17,728 reputation
1441
bio website ottopress.com
location Memphis, TN
age 38
visits member for 3 years, 8 months
seen 5 hours ago

Tech Ninja at Audrey Capital.

Moderator of WordPress.org support forums.

Writer of Otto on WordPress.

Random spewer of nonsense on Nothing to See Here.

Beer connoisseur.

Man about town.


6h
comment How to set featured image size in percentage
background-size:cover;
6h
comment Is wp_nonce_field vulnerable if you know the action name?
They should be unique in their action name (not the same as something used by core or by another plugin, etc), and they should include an identifier of whatever they are operating on, if they are operating on some thing. A "create_thing" action which is creating a new thing would not have such an identifier.
7h
comment Is wp_nonce_field vulnerable if you know the action name?
No, I think you misunderstood my reply. It doesn't matter whether the user knows the action name or not, and you don't (and shouldn't) need to md5 the action name either. The users knowledge of the action name is wholly irrelevant.
12h
answered Config file with no Keys..?
13h
revised Is wp_nonce_field vulnerable if you know the action name?
deleted 4 characters in body
13h
revised Is wp_nonce_field vulnerable if you know the action name?
added 7 characters in body
13h
answered Is wp_nonce_field vulnerable if you know the action name?
14h
comment $wpdb->prepare with ON DUPLICATE KEY UPDATE
Do you actually have a duplicate key here? What is the structure of user_req and what are the keys and indexes?
22h
answered apache cpu over 70% on localhost
Apr
15
comment Are there Limitations on filter handles?
Well, like I said, I didn't say it was necessarily a good idea, but without more specific details, I cannot say whether removing sanitize_title here will cause issues. If he's making 5k+ filter calls, then that's probably pretty bad to begin with and the issue might be deeper than using sanitize_title.
Apr
15
answered Are there Limitations on filter handles?
Apr
14
answered $wpdb->get_var - What value is returned when zero records are found?
Apr
12
comment How does routing on wordpress work?
@yeahman: So if you think Drupal is better for a specific case, then use Drupal. It's all free software. Use whatever fits your needs best. It won't hurt WordPress's feelings one bit. I mean, if you were making a wiki, I would not suggest WordPress for that either. :)
Apr
12
comment How does routing on wordpress work?
Shortcodes. codex.wordpress.org/Shortcode_API
Apr
12
comment How does routing on wordpress work?
Adding a full routing system is not usually necessary. There are simpler ways. The basis of WordPress is to display user-generated content, which is all stored in the posts table. If you're wanting to display content which is not user generated, then you generally do it in the theme or in a plugin. There are hundreds (thousands) of action hooks and filters and other ways for code to override various parts of the process as the page is generated. And with things like shortcodes, inserting custom html into content is relatively easy.
Apr
12
comment How does routing on wordpress work?
Alternatively, if you're making a theme for yourself and don't want to bother with making a portable plugin, you can make a "Page Template" in your theme, with your code in it, then make a new Page and tell it to use that special template. Templates are PHP, they can do anything they like.
Apr
12
comment How does routing on wordpress work?
You probably would not make a contact form store anything of the form itself in the database, you would code it as a plugin and have the logic for the form submission in the plugin. To output the special form code in a Page or Post, you define a shortcode.
Apr
12
answered How does routing on wordpress work?
Apr
8
answered What is with the one month time limit for sub directory installs for multisite network?
Apr
8
answered Difference between the 4 Built in RSS Feeds?