@kraftner@mastodon.social
@kraftner@mastodon.social avatar

kraftner

@kraftner@mastodon.social

👨‍💻 Senior one-man show trying to make the web nicer.
👪 Retired https://vienna.wordcamp.org #WCVIE orga
♂️ He/Him
🚀 #WordPress#WebDev#OpenSource#Simplicity#Privacy

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Edent, (edited ) to wordpress
@Edent@mastodon.social avatar

I do generally like - but it appears to have started filling my blog with stuff.

Just loads of unnecessary translation cruft in JavaScript. This isn't something I enabled. There's no obvious way to turn it off.

I'm trying not be be all "old man shouts at clouds" - but isn't even attempting to be a lightweight and publisher friendly tool right now.

[Edit: It is some other Automattic plugin. Not JetPack.]

kraftner,
@kraftner@mastodon.social avatar

@Edent @jackmcconnell Do you have an example URL where that is the case?

kraftner,
@kraftner@mastodon.social avatar

@Edent @jackmcconnell Okay found one: https://shkspr.mobi/blog/2024/04/theatre-review-instructions-for-a-teenage-armageddon/
It seems that you're loading plenty of stuff that shouldn't be there in the frontend, e.g. React.
Have you tried turning of the caching plugin?
Looking at the source it seems that litespeed is bundling stuff together that isn't needed in the frontend and in the course triggers loading the translations and other stuff.

kraftner,
@kraftner@mastodon.social avatar

@Edent @jackmcconnell It might still be some kind of conflict between WordPress Core, a plugin and a caching solution.
Can you tell me which plugin you disabled that made it go away?

kraftner,
@kraftner@mastodon.social avatar

@Edent @matze You're both kind of right but just keep talking past each other.
If a script uses translatable strings and this script is loaded WP automatically loads translations for that.
Yes this has to be client asset because it happens in JS and not in the backend-generated HTML.
Yes it also shouldn't be here because it has nothing to do with the actual site content.
But it is not the fault of WP core but a plugin. Either the one the script is from, a caching plugin or a combination of those

kraftner,
@kraftner@mastodon.social avatar

@Edent @jackmcconnell I see. Looks like you already found the corresponding issue: https://github.com/Automattic/wordpress-activitypub/issues/705
So it is a bug in a plugin.
Just as constructive feedback: The easiest way to badly trigger WP people is to lump WP Core, bad/buggy plugins and Automattic together. 😉

kraftner,
@kraftner@mastodon.social avatar

@Edent Ouch. No it does not.
WordPress.org is a FOSS project. Automattic is one of the biggest contributors and maintains a lot (many say too much) control over the open source project.
But they still are distinct things and not making this distinction devalues all the contributions of non-Automattic contributors to WP Core.
You're of course still free to continue ignoring that difference, but I promise you when you're trying to debug a WP issue you'll lose a lot of good will from the get-go! 😉

alda, to wordpress
@alda@topspicy.social avatar

Here is the structure of a How-To article:

[An introduction with a bunch of crap written by Chat-GPT]

[An initial example using the built-in plugin/theme editor, demonstrating the author's disregard to best practices and urging others to be unprofessional]

[A screenshot of some scary-looking PHP code]

[A section claiming how difficult and technically involved the previous step was, suggesting there's an alternative]

[A plug for the author's plugin that does the thing you want]

kraftner,
@kraftner@mastodon.social avatar

@alda ...and if you look at the promoted plugins code it is a more bloated and even worse version of the scary-looking PHP code from the article. 💥

Edent, to random
@Edent@mastodon.social avatar

Have a strong password is great.

Until a website says "Please enter the 3rd, 9th, and 17th character from your password."

