NONCE upon a time we didn’t need to worry about Cross-Site Request Forgeries. We handled users submitting a form twice by simply processing the form twice. Neither of these were great strategies, so someone invented the Number used ONCE or "NONCE". Let’s take a quick look at what they are, how WordPress implements them, and how you can implement them in your own forms and code.
This is a companion blog post to the conference talk I gave at the JavaScript for WordPress conference, online on July 12th, 2019. If you missed the talk or want to bookmark the recap and links, read on.
WordPress 5.0, with a new editor and arguably the biggest change the CMS has ever seen, is close to being released! A lot of folks have been asking us how Pantheon plans to handle WordPress 5.0 and what their upgrade options are, which we’ll outline below. Whatever path you choose, we encourage you to upgrade as soon as possible to keep your sites secure.
Marketing and developer teams often speak different languages and have conflicting priorities. However, many companies are discovering there are two sides to the same coin: every business KPI has a corresponding technical metric that directly influences its success.
Here are five high-level business KPIs and the website performance metrics you should track.
Content authoring can be painful. Drupal Gutenberg is an editor, originally written by the WordPress community, that makes it easy to create content—from long-form feature articles to rich landing pages.
As soon as we started presenting Gutenberg in client meetings, we knew it was huge. “How fast can we get this?” was the usual response. The people most eager to get started were always content producers. We were not surprised.
Alex the developer is pretty excited about the WordPress REST API. Because the infrastructural components were introduced in WordPress 4.4, they too can use register_rest_route() to easily register their own WP REST API endpoints. In fact, they love registering routes so much that they’re creating API endpoints for every project they work on.
Have you had “the talk” with your clients? You know, the one where you tell them that if they are going to be doing it, they need to be safe. If they are going to collect private information or integrate external services like PayPal or MailChimp, it is time to sit down and have a discussion—about security. A company’s website is a portal to customer information, and if hacked, can lead to a very public breach resulting in loss of customers, fines, and brand damage.
Pantheon's Managed HTTPS service now features fully dedicated certificates and an updated go-live experience. This is made possible in partnership with Let’s Encrypt and Fastly.
Moving databases between environments is tough. Many things can break in the process, and a single issue can sink hours of your valuable time. Migrating WordPress databases between environments is especially tricky for two reasons:
Drupal configuration is the all-important glue that instructs the Drupal core and contrib code how to operate in the context of the current web application. In Drupal 7, there was no formal configuration API in core. The ctools contrib module provided an exportables API that was widely implemented, but was not universally supported. Drupal 8 has greatly improved on this state of affairs by providing the Configuration Management API in core. Now, configuration can be handled in a uniform and predictable way.