Trusted WordPress tutorials, when you need them most.
Beginner’s Guide to WordPress
WPB Cup
25 Million+
Websites using our plugins
16+
Years of WordPress experience
3000+
WordPress tutorials
by experts

WordPress 3.5.2 – Underhålls- och säkerhetsrelease

Det är fredag och arbetsdagen är nästan över här på USA:s östkust, men vi är fortfarande här och uppdaterar alla våra WordPress webbplatser när vi skriver detta. WordPress-teamet har släppt WordPress 3.5.2, en underhålls- och säkerhetsuppdatering. I den här utgåvan har WordPress säkerhetsteam löst sju säkerhetsproblem och add to ytterligare säkerhetshärdning. Vi rekommenderar starkt att du uppgraderar dina WordPress webbplatser direkt.

Säkerhetsfixarna i WordPress 3.5.2 inkluderar:

  • Blockera förfalskningsattacker med request på serversidan, vilket potentiellt kan aktivera en angripare att få tillgång till en webbplats.
  • Förhindra contributors från att otillbörligt publicera posts eller omfördela postens författarskap.
  • En update till det externa SWFUpload-biblioteket för att fixa sårbarheter för cross-site scripting.
  • Förebyggande av en attack mot överbelastning av tjänsten, som påverkar webbplatser som använder password-skyddade posts.
  • En update till ett externt TinyMCE-bibliotek för att fixa en cross-site scripting-sårbarhet.
  • Flera fixar för cross-site scripting.
  • Undvik att avslöja en fullständig filsökväg när en upload misslyckas.

Upgrade to WordPress 3.5.2. Gå till din Dashpanel ” Updates och gör det med 1 click.

Avslöjande: Vårt innehåll stöds av våra läsare. Det innebär att om du klickar på några av våra länkar, kan vi tjäna en provision. Se hur WPBeginner finansieras, varför det är viktigt, och hur du kan stödja oss. Här är vår editoriala process.

Avatar

Editorial Staff at WPBeginner is a team of WordPress experts led by Syed Balkhi with over 16 years of experience in WordPress, Web Hosting, eCommerce, SEO, and Marketing. Started in 2009, WPBeginner is now the largest free WordPress resource site in the industry and is often referred to as the Wikipedia for WordPress.

Den ultimata WordPress-verktygslådan

Få GRATIS tillgång till vår verktygslåda - en samling WordPress-relaterade produkter och resurser som varje professionell användare bör ha!

Reader Interactions

21 kommentarerLämna ett svar

  1. Syed Balkhi says

    Hey WPBeginner readers,
    Did you know you can win exciting prizes by commenting on WPBeginner?
    Every month, our top blog commenters will win HUGE rewards, including premium WordPress plugin licenses and cash prizes.
    You can get more details about the contest from here.
    Start sharing your thoughts below to stand a chance to win!

  2. Adnan Fasih says

    There are so many issues in 3.5.2 update. Admin panel is disappearing; I had to manually fix the wp-admin folder from FTP. This is disappointing first 3.5.2 contains multiple issues and now 3.6 is further delayed. :(

  3. Gautam Thapar says

    There seems to be some changes related to date format as well. First of all I noticed it in google webmaster tools which displayed error related to sitemap date. I use sitemap generated through WordPress SEO by Yoast.

    Then I noticed it in my custom post type backend where the list of posts use to display in this format – ’2013/06/17 Published’ but now after the update it is displaying in the format which I use for the frontend – ’1 hour ago Published’. :(

  4. Len Printz says

    Hi guys! We updated to 3.5.2 and now our media library isn’t functioning properly…when trying to post an image to a page, we don’t see any of our images in the library and, also, our Nivo slider just chugs and we can’t manage that either!

    Any ideas would be MOST appreciated!

    Thanks so much!

  5. Joseph says

    Fine for me! Everything worked just fine. I have two sites with different themes and both had no issues with the update.

  6. Terence says

    I am always grateful for all the work the guys do behind the scenes keeping my site safe. But this really was the worst experience I have had with an update in all the years I have worked with WordPress, and from what I can see in the WordPress forums I am not the only one.

    In the end I had to disconnect my CDN and remove all my security and deactivate every plugin, only then would it install.

    Be very VERY careful with 3.5.2 and as you should do anyway, be sure to take a complete backup (website and SQL), before trying to install this update.

    Terence.

    • Editorial Staff says

      That is rather strange Terence. Our WordPress 3.5.2 update worked just fine. We did have an issue where caching stopped, but that was due to an update of another plugin ”WordPress SEO by Yoast”, but he was very quick to roll out another update with fixes.

      Administratör

      • Terence says

        Which just goes to show how no two sites are alike, except superficially.

        The one problem I didn’t have a problem with ~ at least nothing to do with 3.5.2 ~ was Joost’s.

      • Terence says

        Ooops! I take that back… WP SEO is now showing a red banner and claiming I have to remove `<meta name="description" content="” />` from my theme, and it then offers to fix it for me automagically, but although it offers, it doesn’t work.

  7. Mary says

    Thank you for this awesome rundown.

    I do tend to ”shake in the knees” whenever I update anything. Of course, I do it antway!!!
    I have lost headers and footers. I hope it doesnt happen with a WP update.

    Nonetheless, the WordPress team is truly amazing.

    I really like your site alot. You cover so many important topics and you do it well!

    Thank you! Mary

  8. kurtis says

    being new to wordpress and your site…. is there proper things I should before I update? I read BACKUP, deactivate all plugins and then update. Is the the correct thing to do? can you please steer me in the right direction… I am in the middle of building a huge ecommerce site with woocommerce and I don’t want to loose or affect anything I am currently working on. I have woodojo launchpad enable during this build

    thank you! I love your blog!

    would love to see more info on e commerce like SEO, builds etc just an idea for you ;)

    • Editorial Staff says

      Having a regular backup is necessary. We use a paid service VaultPress by Automattic to handle our real-time backup. We simply click on the one-click update and it works.

      Administratör

  9. iAn says

    I am done updating with my membership sites but there is this strange activity happening – I keep on receiving spam registrations…i am using si captcha for security…i have disabled the registrations for the moment.

Lämna ett svar

Tack för att du väljer att lämna en kommentar. Tänk på att alla kommentarer modereras enligt våra policy för kommentarer, och din e-postadress kommer INTE att publiceras. Vänligen använd INTE nyckelord i namnfältet. Låt oss ha en personlig och meningsfull konversation.