Our admin knocked at my door this morning telling me that my blog was hacked and compromised. This was really to my surprise. Why would anyone want to hack it? Weird. Anyway, I had to take it down and upgrade Wordpress and Gallery to the latest versions. But I am not sure what the security holes are and whether they are gone in the new versions. Updating is always painful. Fortunately, wordpress didn’t undergo too many changes. Just want to document the procedure here for future reference:

• Copy over wp-config.php
• Copy over fortune directory
• Copy over .htaccess otherwise URL rewriting wouldn’t work.
• Copy over the theme.
• Copy over the plugins
• Make changes to template-functions-post.php as I did for the last version
• Copy the smilies

For Gallery2, it’s a little bit more. Seems that it has undergone more changes. Did the upgrade, then follow the instructions to make URL rewrite work. The Veloria theme is gone and the new theme structure has changed a lot. So I am living with the default matrix theme now. Will fiddle later.