will mitigate virus and worm programs that rely on software versions.<br />
Please note that hiding your WordPress version may break any plugins you have which are version dependant.</p>
<p><strong>Then how to avoid WordPress Remote SQL Injection?</strong><br />
I found this WordPress Security Scan plugin that will scan your WordPress installation for security vulnerabilities and suggests corrective actions.Such<br />
- passwords<br />
- file permissions<br />
- database security<br />
- version hiding<br />
- WordPress admin protection/security<br />
- removes WP Generator META tag from core code<br />
You can download this useful plugin <a href="http://downloads.wordpress.org/plugin/wp-security-scan.2.3.zip" target="_blank">here</a></p>
<p>And to complete your mission to fight the WordPress Remote SQL Injection, set the file permission (chmod) to 444 (r–r–r–) or read-only to these WordPress files:<br />
- index.php<br />
- wp-config.php<br />
- wp-setting.php<br />
- All your themes file located on wp-content/themes<br />
Note: Actually you can set all files on your root WordPress directory to 444 (exclude the sitemap or any 666 needed files)</p>
<p>This last tips completely rocks!</p>
<p>Let me how it works for you and say something to fight the WordPress SQL Injection!</p>
<h4>Incoming search:</h4> <a href="http://suraja.com/website/website-development/how-to-avoid-wordpress-remote-sql-injection.html" title="444 avoids sql injections">444 avoids sql injections</a>]]></content:encoded>
			<wfw:commentRss>http://suraja.com/website/website-development/how-to-avoid-wordpress-remote-sql-injection.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WordPress Plugin for Auto Nofollow and Opened in New Window</title>
		<link>http://suraja.com/website/website-development/wordpress-plugin-for-auto-nofollow-and-opened-in-new-window.html</link>
		<comments>http://suraja.com/website/website-development/wordpress-plugin-for-auto-nofollow-and-opened-in-new-window.html#comments</comments>
		<pubDate>Fri, 20 Jun 2008 11:33:56 +0000</pubDate>
		<dc:creator>Web Tech</dc:creator>
				<category><![CDATA[SEO]]></category>
		<category><![CDATA[Website Development]]></category>
		<category><![CDATA[Wordpress]]></category>
		<category><![CDATA[plugin]]></category>

		<guid isPermaLink="false">http://suraja.com/website/website-development/wordpress-plugin-for-auto-nofollow-and-opened-in-new-window.html</guid>
		<description><![CDATA[Couple weeks ago I wrote about how to make your Paid Post safe for Google, and for this purpose I found a great WordPress plugin to do this automatically. This WordPress plugin will automatically make any link on your post to be rel=nofollow and target=_blank (will make it opened in a new window) This could [...]]]></description>
			<content:encoded><![CDATA[<p><a href='http://suraja.com/website/website-development/wordpress-plugin-for-auto-nofollow-and-opened-in-new-window.html/picture-of-nofollow-plugin/' rel='attachment wp-att-134' title='Picture of Nofollow plugin'><img src='http://suraja.com/wp-content/nofollow-plugin.jpg' alt='Picture of Nofollow plugin' /></a><strong>Couple weeks ago I wrote about <a href="http://suraja.com/website/make-money/how-to-make-your-paid-post-safe-for-google.html">how to make your Paid Post safe for Google</a>, and for this purpose I found a great WordPress plugin to do this automatically. This WordPress plugin will automatically make any link on your post to be rel=nofollow and target=_blank (will make it opened in a new window)</strong><br />
This could save your time if you have a large post on your WordPress blog and make your selling link list more safe on Google&#8217;s eye. Great for any SEO campaign!</p>
<p>You can <a href="http://pile.web.id/download/nofollow.zip" target="_blank">download the plugin</a> here and read the manual instructions, it&#8217;s not too difficult anyway.<span id="more-133"></span> Just let me know how it works for your SEO campaign.</p>
]]></content:encoded>
			<wfw:commentRss>http://suraja.com/website/website-development/wordpress-plugin-for-auto-nofollow-and-opened-in-new-window.html/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Gallery Navigation Plugin</title>
		<link>http://suraja.com/website/website-development/gallery-navigation-plugin.html</link>
		<comments>http://suraja.com/website/website-development/gallery-navigation-plugin.html#comments</comments>
		<pubDate>Sat, 10 May 2008 00:55:54 +0000</pubDate>
		<dc:creator>Web Tech</dc:creator>
				<category><![CDATA[Website Development]]></category>
		<category><![CDATA[Wordpress]]></category>
		<category><![CDATA[gallery]]></category>
		<category><![CDATA[image]]></category>
		<category><![CDATA[plugin]]></category>

