THE PENDING DRAFT

Git Structure for WordPress Projects

April 9, 2015

A great post about whats the best git structure for WordPress projects. I completely agree with Peter Suhm on this one.

I have ranted about the subject of repository structure before and I have strong opinions about it. In my opinion there is one – and only one – way to structure Git repositories in a WordPress context. That one way is the one-package / one-repository approach. Let me explain why.

Putting the complete WP core into your repo is something i see a lot, but it always feels wrong and bloated to me. One plugin/theme = one repo is the way to go.

Plus i learned about .gitattributes in his post which seems to be a good way to specify which files should get bundled in the final .zip when your project gets downloaded.

Git and WordPress: 3 Tips to Do It Better

ThemeReview.co now also accept plugins

April 7, 2015

Just a few months after their launch, Justin Tadlock and Emil Uzelac of ThemeReview.co announced that they intend to also accept plugins for review in the future. For now it’s limited to a few plugins until they figured out the pricing structure and overall process and the cost will be evaluated individually based on the complexity of each plugin. You find some more about it in this post over at the WPTavern.

ThemeReview.co – We’re now accepting plugins

Speed Optimization Myths

April 6, 2015

Optimizing your website for speed can be a complex issue, especially for non-developers. A lot of guides and articles over-simplify by providing broad advice that isn’t applicable to every website and shouldn’t be taken at face value. Here’s a few commonly-spouted tips that need some clarification.

Some good advice to think about next time you’re optimizing a page for performance.

5 Speed Optimization Myths

On the WordPress REST API

April 3, 2015

The REST API is shaping up to be an awesome reflection of WordPress itself. WordPress is a tool that provides a basic starting point for a CMS in five minutes or less, which can be expanded on pretty much infinitely.

The REST API is no different. It provides a fully functional API out of the box, ready for anyone to use, with all the power needed for site and plugin developers to easily customize.

Some insights on the development of the WP-API. I only scratched the surface a bit up until now but already look forward to all the possibilities this will bring to WordPress. If you haven’t played with the Development Plugin already, you definitely should.

On the WordPress REST API

register_meta()

March 31, 2015

The solution is easy and relies only on core functionality. It’s a simple function called register_meta(). This function is almost identical to the more commonly used register_setting(). When we use register_setting(), we are able to register a callback function. That way, when anyone saves this setting that’s being registered, it passes through that callback for sanitation and validation.

We can do the exact same thing for meta fields with register_meta and not just post meta, but any type of meta data. And, it’s easy to do.

Didn’t know about register_meta() and i think i need to rewrite some stuff now.

Staying safe and DRY with register_meta()

Using Nonces to prevent Request Forgery

March 29, 2015

Put simply, CSRF is when bad guys try to trick users (usually someone with access to the WordPress dashboard) into doing something they didn’t intend to do.

This article on CSS-Tricks is the second in a series of articles about WordPress Frontend Security. In this one Andy Adams explains CSRF (Cross-Site Request Forgery) and what nonces are, how they are used in WordPress and why it’s so important that you use them.

CSS-Tricks on WordPress Frondend Security – CSRF and Nonces

CSS-Tricks – An introduction to WordPress Escaping

March 24, 2015

If you’re a WordPress developer that writes HTML/CSS/JS (which is 100% of theme developers and 99% of plugin developers), you need to know the basics of front end security for WordPress. WordPress gives you all the tools you need to make your theme or plugin secure. You just need to know how and when to use each tool.

CSS-Tricks published a good introduction to Escaping in WordPress and why it is so important. There’s no excuse anymore to not make your front end code secure.

Introduction to WordPress Front End Security: Escaping the Things

A comprehensive Guide to WordPress Core Contributing

March 20, 2015

It’s great to see more and more companies giving back a portion of their time to contribute code back to the WordPress Core. If you’re just starting out and want to dedicate some of your time, it can be confusing at first to find the right things to work on. Delicious Brains (the makers of the awesome WP Migrate DB Pro Plugins) are dedicating one day each month to core contributing and they just wrote this really comprehensive Developers Guide to Contributing to WordPress Core. Read this if you want to contribute and don’t know how to start.

A Developer’s Guide to Contributing to WordPress Core