Protect your phpMyAdmin folder, or …

… you are asking for trouble. I learned this valuable lesson past weekend. You need to protect your phpMyAdmin folder from outside world or you are asking for trouble.

I went to a conference about security called Hackintosh, where we had a competitive event called ‘Capture the Flag’. The event was structured like a game and consisted of 10 different levels. At each level, you have to solve a problem by hacking into a sample application using some vulnerability. Each level had problems in increasing order of complexity and most of them were very interesting.

After about 4 levels, I found out that the phpMyAdmin folder of the server, in which the event site was hosted, was public. I logged into the database (it didn’t asked me for the password) and updated the level column corresponding to my username row to 10. That’s it, I conquered the flag. In the end, I ended up hacking the Hackintosh 😉

Jokes apart, the valuable lesson I learned from this event is that you should never leave the phpMyAdmin folder (if installed) open. You can do the following instead.

  • Totally get away with phpMyAdmin and connect to the database using port forwarding in PuTTY.
  • If you cannot get away with phpMyAdmin, then at least password protect the folder and database access.
  • If you cannot password protect the folder at least rename it. (Not recommended at all)

So do you still have your phpMyAdmin folder open? 🙂

Posted in Events/Conferences, Security | Tagged , , | 8 Comments

Easy Retweet now supports creating shorturls using your own bit.ly API key

I have added some new features and fixed a couple of bugs to my Easy Retweet Plugin after the recent update.

Specifying your own bit.ly API Key

Now you can specify your own bit.ly API key to create shorturls and associate them to your own bit.ly account, instead of using the build-in default account.

The main use of this feature is that, now you can track the clicks and stats for these shorturls from your bit.ly account dashboard. But be warned that, once option is enabled, the Plugin will create shorturl for all posts in your blog. Your bit.ly account might become a mess, if you have large number of posts in your blog.

Screenshot

The following is the screenshot of the admin UI with the new features

easy-retweet-new-settings

Download

You can download the latest version of the Plugin from the Plugin’s homepage.

Feedback

Please keep the feedback coming and if you want me to add any new features or find a bug, please leave a comment.

Vote for the Plugin

If you have used this Plugin and like it, please vote it and help me win the WordPress Plugin competition.

Posted in Plugin Releases | Tagged , , | 6 Comments

Time to update. WordPress 2.8.3 have been released

The title says it all. WordPress 2.8.3 have been released and it’s time to click your update button one more time.

WordPress 2.8.3 fixes the privilege escalation issues, which was not fixed properly in WordPress 2.8.1, which affects blogs that have multiple authors, with some of them having limited access to screens in the admin UI.

Since it is a security release, it is highly recommended that you update. Happy updating 😉

Posted in WordPress | Tagged | 2 Comments

Help me win the WordPress Plugin competition

As you would have probably known by now, I am participating in the WordPress Plugin competition and have submitted 5 Plugins for it. (Not sure if it is the highest by an individual and also if they have a prize for it 😉 )

The following are the list of Plugins that I have released for the competition, with their description and voting url.

Easy Retweet

Easy ReTweet is a WordPress Plugin, which let’s you add retweet or Tweet this buttons for your WordPress posts, together with the retweet count.

Geo Mark

Geo Mark is a WordPress Plugin which will automatically locate Geo information in your WordPress posts using Yahoo Placemaker and YQL API’s.

Posts By Tag

Posts by Tag WordPress Plugin, provides sidebar widgets which can be used to display posts from a specific set of tags in the sidebar.

WP IRC

Well WP-IRC Plugin can fetch the number of users online in any IRC channel and can be scheduled to auto refresh it every x.minutes.

Tweetbacks Helper

Tweetbacks Helper is a helper Plugin for Tweetbacks Plugin to help it detect more tweets.

So if you have used any of these Plugins and like it, then please do vote for them at the Plugin Competition blog and help me win the competition. 🙂

I am planning to continue develop them and so if you have any feedback/comments or feature requests then do leave a comment in the particular Plugin’s page.

Posted in WordPress | Tagged , , | 8 Comments

Helper Plugin for Tweetbacks

Tweetbacks is a great Plugin created by Yoast, which can be used to retrieve tweets about your blog posts from Twitter and import them as comments in your WordPress blog.

This Plugin automatically populates the short urls of your blog posts permalink from a couple of url shortening services like tinyurl, isgd, snipr etc. But since I am planning to use my own url shortening service I wanted an interface, where I can add my own short urls.

