WordPress 2.9 was just release for less than a week, but there were lots of bug being found.

The major bug were the PHP cURL extension problem found from WordPress 2.9 and WordPress have released WordPress 2.9.1 Beta 1 version.

To install the 2.9.1 Beta version, you may apply WordPress Beta Tester or manually install it with download the Beta 1 package.

According to WordPress, fourteen tickets have been fixed.

Referral URL: http://wordpress.org/development/2009/12/wordpress-2-9-1-beta-1/

Today, I will share how a bad guy(hacker) try to scan your WordPress version however I am not going to share how to do this.

With WordPress 2.8.x or earlier, WordPress version status were stored in a file named version.php in the wp-includes folder, some plugin such as WP Security Scan will try to hide the WordPress version number from scanning.

In order to get your WordPress version, you may do like the following command to grep the WordPress version.

mickgenie@mickgenie.com [~]# grep wp_version wp-includes/version.php
* @global string $wp_version
$wp_version = ‘2.8.6′;

This will happen if you used WordPress Export and Import tool for WordPress to WordPress migration, you might/might not faced this problem when you migrated your WordPress from 1 server to another server but this is good for your knowledge.

Eg.

I would like to migrate my WordPress blog from wordpress.com to my domain such as mickgenie.com.

Step:
1. I will go to wordpress.com administrator and export the data file to XML format to my local PC.
2. I will go to mickgenie.com administrator to restore it.

BUT,
I got “timed out” where the XML is not fully restore.

Solution suggested by Mick Genie:
Read more…

Nowadays, many user use Google Apps for their own domain such as mickgenie.com but they do not know Google Apps did allow them to apply SPF (Sender Policy Framework) to their email to protect spamming issue.

By using SPF records, it allow domain owners to specify which hosts are permitted to send email on behalf of their domains. Normal SMTP allows any computer to send an email claiming to be from anyone. Thus, it’s easy for spammers to send emails with forged From: addresses. SPF allows a domain owner to use a special format of DNS TXT records to specify which machines or hosts are authorized to transmit email for their domain; this makes it difficult to forge From: addresses.

To set your domain’s SPF record, you should have access to your domain’s DNS settings. On your DNS resource, publish the following TXT record: v=spf1 include:aspmx.googlemail.com ~all