3 ms·
> Mullenweg set up in 2005 to monetize the project he’d created two years previous Wordpress is a fork of an older project which was not made by Matt.
by nailer 2y ago
> Mullenweg set up in 2005 to monetize the project he’d created two years previous
Wordpress is a fork of an older project which was not made by Matt.
- lnxg33k1 2y agoIt's important to point out, since probably the whole automattic is still leeching from b2 and hasn't added anything
- kgeist 2y agoJust checked out the original version of b2 Wordpress was forked from and could immediately spot a SQL injection which I can use to take over the whole site: $log = $HTTP_POST_VARS["log"]; <..> $user_login=$log; <..> SELECT ID, user_login, user_pass FROM $tableusers WHERE user_login = '$user_login' AND MD5(user_pass) = '$password' Later it also stores the hashed password as a cookie. Some quality 2003 code :)
- admissionsguy 2y agoNot necessarily if magic quotes are enabled!!
- hedgehog 2y agoOh "magic quotes", we hardly miss you.
- lnxg33k1 2y ago2003? If I remember correctly, SQL injection has been in OWASP Top 10 until 2016