Profile

Cover photo
Andrew Nacin
Works at WordPress
Attended The George Washington University
Lives in Washington, D.C.
5,123 followers|78,499 views
AboutPostsPhotosVideos

Stream

Andrew Nacin

Shared publicly  - 
 
The future is now.
1
Add a comment...

Andrew Nacin

Shared publicly  - 
 
On Saturday at WordCamp Portland, I'll be presenting on the WP Query API. Despite being leveraged by most theme and plugin developers, few understand how or why it works. Many use it incorrectly or inefficiently, or are simply missing out on many of its awesome features, hooks, and flags.

I'll be walking through the API, how it works, and the things that scare most developers away (but shouldn't). Given how important this API is, the club shouldn't be nearly as exclusive.

My questions for you: What's something you don't know or fully understand and want to hear more of? And what's something you do know that you think would be great for this talk?
1
Andrew Nacin's profile photo
21 comments
 
For those asking, yes, the presentation will be recorded and will end up on wordpress.tv.
Add a comment...

Andrew Nacin

Shared publicly  - 
 
Do it!
**** originally shared:
 
Go to http://wordpress.org/ and +1 on the Google button at the bottom, support WordPress. :)
WordPress.org. Home; Showcase; Extend. Plugins; Themes; Mobile. About; Docs; Blog; Forums; Hosting; Download. WordPress is web software you can use to create a beautiful website or blog. We like to sa...
1
Add a comment...

Andrew Nacin

Shared publicly  - 
 
Me: "Do you have sauerkraut?"
Him: "Yes."
Me: "Do you have --"
Him: "Cooked onions?"
Me: "Yep!"
Him: "So you're from New York?"

I present my new favorite half smoke/hot dog street vendor.
1
Andrew Nacin's profile photo
 
+Casandra Marburger - The south side of the 2100 block of I Street. Adel is his name, he's there until 5 or 6 on weekdays, apparently.
Add a comment...
Andrew Nacin was tagged in a photo.

Andrew Nacin

Shared publicly  - 
1
Have him in circles
5,123 people
Gloria Galvis's profile photo
Sharon ILP's profile photo
Nidhi Sharma's profile photo
Gerrit Tienkamp's profile photo
Henry “Enerwings” Row's profile photo
Greg Gross's profile photo
Arne Viehmeister-Kerner's profile photo
Béatrice Karjalainen's profile photo
Willy Bay Margaret River's profile photo

Andrew Nacin

Shared publicly  - 
1
Add a comment...

Andrew Nacin

Shared publicly  - 
 
This is bogus, as usual. Folks, this isn't rocket science: Administrators and editors are allowed to post unfiltered HTML in titles and content. It's been like that for years. Nothing has suddenly changed.

This is a weekly occurrence -- someone supposedly knowledgable about web security publishes a blatantly obvious "How did they miss that?" security vulnerability without doing any testing or research. Everyone believes them and no one searches Google first.

<script>alert(1)</script>? Really? I mean, come on. Yeah, you're right, we totally missed that one. :-)
**** originally shared:
 
Wichtig: XSS Lücke in WordPress 3.2.1

Blogs mit mehreren (Gast)Autoren sind von der Schwachstelle betroffen. Um die Lücke auszunutzen, reicht ein Script-Tag im Artikeltitel zu hinterlassen (siehe Screenshot). Der Fehler ist reproduzierbar. Als Beispiel: http://32.wpcoder.de/4/descendingalert1/

Als schneller Bugfix reicht zuerst eine Anpassung in der Datei /wp-includes/post-template.php in der Zeile #52.

Davor:
echo $title;

Danach:
echo wp_strip_all_tags($title);

Ist nicht die eleganteste Lösung, aber sie tut. Man könnte noch weitere Stellen absichern, aber das ist die relevanteste.
1
Add a comment...

Andrew Nacin

Shared publicly  - 
 
Last night's Fireworks on the National Mall
11
Add a comment...

Andrew Nacin changed his profile photo.

Shared publicly  - 
 
Andrew Nacin changed his profile photo.
1
Andrew Nacin's profile photo
2 comments
 
Sorry, +Benjamin Balter trained me.
Add a comment...
People
Have him in circles
5,123 people
Gloria Galvis's profile photo
Sharon ILP's profile photo
Nidhi Sharma's profile photo
Gerrit Tienkamp's profile photo
Henry “Enerwings” Row's profile photo
Greg Gross's profile photo
Arne Viehmeister-Kerner's profile photo
Béatrice Karjalainen's profile photo
Willy Bay Margaret River's profile photo
Work
Occupation
WordPress Lead Developer
Employment
  • WordPress
    Lead Developer, 2010 - present
  • Hatchet Publications, Inc.
    Web Director, 2007 - 2010
Places
Map of the places this user has livedMap of the places this user has livedMap of the places this user has lived
Currently
Washington, D.C.
Previously
East Windsor, Conn.
Contact Information
Work
Email
Story
Tagline
WordPress Lead Developer
Education
  • The George Washington University
    2006 - 2010
Basic Information
Gender
Male