Changing the prefix of your WordPress tables will add an extra layer of security to your site and is not at all difficult to do. Whenever I install WordPress I do so manually via FTP but many users prefer to use an automated script like Fantastico. While convenient, the problem with Fantastico is that it uses the wp_ prefix as a default value - something all of the bad guys know and can attempt to... continue reading
Hardcoding a navigation menu to display a list of pages is not necessary thanks to the wp_list_pages() template tag which automatically generates the list for you. Perusing the Codex we see this template tag accepts numerous parameters to modify the output. A standard use of this tag in a horizontal navigation menu might look like this...
<?php wp_list_pages('title_li='); ?>
The parameter title_li... continue reading
Creating a popup effect for an image contained within a post is a cool way to add a little style to your blog. It also negates having your readers view the enlarged image on another page then hitting the back button to return to your post. There are different ways to accomplish this including the use of various plugins. But did you know you don't need a plugin? Let's see it in action. Click the image... continue reading
By default, WordPress will display the following text for password protected posts,
This post is password protected. To view it please enter your password below:
This is determined by Line 1146 at wp-includes/post-template.php. What if you wanted to change that output to something else? One solution would be to simply edit Line 1146 at wp-includes/post-template.php. Of course editing core files is... continue reading
Users are advised to upgrade their WordPress installs to version 2.8.6 which fixes two vulnerabilities. From the official WordPress Dev Blog,
2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended.
The first problem is an XSS vulnerability in Press This discovered... continue reading