Software Engineering in WordPress, PHP, and Backend Development

Category: Articles (Page 238 of 258)

Personal opinions and how-to’s that I’ve written both here and as contributions to other blogs.

An Introduction To Cross Site Scripting in WordPress

When it comes to cross site scripting in WordPress, I think that there’s a lot of education that’s to be had.

I’m by no means an expert in this field, but I think that there’s either a lack of awareness or we take for granted what WordPress does for us.

Generally speaking, WordPress does an excellent job of providing sanitization and validation functions (assuming that we use them correctly), but that doesn’t mean there aren’t potential exploits.

In my latest series on Envato, I give a two part introduction to cross-site scripting in WordPress and practical tips for how we can test our themes and our plugins.

Continue reading

Open Source Ethics: Profiting From Contributions

When it comes to turning a profit on open-source software, I’d like to think that the majority of developers follow the same set of ethics. I’m my experience, it’s true – though, as with anything, there are outliers.

As I continue to work to introduce a premium level of support for my WordPress-related work, one of the things that I’ve found myself wrestling with is turning a profit on work to which others have contributed.

But are open source ethics that complicated?

Continue reading

Finding The Right WordPress Support System

The past couple of weeks, I’ve been discussing the challenge of supporting free WordPress plugins. Though I’ve done this in the past, I’ve retired those projects, but am looking to get back into doing so all the while documenting the process here.

But first, for those who haven’t been reading the articles up to this point, I wanted to reference the previous posts just to let you know where I stand with regard to all of this:

The point is that I’m slowly working my way back into building a small business around building WordPress plugins, supporting them, offering documentation, manuals, and so on, but I want to make sure that I’m doing it right.

To that end, I’m enjoying the discussion with you guys via the comments as well as the challenge of finding the best tools possible not only for me but for potential customers, as well and this is what raises my next issue: Finding the right WordPress support system. Continue reading

Everyone Should Learn To Code (Whatever “Code” Means)

Last week, the Everyone Should Learn To Code video was making the rounds around the web. If you’ve haven’t seen it, I’ve shared it below.

In short, the video opens with a quote by Steve Jobs:

I think everybody in this country should learn how to program a computer because it teaches you how to think.

In short, it’s an inspiring video that features some of the most popular technologists discussing their thoughts on programming, their foray into the industry, why others should follow suit.

This idea isn’t new, but the popular nature of this video has really gotten me thinking about my particular stance on this issue. In fact, I read a strong rebuttle to the video last week that – whether or not you agree with it – is a well-written piece.

I shared my candid thoughts with my team on our back channel which resulted in a bit of a discussion primarily between John and myself. The more I’ve thought about it, the more of an opinion I’ve developed, and thought I’d share it here.

TL;DR: I’m not completely sold on the fact that everyone should learn to code. First, I think we need to define what it actually means to code.

Continue reading

A Case Against WordPress Shortcodes

At my recent WordPress Developer Meetup, the topic of shortcodes came up as a point of discusion. When talking about it, I realized that I’ve never actually talked about them here on the blog, so I thought it might be worth bringing up for discussion.

For those of you who have seen any of my plugins, you see that none of them include shortcodes despite the fact that people have requested functionality offered by them.

For the most part, I dislike WordPress shortcodes. I think they are unintuitive, difficult to use for the average user, and go against much of what the core functionality of WordPress aims to offer.

But the challenge is that there’s not yet a suitable alternative.

Continue reading

« Older posts Newer posts »

© 2025 Tom McFarlin

Theme by Anders NorenUp ↑