1,356 reputation
718
bio website wpti.ps
location Beijing, China
age 45
visits member for 4 years
seen yesterday

WordPress Consultant, WPML Specialist & Core Contributor (various WP versions incl. 4.0)

I was born and raised in Rotterdam, The Netherlands, have been living in Beijing, China since 1998 with a brief 2 year intermezzo in Valencia, Spain (2008-2010) and recently moved to Shanghai, China.

Naturally I speak a few languages and I think that is (part of) the reason that when I rolled into WordPress website development, internationalisation and localisation became very important to me.

It is therefore almost no wonder that apart from being WordPress Consultant, I am also WPML Specialist (WPML is the plugin to give WordPress websites multilingual functionality).

I am the founder and Lead Developer of Senlin Online and if I am not busy with client work, I spend my time fine-tuning my WordPress Starter theme soblossom, developing plugins or blogging via WP TIPS.

To give back to the community and help people with their various problems, I always spend part of my time in the various WordPress related groups on LinkedIn; I even have my own WordPress related group there, the WordPress Helpdesk.

I am proud to be able to say that I have been a Core Contributor for a few WordPress versions now, including 4.0.

You can read more about me and/or contact me via the following media:


Dec
16
awarded  Yearling
Oct
28
awarded  Popular Question
Oct
23
awarded  Popular Question
Aug
14
awarded  Announcer
Jul
2
awarded  Curious
Jun
5
comment How to add a class to the comment submit button?
Otto I sincerely cannot understand that your viewpoint after all these years still seems to be the same. How about Bootstrap, Foundation and other frameworks? They either use <button> or a "button" class. There are numerous patched that simply add a class, what is the big deal? Why does this issue seem to be held back by a few (stubborn) people, clearly spoiling it for the rest? What is the point for me having to copy over the entire file that @TheDeadMedic has been so kind to make available? Instead you guys could solve the issue by adding 2 lines in core and be done with it! Bizar!
May
12
comment Which Details Are Required For Style.css File Header?
I would like to add that if you base your theme off TwentyThirteen (or any default theme), it's better to make a child theme. The reason for that is that if the former comes with an update, you can update along with it. If you start off with a standalone theme and there comes a security update (as an example), then you're stuck with basically insecure code...
Apr
23
awarded  Announcer
Jan
15
awarded  Caucus
Dec
16
awarded  Yearling
Oct
18
comment How does Cross Site Scripting (XSS) work exactly?
@Wyck from the Codex article you linked to: "It's important to note that most WordPress functions properly prepare the data for output, and you don't need to escape again." I understand better now, thx for all the input here!
Oct
17
comment How does Cross Site Scripting (XSS) work exactly?
Well, that is basically the answer @Wyck :) So for plugins that on the frontend have input fields and things like that it is of utmost importance to escape strings and naturally for themes' search fields, contact- and comment forms and any other frontend input areas, correct?
Oct
17
comment How does Cross Site Scripting (XSS) work exactly?
Thing is that I know what esc_html does, my original question was how or when would someone (a hacker) be able to insert scripts given that WordPress Core seems to strip out unsafe characters by default? If a hacker already has gained access to your site, then what would the point be of xss instead of just simply destroying your site?
Oct
16
comment How does Cross Site Scripting (XSS) work exactly?
the WordPress context lies in the fact that (see my comment on @Sander Koedood) it seems that WordPress already strips out "dangerous" strings, whether a developer escapes the strings or not.
Oct
16
comment How does Cross Site Scripting (XSS) work exactly?
Thanks for your input Sander. Your example (input field for Search) is a good one, but those type of fields are already secured by WordPress Core by default, right? Today I tried to put scripts in a few widgets I developed without escaping code in mind while I was developing, but also there WordPress just strips out the "dangerous" parts. Hence my original question: if Core already protects everything no matter whether you escape strings in your plugins or not, then what is all the fuss about? Of course at the same time I appreciate there are exceptions, depending on the type of plugin...
Oct
16
comment How does Cross Site Scripting (XSS) work exactly?
allright, will try to find info on it on my own then. Thanks for the link
Oct
15
asked How does Cross Site Scripting (XSS) work exactly?
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
well on jsfiddle that is, in my browsers it still doesn't do anything, so tmrw I need to start figuring out what is different with jsfiddle...
Aug
6
accepted How to output the content of a Custom Post Type from a drop down form?
Aug
6
comment How to output the content of a Custom Post Type from a drop down form?
playing in jsfiddle, turns out that when I select "onDomReady" it actually does work... :)