More over, Tweetbacks uses the built-in Pseudo cron of WordPress to schedule tweet retrievals. I wanted to get away with this since it might increase the page load time. Instead I wanted to use the built-in crontab in my server, hosted at Linode.

Tweetbacks Helper Plugin

So the result is my new Tweetbacks Helper WordPress Plugin. 🙂

Tweetbacks Helper Plugin can be used to disable/enable Tweetbacks scheduler or the cron scheduler. It also provides a url which can be pinged from my crontab.

 

In the write post page, this Plugin adds a small box on the right hand side with the list of short urls which Tweetbacks has found. There is a also a provision by which other short urls can be added.

 

Download

You can download the Plugin from the Plugins homepage.

Translation

The pot file is available with the Plugin. If you are willing to do translation for the Plugin, use the pot file to create the .po files for your language and let me know. I will add it to the Plugin after giving credit to you.

Feedback

Please keep the feedback coming and if you want me to add any new features or find a bug, please leave a comment.

Vote for the Plugin

If you have used this Plugin and like it, please vote it at the Plugin Competition Blog to help me win the WordPress Plugin competition.

Posted in Plugin Releases | Tagged , , | 2 Comments

Display number of people online in an IRC channel in WordPress sidebar

Time for one more WordPress Plugin from me. 😉

I wrote this Plugin some time ago to be used in proto.in but was never got time to release it to the outside world. The code was sitting in my disk for sometime, and the WordPress Plugin competition motivated me to dust of the code, update and release it.

Well WP-IRC Plugin (for lack of a better name 😉 ) can fetch the number of users online in any IRC channel and can be scheduled to auto refresh it every x minutes.

The count thus fetched can be displayed in the sidebar of your blog using a sidebar widget provided by the Plugin.

You can also allow users to subscribe to email alerts like, “alert me after x number of people has come online”.

Screenshot

Download

You can download the Plugin as a zip file from the Plugin’s Homepage.

Feedback

Please keep the feedback coming and if you want me to add any new features or find a bug, please leave a comment.

Vote for the Plugin

If you have used this Plugin and like it, please vote it at the Plugin Competition Blog to help me win the WordPress Plugin competition.

Posted in Plugin Releases | Tagged , , | 7 Comments

One more way of adding retweet buttons to posts in WordPress

I have added some more new features to the Easy Retweet Plugin after the recent update.

Support for shortcode

Easy Retweet Plugin now supports shortcodes. Now you can place the retweet button anywhere (and even within) in the post. All you have to do is just to include the following shortcode, where you want the button to be displayed.

[ easy-retweet ]

The above shortcode will be replaced with the retweet button when the post is rendered. Cool hah? 🙂

Adding prefix to the Twitter message

The other new feature is that, now you can specify any text as prefix for the Twitter message. You can add your own twitter username or any other message that you wanted to be prefixed.

The following is the screenshot of the admin UI with this feature.

easy-retweet-new-settings-ui

Apart from this I have also made some performance improvements to the Plugin, which will work behind the scenes.

Download

You can download the latest version of the Plugin from the Plugin’s homepage.

Feedback

Please keep the feedback coming and if you want me to add any new features or find a bug, please leave a comment. By the way Easy Retweet Plugin was featured in this week’s episode of WordCast. Thank you guys.

Vote for the Plugin

If you have used this Plugin and like it, please vote it at the Plugin Competition Blog to help me win the WordPress Plugin competition.

Posted in Plugin Releases | Tagged , , | 2 Comments

Google Wave – First Impressions

After getting excited watching the Google Wave demo video, I signed up for Google Wave developer account. I finally got an invite today morning and I here are my first impressions about Google Wave. google-wave-logo

It is still in Alpha

Or to put it in Google’s words, it is a developer preview account. There is lot of rough edges and occasionally you get warning about wave exploding. 😉

google-wave-exploding

Real-time Inbox

Your wave inbox updates in real-time, much like your gmail inbox, but it somehow distracts you when you are quickly going through the list of waves. May be the list view (which is not available yet) will be less distracting.

Hosting your own wave server through Google Apps

The sandbox account is hosted on Google Apps. So this implies that you can have your own wave server installed in your domain using Google Apps like hosting gmail in your own domain.

Better in Chrome

In my limited testing, I found out that Google wave is really fast and stable in Chrome. Firefox 3.5.1 crashes when I leave Google Wave open for some time due to the large number of AJAX calls made by Google Wave. But in chrome it gives a nice error message.

google-wave-chrome-error

I guess Google Wave might increase Chrome’s market share 😉

Real-time chat updates

The one feature which excited me more when watching the Google I/O videos was the real time chat updates and now I am much more excited after experiencing it first hand.

