```markm [21:56]
@ipstenu You posted something about Display Widgets being free of malware now that you guys have taken it over. I’m getting questions about that. Can you give me a link to share where you gave that update?
ipstenu [21:57]
[https://wordpress.org/support/topic/display-widgets-2-7-is-safe/](https://wordpress.org/support/topic/display-widgets-2-7-is-safe/)
[21:57]
We didnt' 'take it over' though. We just rolled it back and disabled it so people can only update.
clorith [21:57]
But plugin_dir_path can't be used outside of a plugins primary file, I am looking at using it on the debug screen
xkon
[21:58]
ow true, didn't know that parameter :stuck_out_tongue_winking_eye:
otto42
[21:59]
@markm Yesterday, I rolled the plugin back to 2.05 and then bumped it to 2.7 so that people could update to the last known clean version of that code.
[21:59]
You can see the change here: https://plugins.trac.wordpress.org/log/display-widgets/
markm [21:59]
Thanks!
[21:59]
Good move I think.
ipstenu [22:03]
FWIW, the page is still disabled so no one new can install it. We're not recommending anyone use this, but we do want them to be able to update and get secure. Please don't tell people how to download the zip (which yes, we know they can if they try) because this plugin needs to die in a fire. (I recommend using Widget Visibility in Jetpack - https://jetpack.com/support/widget-visibility/ )
otto42
[22:05]
I believe that approximately half of the people who installed the bad versions have now updated to 2.7, thus wiping that bad code out. Not bad for 24 hours. I figure it'll be cleaned up totally in about a week, given the data
ipstenu [22:06]
There have been two reports of an upgrade loop from the 2.7 install, but I can't suss out why.
new messages
mjassen [22:14]
_pops in and reads some scrollback_
shyzer [22:37]
I had the upgrade loop as well and that's what finally caused me to notice something was weird. Can't believe I used such a bad plugin for so long!```
