July 11, 2018 — Protecting your plugin functionality with specific capability checks using the Capabilities API should be a best practice, but it is still one of the most underused parts of WordPress core. Using the API allows for granular access management by developers using the plugin, and may even prevent security holes. This session explains how to use the API by looking at examples and diving in deeper from there, both from the view of a plugin developer as well as of an external developer who needs to tweak a third-party plugin.

As another practical example, some of the upcoming improvements to capabilities in WordPress core itself are revealed, so that you are aware of what’s on the horizon.

Presentation Slides »

July 9, 2018 — As the WordPress API matures, this is an important moment to take stock and consider the best use-cases. We’ll briefly take a bird-eye view of the API, before deep-diving into different ways the API has been deployed. We’ll see an examples of the API as an integration tool for running dual CMSs, as a public-facing queryable dataset, as a big data visualisation tool and as a way to share large sets of data. Along the way, I’ll share ways to make your API implementation more efficient – and share some of the pitfalls and mistakes we’ve made. We’ll take a look at decoupling both the frontend and backend of WordPress – and answer the obvious question – why continuing using WordPress?

July 9, 2018 — Utilizing caching mechanisms in a WordPress product is a balancing act: what remote calls are cacheable, what queries are slow and only occasionally needed, and how will it all impact the end user? In some cases we can set up our environment for a base level of performance, and in others we’ll need to balance data storage (like autoloaded options) and other background processes so they take the overall environment into consideration. I’ll be including my own experiences as a web developer working on a large-scale WordPress multisite as well as sharing the perspective from a hosting company’s point of view.

Presentation Slides »

July 9, 2018 — We will explore the existing major JavaScript API’s including wp.api – the bundled REST API client, wp.customize the improved JavaScript Customizer API, wp.codeEditor – the new code editor built into WordPress; wp.heartbeat – a powerful and easy client/server synchronization API; and wp.media – to leverage the media modal. We’ll also explore the future of WordPress JavaScript and look at the JavaScript APIs coming to WordPress including the APIs exposed by Gutenberg, and the WordPress npm packages including wp.hooks – JavaScript actions and filters matching the PHP versions.

July 9, 2018 — This talk explores the principles behind some of the original decisions behind Gutenberg. What does it mean to build around HTML and treating the user’s content as the privileged actor? How does Gutenberg work internally to power the editing experience? This talk dives on the technical side of the project and its implications for democratizing publishing.

Presentation Slides »

July 5, 2018 — Content security policies (CSPs) are a relatively new security element on the web horizon. CSPs use browsers to detect and mitigate certain types of attacks like cross-site scripting (XSS), clickjacking and other code injection attacks resulting from execution of malicious content in the trusted web page context. CSPs can be used for simple purposes like enforcing https on SSL-enabled sites, to more sophisticated uses like authorizing only truly trusted sources and blocking others.

Most sites do not have CSPs installed, but it’s important to be aware of them and how they can be used to add an additional layer of security to your website.

Presentation Slides »

April 12, 2018 — แชร์ประสบการณ์ ในการพัฒนา theme และ plugin รวมถึงการอัพขึ้น wordpress.org โดยหลักแล้วคือการพัฒนาให้ได้มาตรฐาน ซึ่งมาตรฐานในที่นี่จะแบ่งเป็น 3 หัวข้อหลักๆ 1. มาตรฐานการพัฒนาเว็บ เช่น Front-end, PHP 2. มาตรฐานการพัฒนา WordPress 3. มาตรฐานการอัพขึ้น wordpress.org ปล. ถ้าได้รับเลือกเป็น speaker 1. ขอเป็นคนพูดใน session บ่ายนะครับ (จากหลัง 13.30 เป็นต้นไป) เนื่องจาก เรียนเสร็จที่ จุฬา ประมาณ 12.00 ครับ 2. ถ้าเป็นไปได้ ขอไม่ตรงกับคุณโดม นะครับ อยากเข้าไปฟัง session ของคุณโดมครับ

Presentation Slides »

March 30, 2018 — Bij Level Level hebben we te maken met websites die schaalbaar en flexibel moeten zijn. Tijdens het ontwikkelen van een maatwerkproject willen we een goede basis neerzetten, zodat wijzigingen eenvoudig doorgevoerd kunnen worden en uitbreidingen gebruik kunnen maken van de bestaande onderdelen. Door enkele richtlijnen aan te houden zorgen we ervoor dat we het technisch gezien bij omvangrijke projecten allemaal op een rijtje houden. Denk hierbij aan methodes zoals Object Georiënteerd Programmeren, BEM (CSS) en technieken zoals Twig templating (Clarkson). Dit allemaal zonder het contact met WordPress te verliezen.

Ons doel is om websites op te leveren van hoge kwaliteit welke schaalbaar, stabiel en eenvoudig te onderhouden zijn. Dit resulteert in diverse projecten zoals Autotaalglas, Business Insider Nederland, ABN AMRO Financial Focus, Kansfonds of SOMO.

De klant blij, wij blij.

Presentation Slides »

November 29, 2017 — Bernhard Kau describes how to use docker for the local development environment.

November 18, 2017 — Todas las plataformas de publicación tienen una API (Twitter, Facebook, meetup…) pero, ¿Qué es una API, cómo funciona y -lo más importante- cómo la utilizamos?