Otto42

6 ms·

1.
by Otto42 10y ago
"Cache-Control: private" Google has to be respecting Cache-Control headers, right? Set your AMP pages to return that. Then they won't be allowed to cache them.
2.
by Otto42 11y ago
Once we were notified of the issue, I manually removed the bad code and shut down further updates. If you have this plugin, update to the latest version immediately.
3.
by Otto42 11y ago
Plugins do not auto update by default. You have to specifically turn those on, and not via a switch, but via code editing.
4.
by Otto42 11y ago
Disclaimer: I wrote those guidelines. The "Paypal" loophole is specifically because the first version of the guidelines had people constantly emailing us asking if this Paypal code snippet was okay. All the Paypal code snippet doe
5.
by Otto42 11y ago
> are there systems in place to blacklist a plugin and remotely remove it from an install (and possibly contact the install owners) We have automated scanning systems for suspicious code commits. If they occur, me and a few others get an
6.
by Otto42 11y ago
"Without review" is not quite true. Some of us get an email for every commit. Not kidding. Helps a lot for the scanning of things.
7.
by Otto42 11y ago
We do monitor that sort of thing. Very closely. Oh, and I got that email too. They didn't really vet that email list very well, or they would have been smarter about it. :)
8.
by Otto42 13y ago
This is for backwards compatibility. If you checked it again after you login, you'd find that it is not an MD5 password anymore. WordPress uses salted and hashed passwords with the phpass library, and has since version 2.5, released in 2008
9.
by Otto42 13y ago
@patio11: So, your attack basically amounts to "find RCE, then use RCE to gain control of whole network at once". Okay, the problem with this argument is that it is technically valid on any network of any kind. If I invent magic exploit tha
10.
by Otto42 14y ago
Re: media, one step at a time. :) Re: custom fields: This makes little to no sense to be in core, because custom fields are just that, "custom". There's no point in giving the end user the ability to make their own meta boxes hooked to cust
11.
by Otto42 14y ago
He's not muffled. He actually sounds like that. :)
12.
by Otto42 14y ago
Somehow I doubt that we'll decide to drop support for 65.5% of our users (roughly 26 million websites). http://wordpress.org/about/stats/
13.
by Otto42 14y ago
I wasn't actually responding directly to you, but I will. Doesn't matter if you offer guest commenting by default. I close the browser tab the moment I see the non-standard comment box. I don't have any idea what hassles some arbitrary-comm
14.
by Otto42 14y ago
Agreed. If I see a third party commenting system, I typically just close the tab instead of leaving a comment. It's not worth the hassle to me to deal with whatever your commenting system requires. Name/email/url. These three simple fields
15.
by Otto42 14y ago
Wait, people actually use Yelp? Seriously? I find that to be the most shocking statement in the article.
16.
by Otto42 15y ago
I'm sort of shocked that you're shocked. The rigid and inflexible architecture of systems like Rails and Django are the primary reasons for WP's success. There's a reason WP has more themes and plugins than these other systems, and that rea
17.
by Otto42 15y ago
So, when you have a problem with the system, then to find the bug you have to look in three or four places instead of one.
18.
by Otto42 15y ago
Gotta say that I don't get it either. They've basically just added yet-another-HTML-templating system into the mix. Question not answered: "For the love of all that is holy, why?" PHP is an HTML templating system. Tacking on yet another o
19.
by Otto42 15y ago
The "serious performance issues" you speak of were fixed in core, about 11 days before your post. See http://core.trac.wordpress.org/changeset/18541
20.
by Otto42 15y ago
I've gone by the name "Otto" for about half my life. It's a nickname I got in college. Many of my best friends didn't know my real name for years. It just never came up. My mom is the only person who uses my real name, and every now and the
21.
by Otto42 15y ago
At the same time, virtually everybody I know who has tried Places has said the exact opposite. To be fair, I have many friends who use Foursquare for its most obvious and intended purpose, which is to arrange spontaneous meetups without hav
22.
by Otto42 15y ago
Yeah, writing that importer was certainly annoying. Tumblr's formats are nutty and weird. http://wordpress.org/extend/plugins/tumblr-importer/
23.
by Otto42 16y ago
I installed the Firefox 4 beta. It's crap. I've now removed it and will no longer be using Firefox. Seriously, it is that bad, and will probably never get any better. RIP Firefox. We hardly knew ye.
24.
by Otto42 16y ago
In the specific context of a GPL program, no, but there is case law backing up my argument. Micro Star v. Formgen for example, held that a Duke Nukem 3D map file (which contained no code or anything else from the game itself) was a derivati
25.
by Otto42 16y ago
In the case of Excel macros, Microsoft have provided a public API within which to create those programs. This is not the case for WordPress themes. Themes use the internal structures of WordPress to do their work, not the public APIs that W
26.
by Otto42 16y ago
The GPL has been upheld as a perfectly valid and enforceable license on many occasions. However, in all those cases, this happened via initial injunctions or the like, not in an actual final case itself. Basically, once the license was rule
27.
by Otto42 16y ago
"If you make a theme that does not use any existing wordpress code, it wouldn't be considered a derivative work." I personally would consider that to be impossible, however , you are basically correct. In this specific case though, that do
28.
by Otto42 16y ago
Anybody who buys it now can share it for free. You can get online, right now, and find a copy of thesis and download it without paying a dime. People who are doing this sort of thing aren't going to be stopped by text in a license.
29.
by Otto42 16y ago
It does actually go deeper than that, but really that's beside the point. Function calls into the WordPress code is enough. WordPress has a public API... several of them, in fact. A theme doesn't use those, it makes direct calls to internal
30.
by Otto42 16y ago
Read this: http://weblogtoolscollection.com/archives/2010/06/02/wordpre... Then read this: http://ottopress.com/2010/wordpress-3-0-multisite-domain-map... I use this exact method (and a subdirectory, not a subdomain install) to run mult

More ›