b2 [project page / test blog] [login] [register]

[ This is a test blog, with posts about the development of b2, and comments ]

[ Bugs/suggestions ? Check the Forums ! ]

10.10.03

Hello everyone. As some of you may be aware, a SQL injection vulnerability was reported and fixed in WordPress. As the same vulnerability effects all recent versions of b2, Michel asked me to put together a release for people who weren't ready to upgrade to WordPress yet and were still using b2. So b2 version 0.6.2.2 is available. The only change from the previous version is in blog.header.php where the vulnerable code was located. Thanks to Seth Woolley for reporting this issue responsibly. Be safe and upgrade as soon as possible.
matt @ 07:32:36 647
34 comments, no trackback, 3 pingbacks

 

:: comments

 

kenneth - url
Probably the wrong place to do this: but you guys forgot to bump the version number in b2vars : P .
10.10.03 @ 08:26:50 685

 

epolady - email
Anyone else getting 404s when downloading either package? Even other mirror URLs lead to 404. I had this problem with WP earlier, but it looks like it's fixed now.
10.10.03 @ 11:41:16 820

 

Matt - email - url
Epolade, that's probably because the release hadn't propogated to all the Sourceforge mirrors yet.
10.10.03 @ 16:08:01 005

 

epolady
They're both working for me now, thanks again.
10.10.03 @ 23:30:29 312

 

Ben Woolley - url
Seth's URL is really http://seth.positivism.org/ or http://seth.tautology.org/ and not http://tautology.org/ which is my site. I am his brother, only hosting is email address. I made tautology.org redirect all referrers from here to seth.positivism.org.
11.10.03 @ 03:02:07 459

 

Matt - email - url
Ben, sorry for the mixup. I've updated the post with the correct link.
11.10.03 @ 03:18:23 471

 

Ben Woolley - url
Thanks, although I certainly didn't mind the link myself. : ) 
11.10.03 @ 03:30:10 479

 

jessie - email - url
Can anyone help me with my template since i'm B2-disabled?
my B2 url is http://purple-meadow.net/avada_kedavera/index.php

i'm wanted a hp layout too oo;
15.10.03 @ 03:28:19 477

 

nk - email
Why don't you create a security-newsletter, just for advisories like the mysql injection, and when new releases are available, it'll be too useful for people like me who don't have the time to watch the forum or periodically read the blog.

cheers
15.10.03 @ 13:28:41 894

 

Katie - email - url
How do you make your comments not popup and how do you get the smilies to show up in ur blogs??
17.10.03 @ 01:26:42 393

 

epolady
Katie, try a search in the forums.
17.10.03 @ 01:33:08 398

 

billy - email - url
katie, read the read me file ; ) 
17.10.03 @ 05:07:46 547

 

hyprskillz - url
hmmm... Anyone know how to move the links portion to the left? Thanks.
27.10.03 @ 07:08:30 672

 

zib - email - url
Good work : )  happy new year
03.01.04 @ 01:41:22 445

 

Bilder und Poster => wooop - email - url
I have a question: What is about using J - Skript in blog - comments. Please post a short answer - comment. That would be very nice from you, because I want to learn more about the things beside atom and rss.
14.02.04 @ 00:51:20 410

 

Bob
How do you make your comments not popup and how do you get the smilies to show up in ur blogs??
29.02.04 @ 23:45:40 365

 

hentai - email - url
hi, interesting site
27.06.04 @ 12:13:58 843

 

Detlef - email - url
hm, good that this bug was fixed fast
09.07.04 @ 22:00:15 250

 

jesuzz - url
yeah, how does smilies work
13.07.04 @ 09:59:01 749

 

James White - email - url
Armor2net Personal Firewall, a program for the Windows operating system that helps protect computers from the threats on the Internet and World Wide Web. With Armor2net Personal Firewall in place, end-users can breathe a sigh of relief.
For more information, please visit: http://www.armor2net.com
06.08.04 @ 06:15:41 594

 

zombie - email - url
hey guys,
this site ROCKS!
cheeeeeeeers!
-the zombie
31.08.04 @ 18:08:33 089

