Last week we featured Ahmad Awais’ WordPress package for Sublime Text that adds a snippet-based library for creating customizer options. Yesterday WordPress developer Chris Wilcoxson published a similar package for the free and open source Atom Text editor. Atom is developed by GitHub to be a “hackable text editor for the 21st Century,” thanks to…
WordPress 4.5.3 was released today to fix seven important security issues that affect 4.5.2 and prior versions. Automatic background updates are already rolling out and all users are advised to update immediately. The release patches the following security issues: Redirect bypass in the customizer (reported by Yassine Aboukir) Two different XSS problems via attachment names…
Endurance International Group or EIG owns a number of popular webhosting companies, including Bluehost, HostGator, and A Small Orange. It’s also an investor in Automattic, parent company of WordPress.com. While I’ve read and heard a number of complaints from people in the WordPress community about EIG owned companies, I’ve never looked into how EIG started.…
For the past three years, WP-CLI has loaded a modified copy of WordPress’ wp-settings.php. The reason behind this, according to Cristi Burcă, the project’s original maintainer, is that “WordPress does several things that don’t make sense in a CLI context.” Keeping that modified copy up-to-date was a small chore, but it offered WP-CLI far more…
Jetpack 4.0.4 is available for download and users are encouraged to update as soon as possible. This release contains a number of security fixes, including extra security to post by email, a patched XSS vulnerability in the Likes module, and a fix to ensure that submitted Feedback forms are not publicly available via the REST…
Earlier this year James Dalman, founder of Happy Joe, announced that he would be shutting down the non-profit organization in favor of creating a for-profit venture. Although he said he enjoyed helping veterans find employment opportunities in WordPress, Dalman cited lack of funding as the primary reason for discontinuing the non-profit. Happy Joe relaunched its…
Jason Coleman, creator of the popular Paid Memberships Pro plugin, published a post today, warning users that many payment gateways will soon require TLS 1.2. The encryption protocol secures communication between the server and customers’ browsers so that things like credit card numbers and addresses can be transferred safely. Coleman outlined the requirements that a…
Yesterday, Nick Halsey, one of the maintainers of the WordPress Customize component, published a proposal to add content authorship to menus in the customizer. This feature is specifically targeted at new users who might wish to set up a menu that includes pages which have not yet been created. The scenario is familiar to those…
![PHP[World] 2016 Call for Speakers Now Open, WordPress Sessions Welcome](https://wptavern.com/wp-content/uploads/2016/06/phpworld-2016.png)
PHP[World] 2016 will be held November 14-18 in Washington, D.C. This will be the third edition of the conference, which aims to bring together the various sub-communities that are linked by the PHP programming language (including Drupal, WordPress, CakePHP, Magento, Laravel, and others.) The call for speakers opened today and organizers welcome submissions from the…
One of my favorite features in WordPress is the ability to easily embed content from services such as YouTube by copying and pasting the source URL into the post editor. The feature is called oEmbed and was added seven years ago to WordPress 2.9. While content authors enjoy the luxury of easily embedding content, commenters…
In this episode of WordPress Weekly, Marcus Couch and I are joined by Adam Warner, SiteLock’s WordPress evangelist. Warner describes how he got involved with WordPress and how it helped shape his career. We discuss his crowdfunding campaign to democratize publishing which didn’t turn out so well. Near the end of the interview, we learn…
Like many developers just getting started with the WordPress Customizer API, Ahmad Awais began with frameworks like Kirki, Redux, and Titan. After a short time, Awais discovered the problem with using frameworks in his projects. “It quickly became hard to deal with the updates, backward compatibility, and then code quality especially concerning security,” he said.…
Brad Touesnard, Founder of Delicious Brains, explains why clients should own the licenses purchased by developers if the plugin is an integral part of the project. Sometimes developers who purchase licenses fail to keep them updated or keep in touch with clients. “Worst case scenario: The client never updates the plugin and eventually it breaks…
Google Fonts is sporting a fresh new design that makes it much easier to browse. The catalog of free and open source fonts first launched in 2010 with 14 fonts and has grown to host more than 800 today. In addition to being viewed across the web over 15 billion times per day in 135…
After more than a year in development, Gravity Forms 2.0 is available for download. This release contains a number of new features and developer enhancements. Conditional logic is now supported by more fields and can be used on multi-input fields such as Name and Address. The underlying code contains improvements that provide the foundation for upcoming…
Enter your email address to subscribe to this blog and receive notifications of new posts by email.