+ Reply to Thread
Results 1 to 4 of 4

Thread: Wordpress Users Beware

  1. #1
    takuhii's Avatar
    takuhii is offline x10 Sophmore takuhii is an unknown quantity at this point
    Join Date
    Mar 2006
    Location
    UK
    Posts
    172

    Wordpress Users Beware

    Guys,
    I have found some issues with Wordpress, that are nothing to do with server config etc... Read on


    I just install wordpress 2.2.1 this morning. But I found an error when I try to delete posts in my blog. I get the dreaded "You do not have permission to do this" error. I searched thru Internet and finally found a solution that solved the problem for wordpress 2.1. I tried out the solution with wordpress 2.2.1 and I found it also work in wordpress 2.2.1. The only difference is the code change is not as mentioned in solution for wordpress 2.1. IF YOU PERFORM THIS CHANGE ON 2.2.1 IN THE WRONG LOCATION YOU WILL GET LOCKED OUT OF YOUR WORDPRESS ADMIN PANEL!!!

    In wordpress 2.1, you have to replaced lines 244 through 250 of wp-includes/pluggable as below :$cookie = explode('; ', urldecode(empty($_POST['cookie']) ? $_GET['cookie'] : $_POST['cookie'])); // AJAX scripts must pass cookie=document.cookie
    foreach ( $cookie as $tasty ) {
    if ( false !== strpos($tasty, USER_COOKIE) )
    $user = substr(strstr($tasty, '='), 1);
    if ( false !== strpos($tasty, PASS_COOKIE) )
    $pass = substr(strstr($tasty, '='), 1); }with
    $user = $_COOKIE[USER_COOKIE];
    $pass = $_COOKIE[PASS_COOKIE];
    but in wordpress 2.2.1, you have to replace lines 296 through 302 (or there-about, look for the $cookie = explode line) of wp-includes/pluggable.php instead of lines 244 through 250

    with
    $user = $_COOKIE[USER_COOKIE];
    $pass = $_COOKIE[PASS_COOKIE];
    It seems the wordpress developers are aware of the problem, but don't seem to want to fix it, as this problem seems to have been around since Wordpress 1.5.

    If anyone wants me to fix there Wordpress install, give me a shout, as I've managed to get mine working again... If anyone can confirm that pluggable.php is a universal file (ie. not specific to my server), I will publish the fixed code as an attachment to this post...

    I've had a quick glance over the pluggable.php file and it seems pretty harmless.

    Attached to this post is the FIXED pluggable.php for WordPress 2.2.1. PLEASE PLEASE PLEASE backup your original BEFORE you use this file, as I cannot be held responsible for any issues that may arise. You use this file at your own risk.
    Attached Files
    Last edited by lambada; 07-05-2007 at 04:06 PM.
    All your domains are belong to us
    Web, HTML & Design Guru

  2. #2
    cyberxzt's Avatar
    cyberxzt is offline Zine Tech cyberxzt is an unknown quantity at this point
    Join Date
    Sep 2005
    Location
    Cheektowaga, New York
    Posts
    399

    Re: Wordpress Users Beware

    This shouldnt be done for everyone though, only people that have the problems, lol I was one of them, btw I could be wrong but I think this is in the wrong section.

    also dont double post, use the edit feature
    Last edited by cyberxzt; 07-05-2007 at 04:00 PM.

  3. #3
    lambada's Avatar
    lambada is offline x10 Elder lambada is an unknown quantity at this point
    Join Date
    Mar 2006
    Location
    Caister, Gt Yarmouth, Norfolk, ENGLAND
    Posts
    1,222

    Re: Wordpress Users Beware

    Posts merged.

    Thread moved to Site Management
    Lambada - the former Account Manager (before I resigned)




  4. #4
    takuhii's Avatar
    takuhii is offline x10 Sophmore takuhii is an unknown quantity at this point
    Join Date
    Mar 2006
    Location
    UK
    Posts
    172

    Re: Wordpress Users Beware

    PLEASE: THIS FIX IS ONLY FOR WORDPRESS 2.2.1
    All your domains are belong to us
    Web, HTML & Design Guru

+ Reply to Thread

Similar Threads

  1. ads and wordpress
    By mattyranks in forum Free Hosting
    Replies: 9
    Last Post: 11-01-2006, 10:11 AM
  2. Wordpress installation failures
    By akinet in forum Free Hosting
    Replies: 2
    Last Post: 10-09-2005, 06:05 AM
  3. Upgrade: Wordpress
    By n4tec in forum Scripts & 3rd Party Apps
    Replies: 0
    Last Post: 08-18-2005, 08:53 AM
  4. Beware Of The Jackson Suicide Virus
    By stealth_thunder in forum Scripts & 3rd Party Apps
    Replies: 7
    Last Post: 06-30-2005, 12:13 PM
  5. Adding Ads in Wordpress
    By sh8y in forum Free Hosting
    Replies: 4
    Last Post: 06-15-2005, 03:51 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
x10hosting free hosting for the masses
dedicated servers