 

bacon - email
bacon
18.09.04 @ 17:06:09 045

 

tatiana - email
horoscopo semanal tatuaggi gratuiti sesso
30.09.04 @ 14:10:03 923

 

olga - email
ragazze lesbiche
04.10.04 @ 09:13:03 717

 

mary9 - email
futuro
07.10.04 @ 13:55:25 913

 

claudia - email
pornostar
08.10.04 @ 10:00:13 750

 

Bryan - email - url
SQL injection vulnerability was reported and fixed in WordPress. As the same vulnerability effects all recent versions of b2, Michel asked me to put together a release for people who weren't ready to upgrade to WordPress yet and were still using b2. So b2 version 0.6.2.2 is available. The only change from the previous version is Didrex in blog.header.php where the vulnerable code was located. Thanks to Seth Woolley for reporting this issue responsibly
11.10.04 @ 08:05:25 670

 

rebecca - email
pene grosso celebrita nude donne famose annunci accompagnatrici annunci amatoriali accompagnatrici milano sesso virtuale ragazze lesbiche
11.10.04 @ 13:46:17 907

 

raffaella - email
siti porno
13.10.04 @ 13:45:41 906

 

cinzia - email
sesso gayuomini nudiannunci gayimmagini gayporno gaygay
14.10.04 @ 09:53:39 745

 

emanuela - email
pissen
18.10.04 @ 12:58:59 874

 

lorena - email
sesso
21.10.04 @ 10:14:33 760

 

ramona - email
gratis sessotettefilm pornofilmati pornofoto erotichefumetti pornocalendariannunci eroticifigasesso di gruppo
27.10.04 @ 14:00:11 916

 

nexium - email - url
You type something in a form and hit "blog this"; in the next second it's on your website page(s).

Pages are generated dynamically. Your posts are automatically arranged by date into a template/skin you have chosen and that you can customize. You can also browse through the archives and use advanced search capabilities.

Readers of your website can leave comments on your post that also get displayed automatically below your original text.

You might want to give blogger.com a quick online try. As soon as you feel limited (that can happen in 30 minutes; readers cannot even leave comments on blogger.com), come back here and read on...
06.11.04 @ 07:18:37 679

 

:: leave a comment

 

name

email

url

your comment

Auto-BR (line-breaks become <br> tags)

 

[powered by b2.]

archives
march 2004
january 2004
december 2003
november 2003
october 2003
july 2003
june 2003
may 2003
march 2003
november 2002
october 2002
september 2002
august 2002
july 2002
june 2002
may 2002
april 2002
march 2002
february 2002
january 2002
december 2001
november 2001
october 2001
september 2001
august 2001
july 2001
june 2001

What is b2 ?
A classy news/weblog tool (aka logware).

How does it work ?
You type something and hit "blog this" and in the next second it's on your page(s). You can write extended entries, or even entries that span multiple pages. You can also use BloggerAPI clients to post to your b2 weblog.
What's original in b2 ? Pages are generated dynamically from the MySQL database, so no clumsy 'rebuilding' is involved. It also means faster search/display capabilities, and the ability to serve your news in different 'templates' without any hassle.

Requirements ?
A server that can run PHP4, and a MySQL database (you can install b2 in an already existing database, and you can put several b2's in one database).

Where can I download it ?
b2 0.6 is the latest public release.
You can also visit the CVS server for the latest code, at your own risks.
See the ReadMe file for requirements and installation instructions.

Contact info ?
E-mail: m@tidakada.com
Forums: over there. :)

Post categories:

Search:

 

They are powered by b2:


e-mail me when you install b2 on your site, include your URL to be linked here.

 

Recently updated b2 weblogs:


To be included in that list whenever you post to your weblog, please use b2 v0.6 or later, and then e-mail update@tidakada.com with: your site's name, URL, e-mail, and a password. You will then receive an e-mail with an ID string that you'll have to paste in your b2config.php file. And then you'll be linked there :)

 

<< # [powered by b2] ? >>

 

If you like b2, please rate it at HotScripts.com