1,356 reputation
618
bio website wpti.ps
location Beijing, China
age 45
visits member for 3 years, 11 months
seen Nov 20 at 15:01

WordPress Consultant & WPML Specialist

I was born and raised in Rotterdam, The Netherlands, have been living in Beijing, China since 1998 with a brief 2 year intermezzo in Valencia, Spain (2008-2010).

Almost 10 years experience with WordPress on Senlin Online, I blog via WP TIPS, release WordPress plugins on SO WP and I have a LinkedIn WordPress Helpdesk group.

(Social Media) Profiles:


Oct
28
awarded  Popular Question
Oct
23
awarded  Popular Question
Aug
14
awarded  Announcer
Jul
2
awarded  Curious
Jun
5
comment How to add a class to the comment submit button?
Otto I sincerely cannot understand that your viewpoint after all these years still seems to be the same. How about Bootstrap, Foundation and other frameworks? They either use <button> or a "button" class. There are numerous patched that simply add a class, what is the big deal? Why does this issue seem to be held back by a few (stubborn) people, clearly spoiling it for the rest? What is the point for me having to copy over the entire file that @TheDeadMedic has been so kind to make available? Instead you guys could solve the issue by adding 2 lines in core and be done with it! Bizar!
May
12
comment Which Details Are Required For Style.css File Header?
I would like to add that if you base your theme off TwentyThirteen (or any default theme), it's better to make a child theme. The reason for that is that if the former comes with an update, you can update along with it. If you start off with a standalone theme and there comes a security update (as an example), then you're stuck with basically insecure code...
Apr
23
awarded  Announcer
Jan
15
awarded  Caucus
Dec
16
awarded  Yearling
Oct
18
comment How does Cross Site Scripting (XSS) work exactly?
@Wyck from the Codex article you linked to: "It's important to note that most WordPress functions properly prepare the data for output, and you don't need to escape again." I understand better now, thx for all the input here!
Oct
17
comment How does Cross Site Scripting (XSS) work exactly?
Well, that is basically the answer @Wyck :) So for plugins that on the frontend have input fields and things like that it is of utmost importance to escape strings and naturally for themes' search fields, contact- and comment forms and any other frontend input areas, correct?
Oct
17
comment How does Cross Site Scripting (XSS) work exactly?
Thing is that I know what esc_html does, my original question was how or when would someone (a hacker) be able to insert scripts given that WordPress Core seems to strip out unsafe characters by default? If a hacker already has gained access to your site, then what would the point be of xss instead of just simply destroying your site?
Oct
16
comment How does Cross Site Scripting (XSS) work exactly?
the WordPress context lies in the fact that (see my comment on @Sander Koedood) it seems that WordPress already strips out "dangerous" strings, whether a developer escapes the strings or not.
Oct
16
comment How does Cross Site Scripting (XSS) work exactly?
Thanks for your input Sander. Your example (input field for Search) is a good one, but those type of fields are already secured by WordPress Core by default, right? Today I tried to put scripts in a few widgets I developed without escaping code in mind while I was developing, but also there WordPress just strips out the "dangerous" parts. Hence my original question: if Core already protects everything no matter whether you escape strings in your plugins or not, then what is all the fuss about? Of course at the same time I appreciate there are exceptions, depending on the type of plugin...
Oct
16
comment How does Cross Site Scripting (XSS) work exactly?
allright, will try to find info on it on my own then. Thanks for the link
Oct
15
asked How does Cross Site Scripting (XSS) work exactly?
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
well on jsfiddle that is, in my browsers it still doesn't do anything, so tmrw I need to start figuring out what is different with jsfiddle...
Aug
6
accepted How to output the content of a Custom Post Type from a drop down form?
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
playing in jsfiddle, turns out that when I select "onDomReady" it actually does work... :)
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
Unfortunately I don't get it. I added the lot to jsfiddle and also there it doesn't work. It's almost 5am here, so I'm off to bed now, tomorrow there is another day. Thanks for the invite, I will look there tomorrow.