Ahh, it was just the RSS inclusion sidebar. I was thinking it was the RSS sidebar for changing the format of your RSS feed. The severity just went from a 10/10 in my mind to a 2/10.

While looking through my security RSS feeds I found out that there is a XSS in older versions of the RSS plugin. It seems to have been fixed in the latest version if s9y.

More info: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6205

Back to work I go...

It looks like this might be a good time to join the gophp5 project.

With php4 you are extremely limited to what you want do encryption wise. With php5 you can use hash() to encrypt the passwords in nearly anything you want. If we do a sha256 or sha512 using the hash function it would be great ...

I will take a look at the code later to see what I can figure out. I am on vacation from work this week, so I should have the time to take a deep look at the code.

I am first going to do a bit of research to find out what the best possible PHP hashing method will be. SHA1 is good, but I know that ...

Why not just sha1 the md5? It is a little bit of work, but will provide the most backwards compatibility. Simply below is what I am thinking:

$password = "test";
$md5_pass = md5($password);
$stored_password = sha1($md5_pass);

Then you can take anywhere the md5_pass is stored and sha1 it to make ...

I would suggest either limiting the maximum width of the content or using a header background image that will expand. For those of us with a massive resolution (1920x1200 here) the content looks funky when you go full screen. I almost never do this, but I am sure someone will.

http://img136 ...

Yes, you are basically correct. Backing up those locations will allow you to get back to your original site with a little bit of work.

I would also backup the templates directory if you are not using the default template. Same with the plugins folder. Restoring these directories will allow you to ...

In my little experience with isapi_rewrite, I believe you can just rename htaccess to httpd.ini and it should work. A quick google search came up with a site to help with any problems you may have.
http://www.helicontech.com/isapi_rewrit ... bility.htm

I used to use firefox for posting items to my site and I've finally switched over to a real word processor. I found myself losing posts all too often when trying to post something new.

Now I use Word 2007 on the Windows side and Pages on Mac. Both make life a ton easier. The spell check in firefox ...

I finally found a tutorial that explains em vs px in a way that I can understand.
http://www.bigbaer.com/css_tutorials/css_font_size.htm

The part that I get confused with is the changing of font sizes in a browser. With the current layout if I change the font size it will change just the same as if I use em. I've tested this in all of the major browsers -- ff, ie, opera, safari -- and have yet to see proof in using em over px.

In ...

I've went with rounded corners compared to the borders. It flows much better with lighter colors. Spiffy corners work great if you can figure out where to place the code. I kept placing is before the sidebar div, which totally confused me. After a while of tweaking I figured out the correct location ...

The font is called Atari and no one seems to like it. I decided on the font last night when I should have been sleeping. i am going to change it, just havnt got around to it yet.

The wide borders do not look very good on the lighter colors. I liked them with the dark colors, but it did not port ...

Being the fickle person that I am, I've decided to play around with a new theme for my site.

I am looking for any and all input at this point in time. Something I am probably going to change is the font in the logo portion. Other than that I am not quite sure of what should be altered.

This is ...

Don Chambers wrote:Serendipity is IMHO vastly superior to Wordpress.

Ditto on that.

If you are trying to post to one site and replicate it to another that can be done. I dont see a reason why you would want to though.