Otto42
- Karma
- 25
- Created
- September 25, 2009 (16y ago)
- Submissions
- 0
Tech Ninja
[ my public key: https://keybase.io/otto42; my proof: https://keybase.io/otto42/sigs/FnDvOBl_PWDbfOPXujlMbYCf8IdSOvaaVcNmJTOfDI8 ]
[ my public key: https://keybase.io/otto42; my proof: https://keybase.io/otto42/sigs/FnDvOBl_PWDbfOPXujlMbYCf8IdSOvaaVcNmJTOfDI8 ]
Once we were notified of the issue, I manually removed the bad code and shut down further updates. If you have this plugin, update to the latest version immediately.
Plugins do not auto update by default. You have to specifically turn those on, and not via a switch, but via code editing.
Disclaimer: I wrote those guidelines. The "Paypal" loophole is specifically because the first version of the guidelines had people constantly emailing us asking if this Paypal code snippet was okay. All the Paypal code…
> are there systems in place to blacklist a plugin and remotely remove it from an install (and possibly contact the install owners) We have automated scanning systems for suspicious code commits. If they occur, me and a…
"Without review" is not quite true. Some of us get an email for every commit. Not kidding. Helps a lot for the scanning of things.
We do monitor that sort of thing. Very closely. Oh, and I got that email too. They didn't really vet that email list very well, or they would have been smarter about it. :)
This is for backwards compatibility. If you checked it again after you login, you'd find that it is not an MD5 password anymore. WordPress uses salted and hashed passwords with the phpass library, and has since version…
Re: media, one step at a time. :) Re: custom fields: This makes little to no sense to be in core, because custom fields are just that, "custom". There's no point in giving the end user the ability to make their own meta…
Somehow I doubt that we'll decide to drop support for 65.5% of our users (roughly 26 million websites). http://wordpress.org/about/stats/
I wasn't actually responding directly to you, but I will. Doesn't matter if you offer guest commenting by default. I close the browser tab the moment I see the non-standard comment box. I don't have any idea what…
Agreed. If I see a third party commenting system, I typically just close the tab instead of leaving a comment. It's not worth the hassle to me to deal with whatever your commenting system requires. Name/email/url. These…
I'm sort of shocked that you're shocked. The rigid and inflexible architecture of systems like Rails and Django are the primary reasons for WP's success. There's a reason WP has more themes and plugins than these other…
The "serious performance issues" you speak of were fixed in core, about 11 days before your post. See http://core.trac.wordpress.org/changeset/18541
I've gone by the name "Otto" for about half my life. It's a nickname I got in college. Many of my best friends didn't know my real name for years. It just never came up. My mom is the only person who uses my real name,…
At the same time, virtually everybody I know who has tried Places has said the exact opposite. To be fair, I have many friends who use Foursquare for its most obvious and intended purpose, which is to arrange…
Yeah, writing that importer was certainly annoying. Tumblr's formats are nutty and weird. http://wordpress.org/extend/plugins/tumblr-importer/
In the case of Excel macros, Microsoft have provided a public API within which to create those programs. This is not the case for WordPress themes. Themes use the internal structures of WordPress to do their work, not…
The GPL has been upheld as a perfectly valid and enforceable license on many occasions. However, in all those cases, this happened via initial injunctions or the like, not in an actual final case itself. Basically, once…
"If you make a theme that does not use any existing wordpress code, it wouldn't be considered a derivative work." I personally would consider that to be impossible, however, you are basically correct. In this specific…
Anybody who buys it now can share it for free. You can get online, right now, and find a copy of thesis and download it without paying a dime. People who are doing this sort of thing aren't going to be stopped by text…
It does actually go deeper than that, but really that's beside the point. Function calls into the WordPress code is enough. WordPress has a public API... several of them, in fact. A theme doesn't use those, it makes…
Read this: http://weblogtoolscollection.com/archives/2010/06/02/wordpre... Then read this: http://ottopress.com/2010/wordpress-3-0-multisite-domain-map... I use this exact method (and a subdirectory, not a subdomain…
Moving wp-config.php outside of the public html folder is easy. Just do it. WordPress checks the main root level and one level above for it automatically. No configuration needed. Renaming wp-admin is not currently…
Fair enough, but I'd point out that I've had a jailbroken phone for quite a while, installed and played with thousands of apps, and never experienced one "crash". What's the difference? Simple, I only installed tried…
1. Jailbreak. 2. SBSettings. 3. RotationInhibitor. 4. There is no step four. Seriously, why more people don't just jailbreak their devices and make it work the way they want it to work baffles me. Jailbreaking my 3GS…