Three external libraries included in WordPress received security updates:

• Plupload (version 1.5.4), which WordPress uses for uploading media.
• SWFUpload, which WordPress previously used for uploading media, and may still be in use by plugins.
• SWFObject, which WordPress previously used to embed Flash content, and may still be in use by plugins and themes.

WordPress 3.3.2 also addresses:

• Limited privilege escalation where a site administrator could deactivate network-wide plugins when running a WordPress network under particular circumstances
• Cross-site scripting vulnerability when making URLs clickable
• Cross-site scripting vulnerabilities in redirects after posting comments in older browsers, and when filtering URLs.

These issues were fixed by the WordPress core security team. Five other bugs were also fixed in version 3.3.2. Consult the change log for more details.

Download WordPress 3.3.2 or update now from the Dashboard ? Updates menu in your site’s admin area.

Source: WordPress.com

We want to know what you think!

We are delighted to be working in association with the Kemmy Business School in the University of Limerick on a project to see what you think of hosting services. We ask that you take a few minutes and complete the survey at http://www.surveymonkey.com/s/6HYRGT2

]]> http://www.myhost.ie/blog/surveying-the-market/feed/ 0 http://www.myhost.ie/blog/have-a-great-st-paddys-weekend/ http://www.myhost.ie/blog/have-a-great-st-paddys-weekend/#comments Fri, 16 Mar 2012 14:02:59 +0000 Martin http://www.myhost.ie/blog/?p=307 It’s that time of year again. (what happened to January and Feb??!!) Time to escape from work, forget all the misery on the news and radio for 24Hrs and get out of the house and support your local parade and events .

Whatever you end up doing tomorrow, be it with family or friends, stay safe and enjoy yourself !

These kind of breaches are dangerous for your domains on-line reputation for a number of reasons:

• Your domain might be blacklisted as a source of spam.
  If your domain is blacklisted as a source of spam attacks you may not be aware for days or weeks. In most cases you will receive a bounce-back from the recipients mail server telling you that your mail could not be delivered. Read this carefully as it should give you steps to correct the problem, or at least point you in the right direction.If the spam outbreak is not stopped, you will just be blacklisted again and it will become more difficult to correct if this happens multiple times. In some cases there is a removal fee involved.
• Your website could be listed by Google as an attack site.
  This is really something you don’t want to happen as it can be an ordeal to correct. Again , you need to fix the problem before you can correct the listing. This involves firstly locating and removing the suspicious files or infected code from your website and then contacting the search engine provider , in this case Google ,and asking them to remove the listing. They have a procedure for this which involves registering a Webmaster Tools account.
• It can damage your business reputation..
  The last thing you want a potential customer to see when they visit your website is a big red warning screen or to receive spam from one of your employees mailboxes.

At the end of the day its your responsibility to ensure that all your passwords are secure and in some cases , changing them every couple of months is not a bad idea either. Some tips below might help.

• Dont’s
  - Avoid using dictionary words e.g piano123
  - Avoid storing your passwords in an unencrypted file on your computer e.g a txt file or email.
• Do’s
  - Use a combination of upper and lower case letters and numbers when creating a password.
  - Think of something easy for you to remember but difficult for someone else to guess e.g a combination of 2 words and numbers . One word could be the first 3 letters of child’s name and last 4 letters of your sibling’s name with a birth-year at beginning and last two digits of a phone number at the end.
  - Use a program like Keepass to store your passwords securely.

This month we are delighted to be offering the following promotions.

—Shared Hosting Offers—

MINIDEAL – 20% Off selected hosting packages.

Packages included: Linux and Windows Personal and Business Hosting Packages
Coupon: MINIDEAL

Terms: Special offers are valid for new and existing customers but cannot be applied to existing orders and services. Only one coupon per order allowed. Promotion is only for the first 12 months and full package price applies thereafer.

Login to the client area at www.myhost.ie and on the client area menu bar, click the drop down arrow beside your name on the right hand side and click on Edit Account Details. At the bottom of that page you will see a drop down Receive SMS notifications. Select YES here and also make sure you mobile phone is entered in the provided text field in the international format e.g 35386XXXXXXX . Click Save Changes to apply .

You will then receive free SMS alerts.

Enable SMS Notifications

The new options are as follows :

Press 1 : To speak to someone in technical support
Press 2 : To speak to someone in sales
Press 3 : To speak to someone in accounts.