WordPress developers have posted在WordPress开发商已经张贴 yet another “security” update又一次“安全”的更新 . Again, as always, you have to delete everything (except wp-content/ and config.php) and re-install from scratch.再次,与往常一样,您必须删除所有(除可湿性粉剂内容/和config.php )和重新安装从头开始。 If you are, like me, tired of these frequent updates (after having finally updated to 1.5.1.2) then this patch is for you.如果你是和我一样,厌倦了这些频繁的更新(后终于更新到1.5.1.2 ) ,那么此修补程序是为你。 With this little patch (24K zipped) (assuming you are already on 1.5.1.2) you will be updating just the 5 affected files.与这个小补丁(足金压缩) (假设你已经在1.5.1.2 )您将更新,只是5受影响的文件。

This time too they are mysteriously silent about the security defect as before.这一次他们是太神秘闭口不谈的安全缺陷,作为前。 I am tired of re-installing from scratch for every mysterious security defects.我厌倦了重新安装从无到有,每神秘的安全缺陷。

It appears that they are still working on fixing remnants of the old issue where parameters to query string (like ?p= ) were not checked.看来,他们仍在努力解决遗留下来的老问题如参数查询字符串(如? P值) ,未被选中。 Well, now you know it!那么,现在您知道它!

I suggest that WP developers should do a full code review to find any other bugs associated with non-checking of query strings and issue a single update, if necessary, instead of all these incremental updates.我建议可湿性粉剂发展商应该做全面的代码检讨,找出任何其他相关的错误与非检查查询字串和问题,一个单一的更新,如有必要,不是所有这些增量更新。

I have taken the我已采取了 5 files which were actually updated for WordPress 1.5.1.3 5个文件,这其实是更新的WordPress 1.5.1.3 and created a创造了 zip file zip档案 from it.从它。 I verified using CSDiff that they are actually the files which were changed. i验证使用csdiff ,他们其实都是档案而被改变。 Also they changed readme.html (change: “1.5″ changed to “1.5.1″) which I haven’t included for brevity.此外,他们改变了的Readme.html (改变: “ 1.5 ”改为“ 1.5.1 ” )我不包括简明扼要。

Use this only if you have already updated your WordPress blog to 1.5.1.2 .使用这只是如果您已经更新了您的WordPress所博客,以1.5.1.2 You have been warned!您已被警告!

Usage 使用
Download it下载 and unzip to your WordPress root folder (where config.jsp resides).及解压缩到您的WordPress根文件夹(如config.jsp居住) 。 It will overwrite 5 files.这将覆盖5个文件。 If you are on Linux use unzip, on windows use WinZip etc.如果您是在Linux上使用解压,在Windows使用的WinZip等。

My Linux session went like this:我的Linux会议到这样的:

 unzip wp-content/upload/WP1.5.1.3PatchFrom1.5.1.2.zip Archive:  wp-content/upload/WP1.5.1.3PatchFrom1.5.1.2.zip replace xmlrpc.php? 解压wp-content/upload/wp1.5.1.3patchfrom1.5.1.2.zip存档: wp-content/upload/wp1.5.1.3patchfrom1.5.1.2.zip取代xmlrpc.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: xmlrpc.php replace wp-includes/version.php? [ Y ]条部, [ ]澳, [一] 11 , [ ] , [ r ] ename为: Y膨胀: xmlrpc.php取代wp-includes/version.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: wp-includes/version.php replace wp-includes/functions-post.php? [ Y ]条部, [ ]澳, [一] 11 , [ ] , [ r ] ename为: Y膨胀: wp-includes/version.php取代wp-includes/functions-post.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: wp-includes/functions-post.php replace wp-admin/post.php? [ Y ]条部, [ ]澳, [一] 11 , [ ] , [ r ] ename为: Y膨胀: wp-includes/functions-post.php取代wp-admin/post.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: wp-admin/post.php replace wp-login.php? [ Y ]条部, [ ]澳, [一] 11 , [ ] , [ r ] ename为: Y膨胀: wp-admin/post.php取代可湿性粉剂- login.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: wp-login.php [ Y ]条部, [ ]澳, [一] 11 , [ ] , [ r ] ename为: Y膨胀:可湿性粉剂- login.php 

Note: I could have used the -o flag to overwrite the files silently without prompting.注:我可以用邻国旗覆盖的文件默默耕耘,不需提示。 I decided not to as it gives you a visual confirmation that the proper files at proper locations are being overwritten.我决定不要,因为它可让您的视觉确认,适当的档案,在适当的地点,正在改写。

I have tested it successfully on two blogs including this one.我已经测试成功的两个博客,这其中包括1 。

Obligatory Warning: Please make backup of WordPress directory and everything else under Sun, if you so desire.强制性的警告:请备份WordPress的目录和一切的太阳下,如果你的愿望。

Obligatory Disclaimer: Use at your own risk.强制免责声明:使用您自己承担风险。 No warranty expressed or implied is provided.不保证明示或暗示的是所提供的。

Update: Includes 更新:包括 Ryan Duff’s latest patch瑞安达夫的最新修补程序 to fix修复 xmlrpc issues xmlrpc的问题 .

Update: If you are looking to更新:如果您正在寻找到 upgrade from 1.5.1 to 1.5.1.3从1.5.1升级到1.5.1.3 then use然后使用 Shaky’s patch摇摇欲坠的修补程序 .