This month was a brief presentation on using the WordPress HTTP API to make web requests within WordPress.
This month, I presented on the WordPress database and discussed the tables, how to use the wpdb class and how to create your own custom tables. You can view the presentation here:
Other Things Mentioned
- I mentioned that everyone interested should try taking the WordPress quiz from Code Poet.
- People want a re-poll for the best Monday of the month
- Next month’s topic will be Enterprise Deployment and Setup (a round table discussion about our experiences)
- An interesting idea that I hadn’t though of was instead of storing serialized data in the database, store it as JSON instead. I’m going to do some research on this.
The second every St. Louis WordPress developers meetup has come to a conclusion. Here are some notes that I took during the meetup.
Security Best Practices Discussion
- Don’t use admin as your default username
- Change the default table prefix to something unique
- Consider moving your wp-config.php outside of your website root folder
- In code, check user permissions before running actions or even displaying the page
- Sanitize database inputs
- See $wpdb->prepare()
Security Plugins to Check Out
File Monitor Plus(No longer available) File Monitor(No longer available)
- Better WP Security
- Block Bad Queries
- Bulletproof Security
Other Security-related Discussion
I can see this turning into a total flame war, but choosing another cms because it isn’t used as much for added security. For example, choosing Drupal over WordPress since WordPress is targeted for attacks more because it is more widely used. Again, I’m not trying to start a flame war, just adding this to the list since someone mentioned it. Side note: this is totally how I feel about the Windows vs. Mac debate for security. Windows has more vulnerabilities because there are more people to harm by looking for vulnerabilities on Windows. You can affect a larger percentage of people by going with the big dog.
We talked last month about possibly working on a group project together for the hell of it. Some ideas were thrown out for plugins:
- Project management system
- Picking up an abandoned plugin
- Writing blog content about WordPress development
March Meetup Topic
WordPress Database/Table Management Best Practices
Here is a list of the things I would like to see Paul and myself cover:
- Dive into the WordPress tables and see what they actually hold
- Talk about some of the functions available in $wpdb
- Talk about integrating with the posts table
- How to create your own database tables for your plugins.
Tonight marks the first night of a meetup in St. Louis for WordPress developers! I know, exciting times right? Tonight’s meeting was more of a planning meeting for the future of the group.
When and where will we meet in the future?
It was suggested that we meet at 6:30 instead of 6 pm. We are going to post another poll for the group to figure out the optimal week for the meetup. Apparently the STL Ruby group meets on the 2nd & 4th Monday of the month. And the regular WordPress meetup group meets the 3rd Wednesday of the month. I think the consensus is to stay with Mondays, just figure out the best week for it. The location will stay as Integrity Corporation for the time being.
Suggested Topics for Group Discussion/Presentation
- Theme review
- Code review
- Enterprise deployment and setup
- How to create a plugin from scratch
- Security best practices
- Speed optimization for WordPress
- Discuss your development environment (how do you make your WordPress magic happen)
- What tools do we use? (IDE and other useful tools)
- Testing environment (PHPUnit, etc)
- Actions and filters
- Rewrite Endpoints
- Using WordPress as a service (REST, XML-RPC)
- Advanced Custom Fields
- Database/table management best practices
- Exploring the WordPress database (talk about the tables and how they tie together)
We also talked about working on plugins/themes together as a group. And we talked about creating an organization on GitHub to host the code. I’m really excited to see what we come up with as a group! Please leave comments below for anything that I left off, or other topics to discuss.
Well, I started in on a new project last night. This project will essentially be an event viewer for windows mobile devices. One of my concerns is that it won’t log events from the device…I’m not exactly sure how to hook in to device events yet. I can’t guarantee that this application will be running all the time to record device events, so I am thinking mainly of using it for application developers that want to use it to record events from their programs. They will be able to call a
method and pass all the information to create a new event in the event log.
I’ll post something worthwhile when it gets a little farther.