Karma's Nucleus DevBlog

You might have come across the security bulletin already, but there's quite a serious security issue in the PHP XML-RPC Library that is used by Nucleus and a bunch of other projects. Untill we have a new package available for download with the updated library, here is how to disable XML-RPC support on Nucleus:

1. Delete the /nucleus/xmlrpc/ directory on your server. This will remove the XML-RPC server from Nucleus. As a result, nobody will be able to connect to Nucleus using external tools (wbloggar to name just one) anymore.
2. In the /nucleus/libs/ directory, replace xmlrpc.inc.php and xmlrpcs.inc.php by empty files. These are the actual libraries. Though this step is optional, you should do this just to be sure.

After these steps have been completed, the XML-RPC library is fully removed and your Nucleus installation is safe again.

Update: Nucleus v3.21 has been released!

I stumbled across TagCloud today, which combines a feed list with data from the Yahoo! Term Extraction Webservice to create a tag cloud. To test it out, I created a Nucleus CMS Cloud, using the feeds from the Nucleus Planet. Nothing much to see there, but one word definately stands out from the rest :)