Category: WordPress

Plugin developer, Core contributor and support volunteer. Yeah, I’m a WordPress fan!

  • My WordCamp Europe 2017 Diary

    My WordCamp Europe 2017 Diary

    Thursday 15th June kicks off 2017’s WordCamp Europe, this year in Paris. And I’ll be there! As with WC London, I’ll be volunteering during the main event and contributing on Thursday itself.

    During the event I’ll be updating this post with a diary of how it goes – WCEU is the biggest WordCamp in the world and, I’ll admit, a little daunting.

    I fly to Paris very early on Wednesday 14th, where I’m staying at a hotel arranged by Automattic for its employees attending the camp. I’m both excited but nervous (similar to how I was for London).

    (more…)
  • New WordPress Profile Badge

    New WordPress Profile Badge

    I have a new badge on my wp.org profile which I’m proud of…

    This for being a ‘translation contributor’. Most of it, I’ll admit, is for translating US English to UK English (not surprisingly, it’s pretty easy to do) but also my wife and I did some German and French translating recently too. This is not the end and I’ll continue to contribute to this where I can – it’s incredibly easy to do.

  • Simple security tips for WordPress

    Simple security tips for WordPress

    At a recent visit to a local WordPress meetup, the question of how we should secure our WordPress websites came up. Not from a business angle, but for regular at-home bloggers.

    So, here’s my 2¢ worth.

    (more…)
  • Code is Poetry

    Code is Poetry

    On the meaning of WordPress’ tagline “Code is Poetry”…

    I think of coding not just as a means to an end but a craft in and of itself that can exhibit beauty, not just utility.

    Matt Mullenweg
  • Is the disclosure of user names and email addresses a weakness?

    Is the disclosure of user names and email addresses a weakness?

    On the same day that a security searcher released details of a vulnerability in the way WordPress deals with password resets, I too reported a security issue. Well, more of a concern.

    For a while I’ve noticed that more and more sites are not telling you, when you do a password reset, if the email you’ve entered is valid or not. They’ll, instead, give you a message along the lines of “if that email is valid, we will send you details on how to reset your password”. That way you can’t use the password reset feature to fish for people’s emails.

    But WordPress doesn’t do that. Enter a user name or password and it will tell you if it was valid or not.

    (more…)