WP Plugin: Top Commentators (v.1.05) has a bug

leave comment 
Posted in » WordPress - by Ades on March 20th, 2009

showtopcomment.pngIf you are using Show Top Commentators plugin for more than a year and haven’t updated it yet, then you are probably using version 1.05 which has a bug - it allows people to replace the link of any top commenter in the list.

All they have to do is to put exactly the same “name” as one of the top commenters, and then put their own “link”, this would change the link of the “top commenter” to the new “spam” link. This would last until the real author comments again or the admin of the blog removes the spam comment. So the plugin somehow was allowing the last commenter with the same name to replace the URL displayed in the list for that particular commenter.

So if you are using the old version, do update it to version 1.06 which solves this problem.

Note: Thanks to Andrei for informing me about this bug, I was too using the old version and had two of my commenters complain about their comments being hijacked. I have updated my plugin.

[Post to Twitter]  [Post to Delicious]  [Post to Digg]  [Post to StumbleUpon] 


Related Posts



12 Responses to “WP Plugin: Top Commentators (v.1.05) has a bug”

  1. By PSP Downloads Online on Mar 20, 2009

    Thank you for pointing this out. I have a blog with a top commentators plugin, and have never really noticed before. When it does start to get popular I guess this cause a problem. I’ll update it ASAP!

  2. By Xbox 360 on Mar 21, 2009

    Probably wasn’t a good idea, as now everyone’s going to do it right?

  3. By earnword on Mar 22, 2009

    really? i never know about that. So, i guess. Its time to upgrade.

  4. By iPhone PAYG on Mar 22, 2009

    I think I shall take advantage of this :-P

  5. By China Travel Service on Mar 23, 2009

    Thanks for pointing it out, I did not pay attention first, after giving a thought I have checked my comments and found someone actually tried to hijack my comments, which I have informed to the blog owner.

  6. By Marisha Adams on Mar 23, 2009

    That’s good that you’re noticed! It annoys me when things like that happen, because these people wouldn’t be contributing to the blogs at all!

  7. By monimovies.com on Mar 24, 2009

    Thanks for the mention! Looking forward to some more great posts to comment on in the future.
    I have updated top commentators plugin

  8. By bantingboy on Mar 24, 2009

    we should learn something and take something from this post. It useful.

  9. By tivitune on Apr 2, 2009

    i guess, i should try to put at my site soon.

  10. By cdl test on Apr 14, 2009

    this is the first time i’ve heard of this bug. i wonder how often it is being abused…

  11. By download movies 2009 on Sep 11, 2009

    Thanks for pointing it out, I did not pay attention first, after giving a thought I have checked my comments and found someone actually tried to hijack my comments, which I have informed to the blog owner.

  12. By CORNWALL COTTAGES on Feb 9, 2010

    Adsense Injection is a plugin for WordPress that allows you to randomly inject AdSense Ads into different places on your Blog each time your page is refreshed in an attempt to reduce Ad blindness.


Post a Comment