Well this news is two weeks late, but better late than never. The winners of the WordPress 2.0 Theme competition hosted by arenawp.com have finally been announced:

The Wordpress 2.0 Theme Competition Winners:

Best Overall Designs
1st Place - Durable by Andy Peatling
2nd Place - Kurtina by Gail Dela Cruz
3rd Place - Ambiru theme by Phu Ly

Most Creative Design
Foliage by Derek Punsalon

Best 3 Column Design
Tiga by Shamsul Azhar

Best 2 Column Design
Disconnected by Adam Freetly

Best Use Of Colours
Dapit Hapon by Gail Dela Cruz

Best Liquid Design
DarkPad by Sreejith Krishnan

Best Use of Wordpress Theme Options
TBD by People’s Choice and Sponsor

Best AJAX Integration
TBD by People’s Choice and Sponsor

Congratulations to all of the winners, and thanks to all of the participants for all of their hard work in creating innovative wordpress themes. I’ve obviously got a lot of updating to do to my comprehensive wordpress theme list — hopefully I will be able to get it completed within the next day or so. How exciting! New wordpress themes! I can’t wait to go and check them all out!

ArenaWP has officially closed the doors to new entrants to its theme competition and so the judging process has begun! Terry (the creater of ArenaWP) says that

I know everyone is anxious to see the new designs, and they’ll be available in two weeks for download after the judging panel has reviewed all the entries. A screenshot of each design will be available later this week for a sneak preview of the designs that have been entered. I’ll also complile a list of all the new partcipants and come up with a final number of theme entries within the next couple of days

As of April 17th, there were 34 Theme Participants listed and I’m sure that list has grown as the competition deadline drew nearer. A big thanks to everyone who participated, and best of luck to all of you in winning some of the great prizes being offered up!

Personally, I’m uber excited to see all the new WordPress 2.0 themes that have been created! I hope that some designers really went to town with incorporating WordPress 2.0’s new Theme Options, which allow wordpress bloggers to customize the theme without touching (or knowing) a single piece of code.

I also can’t wait to see how much larger my comprehensive wordpress theme list will grow once all of the themes that were submitted to the contest are made available to the public. We’ve recently crossed the 800 themes mark — think there’s a chance we can make it to 900??

Much thanks to Terry/Kineda for reviving the spirit of the WordPress 2.0 Theme Competition that was intended by the original competition (that was later discovered to be a hoax) by launching a new one at wordpressarena.com with trusted, named judges like Terry aka Kineda, James aka Shadow, Bryan Veloso aka Avalonstar, and Dan Cameron.

The hoax competition had a lot of juicy prizes associated with it (likely because none of them were ever actually going to be awarded to anyone seeing as how it was a hoax). Theme designers worked their butts off creating new WordPress 2.0 themes in an effort to win some of those excellent prizes. While the new WordPress Arena competition is offering an iPod shuffle to the overall winner, the runner up prizes of a year’s worth of hosting (which people aren’t necessarily likely to take advantage of, generous as it may be, as changing webhosts is quite a production) and a book on the Zen of CSS Design aren’t quite as tempting as the electronic and cash goodies these designers were originally promised as prizes.

So I ask the community: if you have the means, please help reward the designers for all of their hard work and sponsor the WordPress Arena 2.0 Theme Competition by donating some enticing prizes to be awarded. This would then allow for more categories for themes to be judged upon and more winners, as was promised in the original competiton that sadly turned out to be a scam.

These theme designers who submitted their hard work to the hoax competition must feel really scammed and taken advantage of. Let’s make them feel appreciated - honor them for their work. Surely there must be some companies or individuals who have the means to donate some more prizes (cash or otherwise) and be proud sponsors of the new WordPress 2.0 Theme Competition.

WordPress Arena has graciously extended the deadline for submission of themes to May 1st to a) allow for the time for more sponsors to get involved and then decide on judging criteria for the new prizes, and b) provide extra time for the many theme designers who got scammed to learn about the new theme competition so they can all get their submissions in and for the rest of us to spread the word about the new competition. Winners will be announced on May 15th, 2006.

From the folks at WordPress:

An important security issue has been brought to the attention of the WordPress team and we have worked diligently to bring you a new stable release that addresses it. Our latest version 2.0.2 contains several bugfixes and security fixes.

I highly recommend that you download the newest release and upgrade your WordPress installation(s) ASAP (and backup your database before upgrading!).

