Embed Size (px)
DESCRIPTION
My August 2010 talk at the DC PHP meetup, hosted by Fathom Creative.
Citation preview
WordPress 3.0
Andrew NacinWordPress Core Developer
twitter @nacin web andrewnacin.comemail [email protected]
Make sure WP_CACHE is true. Props nacin.
PHP 5.22011 Q2
WordPress 3.2
In nine weeks,WordPress 3.0
was downloaded12,654,147 times
http://wordpress.org/download/counter/
WordPress powers8.5 percent of the web
Acquia
WordPress is a CMS
Custompost types
Customtaxonomies
Theme development
The mergeof WPMU
Why WordPress is a CMS3.0
Custompost types
Customtaxonomies
Theme development
The mergeof WPMU
Why WordPress is a CMS
blogsite
a post type isa content type
What can post types be used for?
Everything.
Core post types
PostsPages
AttachmentsRevisions
Menu Items
They are your content and storage.
• Blog• Articles• News Releases• Portfolio• Products• Newsletter• Events• Tweets
• Employees• My Reading List• Documentation• Forums• Menu Items• Uploads• Logging• Revisions
Why?
Some use cases are obvious.• Articles, Newsletters, Portfolio, Events
Some are not.• Logging, Menu items
Leverage what WordPress does best
Performance• No direct queries• Utilize caching• Extremely light• Scalability
Ease• Full API• Full admin UI• Use existing
features• Why reinvent the
wheel?
Leverage existing features
What can posts have?• Title, content, excerpt• Author• Categories, tags• Revisions• Comments, Pingbacks• Thumbnails• Attachments• Custom fields (meta)
What can you leverage?• Templating• URL Rewriting• WP_Query• Capabilities• Admin UI, meta boxes• Feeds
Let’s put it togetheradd_action( 'init', 'my_employees_init' );function my_employees_init() {
register_post_type( 'my_employee', array( 'labels' => array(
'name' => 'Employees','singular_name' => 'Employee' ),
'public' => true, 'show_ui' => true, 'rewrite' => array( 'slug' => 'team' ), 'query_var' => 'team', 'hierarchical' => false, 'supports' => array(
'title', 'thumbnail', 'editor', 'excerpt' ),) );
}
What’s it look like?
Editing me
Let’s create a quick templatequery_posts( array('post_type' => 'my_employee') );if ( have_posts() ) :
while ( have_posts() ) : the_post();
echo '<h2><a href="' . get_permalink() . '">' .
get_the_title() . '</a></h2>';the_post_thumbnail();the_content();echo '<p>Read posts by ';the_author_posts_link();echo '</p>';
endwhile; endif;
Done.
/team//team/andrew-nacin//blog/author/andrew-nacin/
(excuse my CSS)
Custom taxonomiesdescribe your content.
Core taxonomies
Post TagsCategories
Link CategoriesMenus
They describe your content.
The difference between tags and categories is hierarchy.
• Topics• People• Cities
• Cities– Content: Travel blog
• Cuisine– Content: Restaurants
• Songs– Content: Concerts
• Actors, Directors, Producers– Content: Movies
Custom taxonomies are not new
• Database schema — WP 2.3, Sept. 2007• Custom taxonomies — WP 2.5, March 2008• Partial UI — WP 2.8, June 2009
• In WP 3.0 — full custom UI implementation
So basically, they’re now on steroids.
Specialties taxonomy
register_taxonomy( 'my_specialties', 'nacin_employee', array('labels' => array(
'name' => 'Specialties', 'singular_name' => 'Specialty' ),
'public' => true,'show_ui' => true,'query_var' => false,'rewrite' => false,'hierarchical' => false,
) );
Edit screen
'hierarchical' => 'false'
'hierarchical' => 'true'
WordPress 3.0 makestheme development and
customizations easier.
• Admin UI screenshot
How?
