1,321 reputation
613
bio website wpti.ps
location Beijing, China
age 44
visits member for 3 years, 4 months
seen yesterday

I was born and raised in Rotterdam, The Netherlands, have been living in Beijing, China since 1998 with a brief 2 year intermezzo in Valencia, Spain (2008-2010).

I have been developing websites since 2005 and working with WordPress since 2006.

The websites I run are WP TIPS, Senlin Online, WP Basejump, Sandbox Online, Senlin Hosting Club, Piet Bos dot ME, among others.

Google+ Twitter WordPress Github


Jan
15
awarded  Caucus
Dec
16
awarded  Yearling
Oct
18
comment How does Cross Site Scripting (XSS) work exactly?
@Wyck from the Codex article you linked to: "It's important to note that most WordPress functions properly prepare the data for output, and you don't need to escape again." I understand better now, thx for all the input here!
Oct
17
comment How does Cross Site Scripting (XSS) work exactly?
Well, that is basically the answer @Wyck :) So for plugins that on the frontend have input fields and things like that it is of utmost importance to escape strings and naturally for themes' search fields, contact- and comment forms and any other frontend input areas, correct?
Oct
17
comment How does Cross Site Scripting (XSS) work exactly?
Thing is that I know what esc_html does, my original question was how or when would someone (a hacker) be able to insert scripts given that WordPress Core seems to strip out unsafe characters by default? If a hacker already has gained access to your site, then what would the point be of xss instead of just simply destroying your site?
Oct
16
comment How does Cross Site Scripting (XSS) work exactly?
the WordPress context lies in the fact that (see my comment on @Sander Koedood) it seems that WordPress already strips out "dangerous" strings, whether a developer escapes the strings or not.
Oct
16
comment How does Cross Site Scripting (XSS) work exactly?
Thanks for your input Sander. Your example (input field for Search) is a good one, but those type of fields are already secured by WordPress Core by default, right? Today I tried to put scripts in a few widgets I developed without escaping code in mind while I was developing, but also there WordPress just strips out the "dangerous" parts. Hence my original question: if Core already protects everything no matter whether you escape strings in your plugins or not, then what is all the fuss about? Of course at the same time I appreciate there are exceptions, depending on the type of plugin...
Oct
16
comment How does Cross Site Scripting (XSS) work exactly?
allright, will try to find info on it on my own then. Thanks for the link
Oct
15
asked How does Cross Site Scripting (XSS) work exactly?
Aug
27
comment add dynamic string translation (WPML)
@kaiser thanks Franz-Josef, been here for a while already actually :) And I have subscribed to the tag, but I don't understand, I sometimes receive threads from several years back... Anyways, I understand the "policy" towards premium plugins a bit better now. Pity as I like to help out where I can, especially since it's one of my areas of expertise. Guess that means I will have to keep an eye on the WPML forums too then.
Aug
27
comment add dynamic string translation (WPML)
@kaiser with all due respect, but I think there are plenty questions here for other premium plugins where you guys don't have a problem with giving support for. There is not a huge number of people that know a lot about WPML, but I happen to be one of the "lucky ones" and I don't mind sharing some of that information to people that want to try it out by themselves. If they cannot figure it out, then I agree that we should not help them out for free, but that is a different story altogether I think
Aug
27
comment add dynamic string translation (WPML)
The information you posted above has too many unknown variables, so the only thing I can do is to pint you to the WPML documentation that you need to accomplish this: wpml.org/documentation/support/… point 2
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
well on jsfiddle that is, in my browsers it still doesn't do anything, so tmrw I need to start figuring out what is different with jsfiddle...
Aug
6
accepted How to output the content of a Custom Post Type from a drop down form?
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
playing in jsfiddle, turns out that when I select "onDomReady" it actually does work... :)
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
Unfortunately I don't get it. I added the lot to jsfiddle and also there it doesn't work. It's almost 5am here, so I'm off to bed now, tomorrow there is another day. Thanks for the invite, I will look there tomorrow.
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
if I add .show myself to the office-entry class and I add a line of CSS .office-entry.show { display: block; } then it is all perfect. The trick will be how to add .show to the office-entry class...
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
Don't know an awful lot about jQuery, but I will try to figure it out. You definitely helped me with a big step in the right direction! Thanks so much!
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
hmm nothing changes, it looks like the jQuery does not have any effect at all. There is no class switching which I sort of expected. There are no javascript errors in the browser, so that is not it.
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
Thanks @GhostToast, this looks a lot different from what I had before based on the snippet from the other thread. The jQuery part however doesn't seem to do anything. The excerpts are showing both before I have even selected anything. Would that have to do with the fact that the #office-chooser already has been closed?