Skip to content

Better Know a Vulnerability: SQL Injection

We get a lot of submissions to the WordPress.org plugin repository, and so there is often a lot of dangerous code submitted. Usually this isn’t malicious, it’s just by people who honestly don’t know that their code has problems. Understanding those problems is the first step to fixing them. So here’s one common vulnerability we […]

I’m not a fan of orange…

I’m not a fan of the color orange. Dunno why. I prefer soothing and relaxing colors, like blues and greens. But the new Twenty Thirteen theme for the next version of WordPress is very, very orange. Since I like to run the default themes over on my other site, this clearly could not stand. So, […]

Jetpack and the Infinite Scroll

Everybody seems to be talking about Photon. Nobody really seemed to notice the Infinite Scroll feature added to the latest Jetpack. While it is slightly buggy, it’s pretty neat nevertheless. It’s also pretty easy to add support for in your own themes. I added it to this blog, just to see how. So, here’s how […]

More Internationalization Fun

So in my last post about Internationalization, I covered some non-obvious things that you should consider when adding translation capabilities to your code. Today, let’s add to that by covering some non-obvious translation functions. You’re probably not using these, since they don’t get talked about as much. But there’s probably places where you should be […]

Theme Customizer Part Deux: Getting rid of Options pages

Last time I wrote about using the Theme Customizer to supplant/add to your existing options. But what if you’re writing a new theme entirely? Do you even need an options page? How many options does your theme have, anyway? Would it not make more sense to eschew those complex options pages in favor of just […]

How to leverage the Theme Customizer in your own themes

Note: Everything I’m talking about here, including the code, is in beta mode. It will be subject to change. I’ll update this post after release to fix any code changes that may occur between now and then. I’m releasing this post now so that theme authors can start looking at their themes and thinking about […]

Internationalization: You’re probably doing it wrong

Fun fact of the day: about 37% of WordPress downloads are for non-English, localized versions. So as a plugin or theme author, you should be thinking of localization and internationalization (L10N and I18N) as pretty much a fact of life by this point. Fun total guess of the day: based on my experience in browsing […]