In our theme functions.php:
function my_theme_setup() {add_custom_background();
}add_action( 'after_setup_theme', 'my_theme_setup' );
1234
function my_theme_setup() {add_custom_background();define( 'NO_HEADER_TEXT', true );define( 'HEADER_IMAGE_WIDTH', 940 );define( 'HEADER_IMAGE_HEIGHT', 198 );define( 'HEADER_IMAGE', '%s/images/default.jpg' );add_custom_header( 'my_theme_header_style', 'my_theme_admin_header_style' );register_default_header( array(
'default' => array('url' => '%s/images/default.jpg','thumbnail_url' => '%s/images/default-
thumb.jpg', 'description' => 'Default Header' ),) );
}add_action( 'after_setup_theme', 'my_theme_setup' );
234567
8910111213
Custom Header, cont.
function my_theme_admin_header_style() {echo '#headimg { height: ' . HEADER_IMAGE_HEIGHT . 'px; width: ' . HEADER_IMAGE_WIDTH . 'px; }';
}function my_theme_header_style() {echo '#header { background-image: url(' . header_image() . '); }';
}
12
345
6
Menus
• Screenshot of menu admin
In our theme functions.php:
function my_theme_setup() {add_custom_background();add_custom_header( 'my_theme_header_style', 'my_theme_admin_header_style' );// ...register_nav_menu('header', 'Primary Navigation');
}add_action( 'after_setup_theme', 'my_theme_setup' );
In our theme header.php:
wp_nav_menu( array( 'theme_location' => 'header' ) );
1234
567
Menus
• Screenshot of menus in Twenty Ten
Evolving Theme Development
get_template_part()It’s basically include() on steroids.
Example:get_template_part('loop', 'archive');
Process:• Check for loop-archive.php. Check the
child theme first, if applicable.• Otherwise, check for loop.php.
Less Redundancy FTW.
get_template_part('header', 'home');
Is like calling:
get_header( 'home' );
Same deal: header-home.php,then header.php.
What’s with the theme improvements?
In 3.0, we weretheme developers.
Kubrick!
Twenty Ten
Power one site or 10 million.
WordPress Multisite
• The WPMU fork was merged• Massive merge sprint, followed by cleanup• Terminology/concept nightmare• TODO: Network admin UI improvements• TODO: Easier to manage, use, and install (in
that order
Oh no, please don’t.
define( 'WP_ALLOW_MULTISITE', true );
Only if you insist.
A new Network Admin
• New MU screen
Other cool features
• Pick a username/password during install• comment_form() and wp_login_form()
• Stronger authentication security by default• Bulk update plugins and themes• “Search Engines Blocked”• Rewritten initialization code
Follow along
• #wordpress-dev on freenode.net• http://wpdevel.wordpress.com• http://core.trac.wordpress.org• wp-svn – mailing list for commits• wp-hackers – plugin and core developers• wp-testers
What might be next
• Column sorting and a more AJAX feel• More features for custom post types and custom
taxonomies• Support for custom comment types• Better support for custom post statuses• Media/upload overhaul• Incremental admin, DRY, UX changes• Incremental improvements to multisite• Links as a post type• Roles/capabilities overhaul
Our philosophies.
codex.wordpress.org/Release_Philosophy
Decisions, not options.
Preferences have a cost.
• Too many means you can't find any of them.
• They damage QA and testing.
• They make good UI difficult.
• They confuse users.
Do something specific and do it well.
Defaults that work will lead the UI in the right direction.
The quality of an interface design is
inversely proportional to the number of designers.
If you're too lazy to do the homework and think through the big-picture rationale, I'm too lazy to
add the feature.
In the presence of good rationale, maintainers
should be willing to change their mind often.
Let’s talk security.
Qualys BlindElephant
BlindElephant is a web application fingerprinter.
Drupal, Joomla!, Liferay, Mediawiki, Moodle, MovableType, osCommerce, phpBB, phpMyAdmin, phpNuke, SPIP, WordPress
Versions < 1.0.15 and < 1.5.17 are critically insecure. Version 1.5.17 was released 3 months ago.
Percentage of installs running a critically insecure version?
JOOMLA 1.5.20
96 percent
Versions < 5.22 and < 6.16 are critically insecure. Version 6.16 was released in March. Versions 6.18 and 5.23 were critical security fixes released last week.
Percentage of installs running a critically insecure version?
DRUPAL 6.19
69 percent (and up)
Versions < 2.5.1 are critically insecure. (Released in April 2008.)
Versions < 2.8.3 are insecure. (August 2009.) Percentage of installs running a critically insecure version?
WORDPRESS 3.0.1
4 percent
Shared hosts suck.
pre-release candidates for 3.0 were downloaded
75,000 times
QUALITY ASSURANCE