		<guid isPermaLink="false">http://suraja.com/website/website-development/gallery-navigation-plugin.html</guid>
		<description><![CDATA[Gallery Navigation Plugin is a simple WordPress 2.5 plugin that allows you to quickly add page navigation to your wordpress 2.5 gallery. Installation 1. Upload `galnav.php` to the `/wp-content/plugins/` directory 2. Activate the plugin through the &#8216;Plugins&#8217; menu in WordPress 3. Place &#8216;&#60;?php isgal($post-&#62;ID); ?&#62;` before the contenty loop (the_content();) in your post templates Example: [...]]]></description>
			<content:encoded><![CDATA[<p><img src='http://suraja.com/wp-content/gallery-plugin.jpg' alt='Picture of Gallery navigation Plugin' />Gallery Navigation Plugin is a simple WordPress 2.5 plugin that allows you to quickly add page navigation to your wordpress 2.5 gallery.</p>
<p><strong>Installation</strong></p>
<p>1. Upload `galnav.php` to the `/wp-content/plugins/` directory<br />
2. Activate the plugin through the &#8216;Plugins&#8217; menu in WordPress<br />
3. Place &#8216;&lt;?php isgal($post-&gt;ID); ?&gt;` before the contenty loop (the_content();)<br />
in your post templates<br />
Example:<br />
&lt;?php the_content(&#8217;&lt;p class=&#8221;serif&#8221;&gt;Read the rest of this entry &raquo;&lt;/p&gt;&#8217;); ?&gt;</p>
<p>4. Don&#8217;t forget to fill the Custom Fields<br />
Key: isgallery<br />
Value: true</p>
<p>The demo page can be seen <a href="http://suraja.com/wp/wordpress/uncategorized/just-demo.html" target="_blank">here</a></p>
<p>Download <a href="http://suraja.com/gallerynav.zip" target="_blank">Gallery Navigation Plugin</a></p>
<p>Give your feedback/comments, so we could develop this plugin more for you</p>
<h4>Incoming search:</h4> <a href="http://suraja.com/website/website-development/gallery-navigation-plugin.html" title="wordpress Gallery pagination">wordpress Gallery pagination</a>, <a href="http://suraja.com/website/website-development/gallery-navigation-plugin.html" title="gallery navigation wordpress plugin">gallery navigation wordpress plugin</a>, <a href="http://suraja.com/website/website-development/gallery-navigation-plugin.html" title="golak gopu">golak gopu</a>, <a href="http://suraja.com/website/website-development/gallery-navigation-plugin.html" title="photo gallery navigation wordpress">photo gallery navigation wordpress</a>, <a href="http://suraja.com/website/website-development/gallery-navigation-plugin.html" title="photo gallery with navigation wordpress">photo gallery with navigation wordpress</a>, <a href="http://suraja.com/website/website-development/gallery-navigation-plugin.html" title="wordpress gallery navigation plugin">wordpress gallery navigation plugin</a>, <a href="http://suraja.com/website/website-development/gallery-navigation-plugin.html" title="wordpress gallery plugin with navigation">wordpress gallery plugin with navigation</a>]]></content:encoded>
			<wfw:commentRss>http://suraja.com/website/website-development/gallery-navigation-plugin.html/feed</wfw:commentRss>
		<slash:comments>12</slash:comments>
		</item>
	</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Minified using disk: basic
Page Caching using disk: enhanced
Database Caching 10/24 queries in 0.044 seconds using disk: basic
Object Caching 469/493 objects using disk: basic

Served from: suraja.com @ 2012-05-23 19:32:15 -->
