2018
-
Release Freeze is Coming
Nov 21
I will not ship any WordPress-related code or updates during the month of December. This is so I can take time to focus on family and 2019 planning. I encourage you to do the same.
-
Disclosure: SQL Injection in Cart66 Pro
Apr 6
Last month I discovered a critical SQL injection vulnerability in the no-longer-developed yet still actively used Cart66 Pro plugin for WordPress. Here are the details …
-
Introducing Secure Updates for WordPress
Feb 26
Today I introduce the a new plugin that provides secure updates for WordPress: DGXPCO.
2017
-
Gutenberg and the Road Ahead
Dec 15
I have a confession: I really like Gutenberg. But forcing a new editor on businesses running sites they can’t update themselves pulls the rug out from under them. Two roads diverge here, and WordPress may need to travel both.
-
World Domination through WordPress Security
Jul 31
I’m tired of lamenting the state of WordPress security and doing nothing to address it. I’m building solutions to turn the conversation around.
-
WordPress.com is not WordPress
May 18
A friend tricked me into using WordPress by taking me to the first WordCamp Portland. Plugins, Core contributions, four years at 10up and several unanswered Automattic applications later, I see a troubling trend: WordPress.com is not WordPress, and the shared name is a problem.
2016
-
Introducing Sessionz
Nov 27
Introducing a new, middleware-inspired session handler for PHP projects (not just WordPress) called Sessionz. It’s open source; take a look!
-
Security, Internationalization, and Performance
Apr 6
esc_html_e() looks like a shortcut for echo esc_html(). It isn’t. It runs your text through WordPress’ translation system, one of its most expensive operations. A mistake I’ve made myself, and how to avoid it.