wpMail.me wpMail.me issue#246 - The weekly WordPress newsletter. No spam, no nonsense. - March 17, 2016
News & Articles
Popular WordPress Plugin Comes with a Backdoor, Steals Site Admin Credentials (news.softpedia.com) Security researchers have unmasked the wicked actions of a WordPress plugin that was installing a backdoor through which it was altering core WordPress files so it could log and steal user credentials from infected sites. The plugin in question was Custom Content Type Manager (CCTM), a popular WordPress plugin for creating custom post types.
The Jorbin Test (poststatus.com) The Joel Test has largely stood the test of time, yet there isn’t a WordPress specific version to help WordPress developers judge job opportunities. The Jorbin Test is the Joel Test, updated for the WordPress engineers of today.
Facebook's Instant Articles WordPress Plugin Now Available (torquemag.io) WordPress.com VIP and Facebook this week announced the Facebook Instant Articles plugin for WordPress, a free, open-source solution designed to dramatically cut the page-load time of articles opened within Facebook. The plugin is entirely open source and is available for free on GitHub.
"No Frameworks" in WP Plugin Directory: Is It Justified? (torquemag.io) If you have been following WordPress news of late, you might be aware of the recent policy change introduced by the plugin review team last week: from now on, no frameworks will make it to the WordPress plugin repository. The already accepted and approved framework plugins shall continue to exist, but no new ones are going to find their way in there.
Meet “Create” – a Clean Multifunction WordPress Theme (wpliving.net) In this post, we review a premium multifunction WordPress theme by ThemeTrust called “Create.” It is billed as the company’s “most powerful and flexible theme yet” and it is built on the open source Page Builder plugin by SiteOrigin. So let’s put this theme to the test and see if it lives up to the claims.
WordPress SSL & HTTPS explained (www.cozmoslabs.com) This tutorial explains why adding WordPress SSL & HTTPS is the best way to secure your site and why all of us should do it eventually.
Also, we’ll go into an option for adding a free SSL certificate on your WordPress site.
When to Use the WordPress REST API – and When Not To (premium.wpmudev.org) The WordPress REST API will solve lots of problems and have more uses than we’ve even begun to explore just yet. But it’s no magic bullet and there will be times when you’re better off not using it at all. In this post, we're going to identify the circumstances and projects for which you might want to use the REST API, and those for which you won’t