masquerade

Talk to the author of Kramer, there’s a bug in his code that’s passing an array instead of a string as the first argument of call_user_func_array, tell him the second arguement needs to be an array, and point him to https://us3.php.net/call_user_func_array

You are seeing a bug in 1.5.1[.1] most likely, upgrade your install.

Try doing tar -xvzf wordpress-1.5.1.2.tar.gz

Or, you can just remove the [1][1] from that command and try again, something like this:

gunzip -c wordprses-1.5.1.2.tar.gz | tar -xf –

The problem lies in PHP mail, if you don’t mind not having the mail send, you can comment it out and all should work fine.

tucker, you need to run upgrade.php most likely.

If you compiled PHP from hand, you didn’t use the –with-mysql flag. If its binary, you probably need a binary package with mysql support built in

Has your database access information changed? Have you double checked to make sure that you have the right username and password. If your hosting is with cPanel, did you remember to append yourcpanelusername and an underscore to whatever the database name and database username you gave it?

The vunerability had nothing to do with the themes. It had to do with trackback code and left the possibility open for an SQL injection vunerability.

Basically, all you can do is ask your host to fix it, unless you have access to the Apache/PHP installs. The .so would be in directories outside of your home directory and you wouldn’t have the permissions as a non-root user to modify that sort of stuff.

I’d highly recommend you upgrade to 4.1 at the very least, 4.3.10 would be the best choice. That might fix the problem, although I’m not sure how you managed to install it while running 4.0

In short, yes WordPress is still target to these vunerabilities. Should you be worried? Not necessarily, because attacks are very unlikely to be targetted at you. If you’re still worried, then backup.
WordPress doesn’t lack the ability to backup, it simple expects the user to have their own method of backing up, since backups are so easy to generate today, especially with software like phpmyadmin.

maybe try upgrading to another CVS man, cause I don’t think plugins would cause probs in the wp-settings.php

WP itself does have static pages assuming you are using a recent nightly or CVS. How to make them is buried in the admin panel somewhat, but they are there. Go to Manage-Pages and you can make static pages and edit them and all.

ervin, you problably could have just edited the plugin and removed whitespace before and after the PHP tags, a lot of people have that problem

I also have a plugin for wordcounting available at my site:
https://false-hopes.com/wp-plugins-wordcount.php