And then you go blind trying to find them in
gD@YGXa6k*^EB&I5@b$0

kraftner,
@kraftner@mastodon.social avatar

@Edent I would be much more worried about the fact that they are obviously storing the password in plaintext... 😬

erikKroes, to random
@erikKroes@mastodon.social avatar

deleted_by_author

  • Loading...
  • kraftner,
    @kraftner@mastodon.social avatar

    @erikKroes I assume you are aware of it since it stopped, but just in case you aren't: Some process seems to have gone wrong here, I see countless such messages from you.

    kraftner,
    @kraftner@mastodon.social avatar

    @erikKroes No worries, bugs happen, just wanted to let you know in case you weren't aware.

    fabiantodt, to wordpress
    @fabiantodt@fosstodon.org avatar

    🥳 Just updated my Good Slider plugin and added a blueprint.json for it - so it's easy to preview directly from the plugin repository. Testing the blueprint is a bit cumbersome as of now, but for plugins like this, I really think it's an awesome feature. 👍
    https://wordpress.org/plugins/good-slider/

    kraftner,
    @kraftner@mastodon.social avatar

    @fabiantodt @davidbisset So basically one could create a demo that isn't actually the plugin from which you launched the demo? This sounds like it is only a matter of time until people start abusing that... 😬

    kraftner,
    @kraftner@mastodon.social avatar

    @fabiantodt @davidbisset My primary thought about this is that people could try to demo the premium version to get people hooked on the features. As if the mess with upselling crippled free versions isn't already bad enough. But yeah, probably needs to be countered on a policy level. 😏

    Edent, (edited ) to random
    @Edent@mastodon.social avatar

    I need to store the hash of a file.

    For various boring reasons, I only have 128 bits of space. This cannot be changed.

    Is it better to use MD5, or truncate the output of SHA-256 / 512 ?

    Please argue in the replies.

    kraftner,
    @kraftner@mastodon.social avatar

    @Edent I am not a cryptographer so I am in no position to give any feedback.
    What I know though is that you might want to add the reason for hashing to the question since that probably is relevant. Guarding against accidental corruption and duplicate files or malicious hash collision attacks?

    alda, to wordpress
    @alda@topspicy.social avatar

    Things that are built into WordPress but receive little-to-no use:

    1. Hello.php and an upsell of Akismet
    2. Blog posts
    3. Comments
    4. Dependency on an external service for profile pictures

    Things that aren't built into WordPress but should be:

    1. Multiple authors per post
    2. A form builder for wp-admin
    3. An ORM that prevents n+1 queries
    4. Modularity via composer packages
    5. Bucket storage support

    kraftner,
    @kraftner@mastodon.social avatar

    @chris @alda @pch I remember vaguely that there was an attempt of modularity for core a very long time ago. Was it somehow related to BuddyPress? Or multsite pre core-merge? Anyone remembers that? All I remember is that it went nowhere like any other major fork or attempt at serious overhaul of core ever since. 😀

    kraftner,
    @kraftner@mastodon.social avatar

    @chris @alda @pch I think the original argument in that particular case was that it only brings benefits for devs and potentially confusing new issues for users (dependency hell etc.). And at some point in the past (I got basically this answer when I asked for plugin dependencies at the Q&A of the first WCEU in 2013) this might even been true. But the disadvantages of not adopting modern PHP practices will (some say have already) grow so big some day that this becomes the lesser evil.

    pfefferle, to wordpress
    @pfefferle@mastodon.social avatar

    is there a best practice to set plugin default settings or do (db) migrations on plugin install and update?

    kraftner,
    @kraftner@mastodon.social avatar

    @pfefferle Whatever you do: Do not (only) rely on hooks that only trigger when using the standard, internal updating mechanism like https://developer.wordpress.org/reference/hooks/upgrader_process_complete/
    There are way too many sites out there that update differently (manual, FTP, composer etc.)
    Generally I'd say have an autoloaded option that stores the current version you compare with the current version. On mismatch start migration.
    Also be careful to handle downgrades or other broken states and not solely rely on version info in the option

    kraftner,
    @kraftner@mastodon.social avatar

    @pfefferle Well it basically is a single "if" comparing a string with an autoloaded option. I'd say the performance impact will be almost impossible to see even in a benchmark. If you've reached that level of performance optimization I really envy your codebase! 😉

    aardrian, to random
    @aardrian@toot.cafe avatar

    Apple maybe backing down on its PWA blocks:
    https://developer.apple.com/support/dma-and-apps-in-the-eu/#ntfqa
    https://9to5mac.com/2024/03/01/apple-home-screen-web-apps-ios-17-eu/
    https://open-web-advocacy.org/blog/apple-backs-off-killing-web-apps/

