If you’re thinking about starting a website, then you’ve likely wondered which content management system will best fit your needs. Fortunately, the top three open-source platforms–WordPress, Joomla, and Drupal—are all maintained and supported by thousands of great developers, and are continuously being improved upon to leverage new technologies, SEO, and social media concepts, and add-on features. You really can’t go wrong with any of the platforms in terms of pure performance. CMS Comparison Guide Instead of inundating you with technical jargon and minutia, I’ve developed a wonderful graphic to demonstrate the pros and cons of the different CMS platforms. The following […]
Plugin Distribution on WordPress.org in a New Generation of WordPress
A few weeks ago there was a lot of drama around the WordPress Theme Review team’s decision to require all themes in the WordPress.org theme repository to use the customizer for theme options. Personally I think this is great, and I’ve actually been looking forward to it since last year, when the idea was first presented. It’s a great example of how the leadership in the WordPress project have used their influential positions to help improve the platform. WordPress.org fills a lot of roles, one of the biggest is distributing code in the form of plugins, themes, and even WordPress itself. Any change […]
Getting My Feet Soaked with a Mass WordPress Infection
Have you ever wondered what a mass WordPress infection looks like? All at once, a hundred thousand websites get blacklisted due to the swift, automated attacks from evil malware authors. This leaves a great number of business owners, developers, and system admins scrambling for solutions. Meanwhile, the companies that provide professional hack cleanup services are inundated with new requests for emergency assistance, all at once. These massive infections are impossible to plan for, especially if it’s your first day on the job. Come on in, the Water’s Fine It is Monday morning, December 15, 2014; the day I start my dream […]
Proposed Password Changes for WordPress 4.3
On Monday, Mark Jaquith confirmed that WordPress 4.3 will see an overhaul in the way passwords are generated. The changes will encourage WordPress users to strengthen their login credentials, making their websites more secure. A stronger password will also make your website less vulnerable to brute force attacks. The proposed updates focus on the way passwords are chosen, as well as changing some important default settings in the UI. Let’s take a quick look at the four main points coming out of the proposal: WordPress will generate strong passwords by default. You can override this setting and create your own password, […]
Ultimate Guide to WordPress eCommerce: Adding Products
Welcome to the big finale in our series on WordPress eCommerce. If you’ve been with us from the beginning, you have learned about the different types of eCommerce, some of the different shopping cart plugins available, and you’ve walked through all of the settings involved in launching an online store. In this final post we are going to learn all about how to add products to your online store. After all, what good is a store with no products? Types of products When it comes to eCommerce products, there’s thousands of different types of products, but when you look at it from a high level, […]
This Week In WordPress: 05/11/2015
Have a news tip or upcoming WordPress event you’d like to share? Write us at [email protected]. News Highlights: LoopConf Videos: Couldn’t make it to last week’s LoopConf? Great news, all 21 hours of talks are freely available online! The Trojan Emoji: Speaking of LoopConf, Andrew Nacin gave a fun and in-depth talk titled “Anatomy of a Critical Security Bug” in which he discusses a vulnerability fix that was added under the “guise of Emoji support.” DOM-Based XSS Vulnerability: Sucuri recently published info on a DOM-based Cross-Site Scripting (XSS) vulnerability that could affect any theme or plugin that uses an example.html file, including the Jetpack plugin and WordPress’s TwentyFifteen […]
How to Duplicate a WordPress Website
Why would you want to create an exact copy of your WordPress site? Shouldn’t this unique piece of art stand above being treated as a mere commodity? Well, while this is definitely an apt (and in no way overblown) description of your work, there are actually several good reasons to make a duplicate of your site: Moving from development on your computer to production server or the other way around Migrating to a different provider Creating a backup Setting up an online testing environment or staging server Using a copy of an existing site for a similar project Sound convincing? […]
5 Awesome WordPress Plugins You May Not Have Heard of
There are thousands of awesome plugins out there. Many of them, like WordPress SEO by Yoast or W3 Total Cache, are well known and widely used. There are, however, some out there that are just as amazing, yet not as well known; and, with more than 37,000 plugins in the WordPress Plugin Repository, and even more available as premium plugins, it’s easy to overlook them. Today, I want to shine a spotlight on five awesome plugins that you may not have heard of, but will want to start using once you learn about them. 1. Webmaster User Role If you’ve done work for clients before, you’ve […]
40+ Awesome WordPress Development Tools
Long gone are the days when WordPress was merely a blogging platform. By now it’s a full-fledged content management system used by millions of websites and powers a healthy chunk of the Internet. Consequently, the number of people whose employment somehow revolves around WordPress is also steadily increasing. From hosting providers, to technical support, to *cough* WordPress bloggers—more and more people around the world make a full-time income from the platform. And it pays off. Just look at this developer from Pakistan who is building a three-story house for his entire family after selling just one WordPress theme. In fact, web designers and […]
DOM-Based XSS Vulnerability Impacts Millions of WordPress Users
A WordPress security vulnerability has been discovered which could affect millions of WordPress users. The problem, spotted by security firm Sucuri, has been identified as a DOM-based Cross-Site Scripting (XSS) vulnerability. If you want to learn more about the technical side of the vulnerability, this is a great resource by Acunetix. The vulnerability relates to the genericon package; specifically the example.html file. Any theme or plugin that uses this example.html file is potentially vulnerable—if any of your themes or plugins utilize vector icons, you could be at risk. Worryingly, this is known to include the TwentyFifteen theme which ships with […]

4 Comments