Popular on posts these days is a ‘time to read’ appearing at the top to give readers an idea how long it will take to read through a potential opus. Plugins exist to do this but, when it’s so easy to do, why do it?
(more…)Category: WordPress
Plugin developer, Core contributor and support volunteer. Yeah, I’m a WordPress fan!
-

Useful WordPress code snippets
If you wish to add any additional code to a WordPress site, where you place it is important. If it’s theme specific code you should add it to `functions.php`, in the theme folder. For CSS you should add this to the theme customizer. If the latter is not available to you, your theme may have a `custom.css` file for this. If it’s not a theme specific change then I create my own, single-file plugin.
A lot of my code snippets over the years have gone on to become full-blown plugins in their own right but there is still some code that remains in my site plugin. So I thought I’d share them.
(more…) -

WordPress and Update Signing
So, you’ve created open source software to make it easier to provide update signing. It requires auditing but you ask WordPress to implement it with their system but, for now, they decline, simply because it’s not something immediately planned. However, Matt Mullenwegg agreed to donate towards getting the audit done.
What would you do the next day?
I’m guessing it wouldn’t involve posting a massive rant about WordPress, but specifically aimed at Matt, about how much WordPress doesn’t care about security, even to the point of trying to make popular a hashtag of #StopMullware? Well, that’s just what Scott Arciszewski did, via Medium.
(more…) -

I’ve moved. Again.
-

Resetting WordPress Two-Factor Settings
The Two Factor plugin for self-hosted WordPress sites is an excellent way of improving the security of your site. There were plans to move this into Core last year but this hasn’t happened – to be honest, I suspect it may be due to how unfinished it currently is, in particular it’s not very user-friendly.
One such “unfriendly” feature is that once you set up a third party authenticator app (which you do via a QR code) there’s no option to do it again – switch phones or apps and there’s no way to set this back up again.
(more…)