    I say “maybe” because Apple clearly wants to twist the intent of the EU ruling as much as possible and it simply needs to come up with another awful but less obvious approach.

    kraftner,
    @kraftner@mastodon.social avatar

    @aardrian It looks like they are playing "You can have PWAs but only if we can keep our browser monopoly for them". To me all of this sounds like the classic game of "Propose something insane so we can sell what we actually want as a compromise".

    kraftner, to wordpress
    @kraftner@mastodon.social avatar

    A question to fellow pros:

    Where does one find really advanced high quality content for people working with WP? 🤔

    Professional and advanced in the real sense, not in the "10x Ninja Premium WP"- nonsense way. Somewhere that exclusively caters to people with 10+ years of experience and/or working on enterprise-level-quality stuff. Not about everyday stuff and just "using" WP but actual exceptional thoughts and solutions that bend WP instead of adapting to it.

    RT for reach appreciated

    kraftner,
    @kraftner@mastodon.social avatar

    @chris Which WordCamps were that? All of what I've seen there was beginners to medium advanced except for maybe less than a handful of talks when they let people like @alain or @gmazzap on the stage.

    kraftner,
    @kraftner@mastodon.social avatar

    @chris Okay, that makes sense and has been my main approach too. That also is the only thing I know of. But that really doesn't scale if you don't have a company in your back that flies you around the world twice per month 😬 😂

    kraftner,
    @kraftner@mastodon.social avatar

    @alda I agree and much so. But still. There are people remaining. There are new people. There are people building awesome things. There are people with a deep understanding of WP core. But you only see them as a slight shimmer coming out of the cracks. And yes probably anything but that I am not just missing but it isn't out there publicly. But it is Friday, I am in a good weekend-mood and I felt like giving it a try anyway. 😄

    kraftner,
    @kraftner@mastodon.social avatar

    @pixolin @chris Yes indeed. I was in some of those. But those dried out too. At least for me. But now that I think about it maybe I am here just complaining that I somehow dropped out of that "secret" circles. 😂

    kraftner,
    @kraftner@mastodon.social avatar

    @alda The good thing about the constant change in block-land is that the PHP side of things hardly ever moves any more reducing the risk of wrecking your fingers gripping into the inner workings with crazy stuff. 😀

    Edent, to android
    @Edent@mastodon.social avatar

    Does anyone know of a modern phone which allows call recording without root?

    I'm currently on an aging 5T running and can record calls just fine - a button in the dialler lets me record straight from the line. I don't need to put it on speaker and record via the microphone.

    (Looking for 1st hand experience, not search results. No need to reply to discuss the legality of call recording. I need root-less for online banking etc.)

    kraftner,
    @kraftner@mastodon.social avatar

    @Edent May sound stupid, but have you tried rotating the phone?

    kraftner,
    @kraftner@mastodon.social avatar

    @Edent I don't have a screen here to test with my phone, but I've seen that behaviour when sharing a screen via WiFi. But yeah, probably a stupid proposal anyway since you've obviously tried that...I just remember me not realising that for longer than I am proud of with WiFi and rotation lock on... 😂

  • All
  • Subscribed
  • Moderated
  • Favorites
  • provamag3
  • thenastyranch
  • Backrooms
  • ngwrru68w68
  • magazineikmin
  • Youngstown
  • slotface
  • everett
  • Durango
  • ethstaker
  • khanakhh
  • kavyap
  • tacticalgear
  • rosin
  • tester
  • DreamBathrooms
  • mdbf
  • osvaldo12
  • InstantRegret
  • modclub
  • normalnudes
  • cubers
  • hgfsjryuu7
  • GTA5RPClips
  • cisconetworking
  • anitta
  • Leos
  • JUstTest
  • All magazines