bug in function wp_count_comments in wp-includes/comment.php (with patch for WordPress 3.1)
You are currently browsing articles tagged bugfix.
There was a very unfortunate bug in all previous versions of the Comment E-Mail Verification Plugin. The verification message was sent to all comment authors, i.e. including those whose comments were caught by Akismet (or any other anti-spam plugin).
Spammers often use fake mail addresses. If an address doesn’t exist, your only problem is some additional server load trying to deliver that message, plus, possibly, bounces in your inbox.
However if, as in most cases, those addresses actually belong to someone who didn’t write that comment in the first place, those people will be bothered. Plus, since the comment itself may appear in the verification message (the default setting), you will be considered a spammer. Even worse, this might get your server blacklisted!
So if you’ve been using the plugin, please download the new version 0.1.2.1
Due to excessive work-load this post was written two days after the release of the bugfix which was available through your WordPress admin area immediately. I have set the date of this post back to approximately the time of the bugfix release.
Mark Jaquith has a wonderful plugin for plugin developers: I Make Plugins. While working on the redesign of this site I ran across a bug in that plugin which caused the entire readme to be downloaded and stored to the postmeta table every time a plugin page was loaded. Here’s a patch (diff) for version 1.1 of the plugin.