The upcoming WordPress 2.5 has a completely-redesigned admin backend. Plugin authors who add custom fields to the “Write Post” and “Write Page” pages will need to change their methods to work with the new design. Ozh explains how to use add_meta_box() with the new design to add those custom fields. He has a simple, straightforward […]
Category Archives: WordPress
Readying Plugins for the New WordPress Admin Theme
The WordPress admin theme has been overhauled for the next version (scheduled to be released mid-March), which means that a lot of plugins’ admin pages could end up looking out of place. Joost de Valk gives some brief tips on how to mark up plugin admin pages to take advantage of the new styling. Unfortunately, […]
WordPress Plugin: GZIP Pages
WordPress 2.5 is being released in less than three weeks. While it has a lot of exciting new features, it is also missing a feature that’s been part of WordPress for a while: the option to compress page content for browsers that support compression. Up to version 2.3.3 of WordPress, you could select this option […]
CSRF Attack on WordPress
Someone named Ferruh has a proof-of-concept cross-site request forgery (CSRF) attack against WordPress (HT: DK at BlogSecurity). I’ve tried it out successfully on my own version of WordPress 2.3.3. The scenario is like this: you go to leave a comment on someone’s site, and surreptitiously that (evil) site tricks you into changing your WordPress admin […]
Filosofo’s WordPress Gravatar Plugin
Automattic, the company behind WordPress, recently acquired Gravatar. In case you don’t know, gravatars—or “globally recognized avatars”—are images that you can associate with an email address, so a picture of your choice can appear alongside your comments on many others’ blogs. Gravatar already provides a simple WordPress plugin, but it suffers from a common plugin […]