# Check Your WordPress Security - Host: [red-sweater.com](https://links.thingelstad.xyz/hosts/red-sweater.com/) - Saved: April 14, 2008 (2008-04-14T19:01:06Z) - Record: https://links.thingelstad.xyz/links/126fc4bf79a0/ - JSON: https://links.thingelstad.xyz/links/126fc4bf79a0.json ## From the page (probably an excerpt, not Jamie's words) Matt Mullenweg from the WordPress team has posted a message about the security of WordPress, which MarsEdit users who run WordPress should take a look at. It’s particularly timely because there are a number of attacks going around that impact older WordPress blogs that haven’t been updated to to the most recent version. In my customer support for MarsEdit, I have been seeing these security problems pop up quite a bit lately. The so-called “spam injection” attacks often inject spam links at the oblivious expense of how these links might mess up the XMLRPC interface which blog clients such as MarsEdit use to interact with your blog. It’s gotten to the point where error messages from the blog such as “Parse error. Not well formed.” are almost certain to be symptoms of such a spam injection attack. Updating to the latest WordPress almost always fixes the problem immediately. Matt’s advice is pretty basic: update to the latest WordPress, and check your posts for signs of tampering. But it’s nice to have advice “from the top,” so to speak. I will be glad to see this wave of blog-attacks pass us by as more and more users get updated to the latest release of WordPress. I commented on the post, suggesting that what WordPress would really benefit from is some kind of automated updater, so that users can easily update without having to worry about whether they’re doing it right or whether they’ll mess up their blog. The great news is Matt replied saying that they are in fact working on such a feature for 2.6. Looking forward to a built-in automatic updater for WordPress! But in the mean time, be sure to stay current so you avoid the nasty attacks that are going around. ## Facts - Kind: [Page](https://links.thingelstad.xyz/kinds/page/) ## Same host - [Indie Fever](https://links.thingelstad.xyz/links/43d26ce01e62/) (red-sweater.com, January 10, 2008) - [It Should Be Free?](https://links.thingelstad.xyz/links/ece12aba0739/) (red-sweater.com, March 27, 2008) - [Building A Bigger Nerd Ranch](https://links.thingelstad.xyz/links/00192c47ae40/) (red-sweater.com, September 25, 2008) - [Giving MarsEdit A Voice](https://links.thingelstad.xyz/links/8055cc78c53a/) (red-sweater.com, November 18, 2008) - [The Gift Of Software](https://links.thingelstad.xyz/links/199aa739eb60/) (red-sweater.com, December 16, 2008) ## Saved the same week - [Tips for getting the most out of Backpack on the iPhone](https://links.thingelstad.xyz/links/7b5c13aeec67/) (37signals.blogs.com, April 14, 2008) - [Robert Reich on Bitterness and the Press](https://links.thingelstad.xyz/links/f9d8beca6960/) (dailykos.com, April 14, 2008) - [Apple TV 2.0.2 Update is here, no one knows why](https://links.thingelstad.xyz/links/7a539d0fa03b/) (appletvsource.com, April 14, 2008) - [Google Releasing Google Earth 4.3 Today](https://links.thingelstad.xyz/links/eb504df909e3/) (gearthblog.com, April 15, 2008) - [This is why we love Microsoft](https://links.thingelstad.xyz/links/d484e17c1b23/) (fakesteve.blogspot.com, April 16, 2008) ## Elsewhere - Wayback Machine: https://web.archive.org/web/*/http://www.red-sweater.com/blog/488/check-your-wordpress-security