Drupal has a great Security Team and much of the security advice on Drupal.org is curated by this group. They provide security coverage for Drupal 7 and 8 core as well as all contributed modules and themes for Drupal 7 and 8.
We're going to turn our focus to the application layer and look at the kinds of threats we need to guard against in Drupal and WordPress.
WordPress 5.0 was the first WordPress release to incorporate the new React-powered Gutenberg UI framework. With Gutenberg as the standard for WordPress interface development, WordPress developers can now benefit from more from the awesome React and JavaScript ecosystems to improve the developer experience and user experience of creating and using our plugins, themes, and sites.
Ever wonder exactly what is going on inside WordPress? As with any PHP script, you have a lot of good options for debugging and tracing what is going on. However, if all you want is a quick dump of the actions and filters that WordPress is calling, there is a very easy way to do this.
Props: I was inspired to write this plugin during a talk Helen Hou-Sandi gave. I believe it was at WordCamp NYC. Thanks Helen.
As I have written and talked about before, my favorite feature of Drupal 8 is Configuration Management.
Editor's Note: The structure of Terminus commands have changed since this post was written. The example commands have been updated to reflect the current structure of terminus command:subcommand <site>.<env>. Also when this post was written, Drupal 8 was the newest version of Drupal and was a large technical departure from Drupal 7 (hence the need for robust migration processes described in this post).
Pantheon has teamed up with ecommerce expert Patrick Rauland to create our new WooCommerce Quick Start guide. This guide is designed to help you get a WooCommerce store up and running on Pantheon. It will teach you how to:
Create a WordPress site on Pantheon and install WooCommerce
Commit your changes with version control
At Pantheon, website performance is our priority, so when a client asked me to investigate why his site was slow, I decided to document the story to share with all of our users.
NONCE upon a time we didn’t need to worry about Cross-Site Request Forgeries. We handled users submitting a form twice by simply processing the form twice. Neither of these were great strategies, so someone invented the Number used ONCE or "NONCE". Let’s take a quick look at what they are, how WordPress implements them, and how you can implement them in your own forms and code.
This is a companion blog post to the conference talk I gave at the JavaScript for WordPress conference, online on July 12th, 2019. If you missed the talk or want to bookmark the recap and links, read on.