Just found out about a potentially annoying WordPress 2.8.3 security issue. Basically, anyone can reset your admin password without any confirmation. This could be a major annoyance if someone decides to reset your admin password constantly.

I just tested this (on one of my own test blogs, of course) and it actually works. After anyone visits the URL, it sends the new password to your e-mail address. If you’re in the middle of doing something in your admin panel, you may have to login again.

Luckily it’s just a one line fix, which you might want to implement if some annoying person thinks it’s funny to reset your password. WordPress 2.8.3 was just released a little more than a week ago. Do I hear a WordPress 2.8.4 coming soon?

If this happens to you, and for some reason you don’t receive an e-mail with the new password and find you can’t login to your blog, you might want to look into resetting your WordPress password through phpMyAdmin.

After the success of our first theme battle, regular Theme Lab commentator and designer Keith decided to volunteer a couple great PSD designs to our next one. The two screenshots are below. Simply vote for the one you’d rather see coded into a fully functional WordPress theme.

Read on to vote. You’ll need to vote on the actual site, so leave your RSS readers for a second.

Read the rest of this entry »

We just presented the winner of theme battle #1, and as promised, here is the loser. Green Shade is a nice looking, two column blog design with threaded comments, designed by Anto. It was designed with WordPress in mind, although it could probably be used for a number of different CMS’s, once coded.

Download

Remember, this is an uncoded PSD and not a functional WordPress theme. Since this is a losing theme battle theme, as noted on the theme battles page, I will not be coding it. I also won’t be offering any support with it, so it’s provided as-is. You can do whatever you want with it though. Download it, practice your coding skills, use it on your sites, whatever.