No Self Ping | I'm Just Sharing

WordPress 2.9.2; An Update You Can Probably Skip

Posted by Mitch Mitchell on Feb 16, 2010

If you have a WordPress blog, by now you probably have noticed that there’s another update, this time to 2.9.2. Unlike previous updates, this one corrects a minor security flaw that most of us really don’t have to worry about, so you can probably skip it. However, since I’ve mentioned that, I might as well gripe about it at the same time.

The security fix has to do with this new thing they added with 2.9 where, instead of just deleting certain messages, you can move them to the trash and then delete them from there. It seems that if you have people who log into your blog to do whatever, they can look at any messages that you have trashed. The concern is that if you trashed something because it was sensitive, you might not want anyone else in there.

Of course, I’ve kind of railed against having to sign into blogs to comment anyway, so in a way this penalizes those folks who have made people log in to comment; tough being you. As for what move to trash, the only things I move to trash on any of my blogs are when there’s a trackback and it’s coming from me from another blog I’ve linked to. I figure those don’t need to be there, and I’ve already taken care of not sending trackbacks to the blog I’m writing on because of the No Self Pings plugin I wrote about back in November.

My minor rant is against this “trash” thing to begin with. I’d like to know how many people have been going around deleting things from their own blogs, then suddenly saying “oops, I wish I hadn’t deleted that?” Frankly, it’s an extra step I hate having to do when I do it on those trackbacks. However, since they did that, why couldn’t they have added the one more option in their drop down menu to allow those of us who feel sure about what we’re getting rid of to delete at that point?

And one more thing. Have you noticed when you check your spam filter than if there’s something in there that’s really not spam, if you select Not Spam it moves it to your comments, but you still have to approve it? At least here the drop down menu does give you the option to approve the comment so you don’t have to touch it twice. Consistency can be our friend sometimes.

Anyway, skip this update if you don’t have people logging into your blog, or if you don’t ever plan on having anything sensitive that you don’t want anyone else to see in your trash.