We just wanted to post quickly and let everyone know that recently a supposed SQL injection vulnerability was found in WPtouch (the free version). This report is false.

The vulnerability declared at packetstormsecurity.org and other security alert-type sites is impossible.

There is no ajax.php file in the root of WPtouch, therefore this vulnerability is flat-out impossible.

We take WordPress security seriously at BraveNewCode, and have on numerous occasions issued updates for security exploits in our plugins that we’ve found before they’re in the wild. We know WPtouch is a popular plugin and one that can be targeted because of it’s popularity and wide install base. We work hard to ensure the safety of our plugins on your WordPress installations.

Piggy 1.2.1 has been released, with the following changes:

• Added: New Today view which supports purchases with multiple items and quantities
• Updated: Scrolling script and iOS5 compatibility
• Changed: Algorithms for WPEC display
• Changed: Added calculated times in admin panel based on timezone settings
• Fixed: An issue with refreshing panes when switching tabs
• Fixed: Better memory management and less consumption
• Fixed: Various display issues for Shopp and Cart66

Piggy 1.2.1 is a free update for all Piggy users.

Free Version

We’ll also be launching a free version of Piggy in the WordPress repository soon, so look for that if you haven’t purchased Piggy and would like to know what it’s all about.

Piggy 1.2

Today we’re happy to announce the availability of the 1.2 update for Piggy, our mobile web-app for WordPress e-Commerce stats and sales. In the update are some great new features, but best of all we’ve added support for two new popular e-Commerce platforms in the WordPress community: Cart66, and Shopp— in addition to WP e-Commerce.

So now if you’re running either or those two e-Commerce plugins you can add Piggy™ ($39 CAD) and have access to your sales data on the go with your iPhone™, iPod touch™ or Android™ smartphone.

More Additions, Fixes and Changes

As well as the addition of Cart66 and Shopp, there’s also a slew of other updates for the 1.2 release:

• Added: New skin, ‘iOS Linen’
• Added: Preliminary iOS 5 support
• Added: Randomized initial pincode
• Changed: Better Android support
• Changed: WordPress 3.2+ enhancements
• Changed: Image optimizations for speed and performance
• Changed: add2home script updated
• Changed: Minor style changes, fixes
• Fixed: Issue with blank OinkBoard data for new installations
• Fixed: Issue with API credentials not being cleared properly

How To Get It

If you don’t already own Piggy, head over to the product page and grab your copy.

If you own Piggy, simply visit the Plugins page in your WordPress admin and upgrade your installation using WordPress’ auto-upgrades feature.

First off, thank you to everyone who has been a BraveNewCode affiliate since we launched the program in the fall of last year. Since that time we have paid out nearly $10,000 in affiliate commissions and have progressively increased the payouts each month. We recently made a few major changes to the BraveNewCode affiliate program and we wanted to share them here.

First, we have finalized new text and graphical assets for WPtouch Pro, WordTwit Pro and Piggy. Those assets can be found in the “Affiliate Center” which can be accessed from your support forum profile if you are an existing BraveNewCode customer. Any participant who wants to promote any or all of those products can now do so using the updated assets.

Second, we have limited participants into the affiliate program via an application form. Going forward anyone who wants to be an affiliate will have to apply and be approved manually. We’ve gone through our records and automatically approved everyone who has previously made an affiliate sale, so those individuals will have access to the new Affiliate Center immediately.

If you are an existing affiliate that hasn’t yet made a sale, then please complete the application on our affiliate program page and we’ll restore access right away. Your affiliate commissions will continue to accumulate in the meantime, but you won’t have access to the new resources until we approve you.

If you’re not currently a member of our affiliate program and would like to join, please complete the application on the affiliate program page.

Dale Mugford (our design lead & co-founder) recently did a video interview with Freelance Journalist James Woodcock regarding the release of WordTwit Pro, our premium WordPress to Twitter (and soon Facebook!) publishing tool.

James asks a variety of questions and delves into the details regarding impetus, feature set, and future plans for the new plugin.

Runs about 30 mins.

You can watch the video below, or see a larger version on James’ site, here.