WordPress developers have posted在WordPress開發商已經張貼 yet another “security” update又一次“安全”的更新 . Again, as always, you have to delete everything (except wp-content/ and config.php) and re-install from scratch.再次,與往常一樣,您必須刪除所有(除可濕性粉劑內容/和config.php )和重新安裝從頭開始。 If you are, like me, tired of these frequent updates (after having finally updated to 1.5.1.2) then this patch is for you.如果你是和我一樣,厭倦了這些頻繁的更新(後終於更新到1.5.1.2 ) ,那麼此修補程序是為你。 With this little patch (24K zipped) (assuming you are already on 1.5.1.2) you will be updating just the 5 affected files.與這個小補丁(足金壓縮) (假設你已經在1.5.1.2 )您將更新,只是5受影響的文件。

This time too they are mysteriously silent about the security defect as before.這一次他們是太神秘閉口不談的安全缺陷,作為前。 I am tired of re-installing from scratch for every mysterious security defects.我厭倦了重新安裝從無到有,每神秘的安全缺陷。

It appears that they are still working on fixing remnants of the old issue where parameters to query string (like ?p= ) were not checked.看來,他們仍在努力解決遺留下來的老問題如參數查詢字符串(如? P值) ,未被選中。 Well, now you know it!那麼,現在您知道它!

I suggest that WP developers should do a full code review to find any other bugs associated with non-checking of query strings and issue a single update, if necessary, instead of all these incremental updates.我建議可濕性粉劑發展商應該做全面的代碼檢討,找出任何其他相關的錯誤與非檢查查詢字串和問題,一個單一的更新,如有必要,不是所有這些增量更新。

I have taken the我已採取了 5 files which were actually updated for WordPress 1.5.1.3 5個文件,這其實是更新的WordPress 1.5.1.3 and created a創造了 zip file zip檔案 from it.從它。 I verified using CSDiff that they are actually the files which were changed. i驗證使用csdiff ,他們其實都是檔案而被改變。 Also they changed readme.html (change: “1.5″ changed to “1.5.1″) which I haven’t included for brevity.此外,他們改變了的Readme.html (改變: “ 1.5 ”改為“ 1.5.1 ” )我不包括簡明扼要。

Use this only if you have already updated your WordPress blog to 1.5.1.2 .使用這只是如果您已經更新了您的WordPress所博客,以1.5.1.2 You have been warned!您已被警告!

Usage 使用
Download it下載 and unzip to your WordPress root folder (where config.jsp resides).及解壓縮到您的WordPress根文件夾(如config.jsp居住) 。 It will overwrite 5 files.這將覆蓋5個文件。 If you are on Linux use unzip, on windows use WinZip etc.如果您是在Linux上使用解壓,在Windows使用的WinZip等。

My Linux session went like this:我的Linux會議到這樣的:

 unzip wp-content/upload/WP1.5.1.3PatchFrom1.5.1.2.zip Archive:  wp-content/upload/WP1.5.1.3PatchFrom1.5.1.2.zip replace xmlrpc.php? 解壓wp-content/upload/wp1.5.1.3patchfrom1.5.1.2.zip存檔: wp-content/upload/wp1.5.1.3patchfrom1.5.1.2.zip取代xmlrpc.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: xmlrpc.php replace wp-includes/version.php? [ Y ]條部, [ ]澳, [一] 11 , [ ] , [ r ] ename為: Y膨脹: xmlrpc.php取代wp-includes/version.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: wp-includes/version.php replace wp-includes/functions-post.php? [ Y ]條部, [ ]澳, [一] 11 , [ ] , [ r ] ename為: Y膨脹: wp-includes/version.php取代wp-includes/functions-post.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: wp-includes/functions-post.php replace wp-admin/post.php? [ Y ]條部, [ ]澳, [一] 11 , [ ] , [ r ] ename為: Y膨脹: wp-includes/functions-post.php取代wp-admin/post.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: wp-admin/post.php replace wp-login.php? [ Y ]條部, [ ]澳, [一] 11 , [ ] , [ r ] ename為: Y膨脹: wp-admin/post.php取代可濕性粉劑- login.php ? [y]es, [n]o, [A]ll, [N]one, [r]ename: y   inflating: wp-login.php [ Y ]條部, [ ]澳, [一] 11 , [ ] , [ r ] ename為: Y膨脹:可濕性粉劑- login.php 

Note: I could have used the -o flag to overwrite the files silently without prompting.注:我可以用鄰國旗覆蓋的文件默默耕耘,不需提示。 I decided not to as it gives you a visual confirmation that the proper files at proper locations are being overwritten.我決定不要,因為它可讓您的視覺確認,適當的檔案,在適當的地點,正在改寫。

I have tested it successfully on two blogs including this one.我已經測試成功的兩個博客,這其中包括1 。

Obligatory Warning: Please make backup of WordPress directory and everything else under Sun, if you so desire.強制性的警告:請備份WordPress的目錄和一切的太陽下,如果你的願望。

Obligatory Disclaimer: Use at your own risk.強制免責聲明:使用您自己承擔風險。 No warranty expressed or implied is provided.不保證明示或暗示的是所提供的。

Update: Includes 更新:包括 Ryan Duff’s latest patch瑞安達夫的最新修補程序 to fix修復 xmlrpc issues xmlrpc的問題 .

Update: If you are looking to更新:如果您正在尋找到 upgrade from 1.5.1 to 1.5.1.3從1.5.1升級到1.5.1.3 then use然後使用 Shaky’s patch搖搖欲墜的修補程序 .