It will surely reduce the time you take to reply by more than half. The updates are very fast and it updates for every character typed. I tried it with a FriendFeed friend, and I was able to type the reply before he could finish it.

But I am not sure whether everyone will be excited about it. It clearly exposes the speed and accuracy of your typing skills. Like how body languages and mannerisms expose more than your words in a face to face conversations, the way you type (and correct) your IM message might expose more than the words. So you may have to be careful when you are saying the truth 😉

Folders not labels

I was actually very surprised, when I found that Google wave has Folders and not labels like Gmail. But a little digging showed me that each wave can have a set of tags associated with it. I guess these tags will be visible to everyone who has access to that wave. google-wave-folders google-wave-tags

Right now Google wave doesn’t have automatic filters to assign waves to folders like gmail, but I guess they might be added in future.

Extensions, robots and Gadgets

There are lot of Extensions, robots and Gadgets available already. Most of them are created by non-Google developers. You can find some of them at the wave sample gallery. Most of them have their source code, which will help more developers to create their extensions.

Adding a bot to a page is as simple as inviting someone else to the wave. You can see the Tweety the Twitbot in action below.

google-wave-twitter

Playback

Playing back a wave is really awesome. I am able to play back each and every change (even typing corrections) made to the wave by everyone. You feel like watching your actions back.

Will it replace email – may be

After playing with Google wave for sometime, the question which came to my mind is, “Will it replace email”. Google Wave is not just better than email, but much more than that. But the question is, will every one need all the new features. And also it doesn’t mach well with email metaphor. Most people still treat email like postal mail, a one to one conversion. But Wave is more about many to many conversation. So it might take sometime for the mass outside the nerd crowd to accept it.

So will Google wave replace email? May be. Only time can answer. 🙂

Posted in Google/Yahoo | Tagged , | 11 Comments

Display posts from a set of tags in the sidebar

Recently I was looking for ways to display posts from a specific set of tags in the sidebar.

I preferred a sidebar widget rather than making changes directly to the theme files, because if I am using a widget I don’t need to remember to make the change again when choosing a different theme.

A quick search didn’t yield any results which made me to write my own Plugin and thus the Posts By Tag WordPress Plugin was born.

Features

Posts By Tag Plugin provides a sidebar widget (using the new Widget API provided in WordPress 2.8) which can be configured to display posts from a set of tags in the sidebar. You can have multiple widgets with different set of tags configured for each one of them.

Each widget allows you to choose

  • The set of tags whose posts should be displayed
  • The number of posts to be displayed.
  • Option to enable post excerpts to be displayed with post titles.
  • Option to display post thumbnail if present.

Caching

The Plugins caches the posts of each widget separately, and issues database queries only when needed. This will reduce the amount of database queries involved for each page load and will therefore be light on your server.

Screenshot

Tag Posts Widget Settings

Download

You can download the Plugin from the Plugin’s home page. After downloading the zip file, extract it and upload the contents to the wp-content directory. Activate the Plugin from the Plugins page and you should see a new widget called “Tag Posts” in the widgets pages.

Feedback

As usual try out the Plugin and do let me know if you have any feedback, queries or comments.

PS: I am using the built-in tags auto-complete script used in the Write Post page. I will write a separate post explaining how to integrate tags auto-complete script in your Plugins.

Posted in Plugin Releases | Tagged , , , | 5 Comments

Couple of more options to configure Easy Retweet Plugin

I am getting lot of positive feedback for my Easy Retweet WordPress Plugin and I am really very happy about it. It is really a great feeling to know that the code you wrote is liked by other people.

New Features

Getting back to the Plugin, I have added two more options to it so that you can have fine grain control over how the button it is displayed in your posts. They are

  • You can now customize the text that is displayed in button. This will be particularly useful if you are running a non English WordPress blog.
  • You can now choose whether you want the button to appear in the home page or not.

Screenshot

The following is the screenshot of the admin UI with the new features.

easy-retweet-new-features

Download

You can download the latest version of the Plugin from the Plugin’s homepage.

Feedback

Please keep the feedback coming and if you want me to add any new features or find a bug, please leave a comment.

PS: BTW today my blog has got the highest number of visits per day in its entire history of existence for the past 5 years and more than 50% of the traffic was to the Easy Retweet Plugin. 🙂

Posted in Plugin Releases | Tagged , , | 4 Comments