For those of us with many blogs, this is one of those pains in the neck that makes you wish you had a hosted solution that did the upgrading for you. But all in all, the pros of getting all the features and customizability of the full version of WordPress makes it worth the hassle for those who are technically inclined enough to handle WordPress.

(The rest of you should check out WordPress.com — they’ve had a lot of upgrades lately, including new themes, WordPress Widgets, and more - which I’ll write about in a later post, but suffice it to say good things are happening over there )

BTW - It has not been clarified whether this security vulnerability which was found (and fixed) was in any way related to the supposed hacking of the WP 2.0 Theme Competition that was being hosted by kycap.com, but based on the dialog in the WordPress support forums it does appear that the KYCAP theme competition was a hoax, which, if true, is just evil. Fortunately, a new WordPress 2.0 Theme Competition has sprung out of this mess and is being run and judged by some of the more well known and respected (i.e., trustworthy) members of the WP community

Update: It now appears that the kcyap theme competition was a complete hoax and the site owner made off with 188 WordPress 2.0 specific themes! The site itself has disappeared, the owner doesn’t respond to any questions nor does he make any attempt to restore the posts, etc. You can read up on some of the discussion in the Wordpress Support Forums. I have removed the links to the hoax site so-as to not generate any additional traffic or inbound links for the jerk.

I ask that all theme designers who applied to the scam competition now enter the new, legit one — and also would be extremely grateful if you would submit your themes to me, as well. While I’ve nothing to offer in the way of prizes (wish I could, but hopefully some fame and the knowledge that you’re helping the community will be inspiration enough), I am extremely eager to create a Comprehensive List of WordPress 2.0 specific themes (and have plans to create a blog specifically about themes to make it much easier for folks to find the theme of their dreams). Please email all theme info to howtoblog @ gmail.com with a subject of WP 2.0 theme — thanks!

On March 5th, the WordPress 2.0 Theme Design Competition that was being hosted by kcyap.com claimed that it got hacked (and that his entire database was erased):

“Very regret to announced that this competition blog website had been hacked. I have no backup for all this data and not sure if the server admin did have a backup on it or not. I am very sorry for this incident.

The prizes will still be the same and i will upload once again all the submitted themes on by one from now. This may takes quite some time, please be patient.

The result for this competition will still be announce don the 10th March 2006.”

This should be a reminder to everyone to BACKUP YOUR DATABASE ON A REGULAR BASIS (I’ll write a how-to post on this shortly).

And as many commenters pointed out, it was unacceptable for a site hosting a theme competition of this level to not have backups. Other commenters suggested the site owner use the Google cache to try to retrieve the old posts.

However, the big question that’s on my mind - and which was brought up by CountZero is how did this happen??

“But the really more important task than assigning any guilt to anyone on this case, I suppose, is to find out how the hacker could compromise the machine. Did he use some undiscovered WordPress vulnerability, did he make use of those being published just about a week ago, or did he make use of other security issues on your server? Is it sure that these loophole(s) are closed now, and can you make sure there is no backdoor/rootkit left on the machine now?”

I hope the WordPress team is taking a good look at this to ensure that it wasn’t the result of some previously unknown security vulnerability in WordPress. Was the kycap Theme Competition Blog running on WP 2.0 or WP 2.0.1? And if he was running the latest version (WP 2.0.1), did the hackers get in through a WordPress security flaw, or through some other method related to his specific hosting situation? Or perhaps he had spyware on his PC and they had a keylogger which gave them access to his password so they could just easily log into his account. (Which reminds me that everyone should have Microsoft’s free Anti-Spyware software installed on their Window’s PCs)

Additionally, there has also been speculation that the whole Theme Competition was a hoax (to gain google pagerank?). Many commenters have found it rather suspicious that even if the database was wiped that there still wouldn’t be backups of all of the themes that designers had submitted - after all, they sent them in through email. And what of all the ‘unnamed judges’ (which I always thought was a little shady..) - shouldn’t they have copies of the themes and their descriptions, as well?

IMHO, the Theme Competition site owner (Justin) owes it to the WP community to work with both his webhost and the WordPress team to discover just how that site got hacked, and then reveal that information to everyone - both to restore his credibility and so that we can all know whether we need to be worried about the same thing happening to us - and learn from his situation about how to protect ourselves. Specifically, we need to know whether the hack stemmed from a problem with WordPress security. I’ll rest easier once this information is known, especially since I’m still entrenched in hoards of hours in porting How to Blog over to WP from TypePad (it was easy to import the posts, but there’s all this minutiae that’s taking hoards of hours to deal with as part of the transition).