DISQUS

Jaseone:

Regarding Spam Karma 2 (SK2): it's long been WP2 compatible now. As long as you use SK2.1 or up (SK2.2 is in final beta stage and should be out any day now), you'll be fine.

BTW, had you asked Matt what this was about (and I'll grant you, he probably should have volunteered the info somewhere, but it's also understandable why he didn't), you would have learnt that the ludicrous price is set on purpose because the point isn't to sell ads, but to benefit from AdBrite stats measurement for free.

And seriously, using arguments such as whether this is context-sensitive ads or how much over market value they are sold doesn't strike me as any relevant to the discussion of knowing who is a "sell-out" and who should consider his own actions before calling others on it.

Just sayin'...

Eliott: you misinterpreted my comment. I am not denigrating anyone's right to have ads on their blog or website. I would simply call it slightly hypocritical when, on the other hand, you bash an open-source project maintained by volunteers for doing the same. If it came down to it (and I never said it did), what would you believe between a project benefitting the community and your own personal space for expression is more "entitled" to try and finance themselves with ads?

Then again, I never said you couldn't do whatever you wanted, nor that I really wholeheartedly approve of all of WP's policies (with ads or otherwise). Just thought I'd point out the double-standard here.

And indeed, I realize the news block down below is not "ads" properly speaking, but as it is, on this very page, it features mostly commercial content that could easily pass as ads.

Yes, Wordpress is prostituting itself again, just with a little more class this time around.

... says the guy with no less than three separate blocks of ads on his blog?

Oh wait, sorry, I had missed the one at the bottom too...

Pot, let me acquaint you with Kettle, I believe you have much to talk about...

This potential exploit was mentioned, discussed, waved around and overall beaten to death when the idea of allowing unicode characters in domain names first came up, I'd say, about a full year ago. I do remember, among other thing, the usual 500+ thread on Slashdot at the time...

Whoever at Apple and Mozilla (and most of all the people who came with the RFC) didn't see that one coming is not only ridiculously stupid (unicode collisions and their dangers usually stand somewhere in the second paragraph in any text talking about encodings) but also very, very deaf.

Yea, but the real question is:
Where do I store that self-referential catalogue to my whole library?

Why, yes of course.
only had to ask:
it's 42.

[Sorry for this spam-ish comment: I looked for an email I could send you this directly, but didn't find one... Feel free to remove this comment afterward]

I just released version 1.0 of what should soon enough become the somewhat official WP Plugin repository (currently figuring out the domain name and how it will be presented from the main wordpress site).

The page is already flooded by users, but unfortunately still rather low on registered plugins (well, considering there are thousands of WP plugins floating around on the net).

So I have been making a round-up of everybody's favorite plugins and I am currently working on getting these in, so as to get the DB off to a good start. Yours being one of them :-)

You can have a look at the current DB here:
http://www.unknowngenius.com/wp-plugins

Ideally, it would be awesome if you could register it yourself, as it would both make life easier for me and give you greater control on how your plugin is presented (and easy access to admin options, for example if you want to notify users of an upgrade)... It is a really painless and quick process, probably less than 3 minutes (maybe 5, if you want to make it one-click installable):
http://www.unknowngenius.com/wp-plugins/faq.html#dev

However, if you do not feel like taking the time to do that now, I would actually like to go ahead and add it myself, so that users can have access to it in the meantime... Of course you'll be free to regain control of its entry in the DB at any moment (simply would have to create an account and contact me to transfer its ownership). Before doing that, though, I first wanted to know if it was alright with you (and incidentally if you'd do it yourself ;-)...

Sorry for the length and please do not hesitate to contact me directly if you got any question/suggestion/comment...

Cheers

Hi John,
This is a great plugin, but looking at the code, I must warn you there's is a huge security issue with it.
You should not be letting people upload random type of files. And you should definitely not let people upload, for example, PHP files within the web root.
Imagine the potentially devastating consequences if somebody get ahold of whatever mail address a blog author uses: he can easily send an email forging the From address and upload a malignant php file that could wreak all sorts of havoc on the server.

At the very least, it should limit uploadable files to zip, gz and other compressed formats and maybe accept other formats after compressing them automatically. That way there won't be any easy way to run executables on the server (it would still be a good idea to impose a strict control on what can be uploaded and how big it can be, imho).

I hope this will be of some help to you and do not hesitate to email me if you want to discuss this. Do not hesitate to hide this comment if you feel you'd rather not have it shown to visitors.

cheers,