Today is: Thursday, 2nd September 2010
Log in
Technology, Web Development and Saltwater Fly Fishing, not in that order.
WordPress on Windows…Why Would You?
Over the past two months I’ve had a look at two different sites running on WordPress that were running on Windows Servers. In both cases, the sites were having issues, and in both cases, they could not get simple functionality they wanted to work on the servers and ended up moving to Linux hosting.
Does WordPress run on Windows? Yes, most definitely. I can attest that I’ve run serveral installations going back to the old 1.x days. The problem is this: even though you can get a core installation of WP running, there are alot of plugins that simply will not work on a Windows server.
The big thing that comes to mind is this: why even bother messing with a Windows Server? The WordPress package is built to run on Linux, and even if you don’t want to setup your own server, you can certainly get a competently hosted account in the $3.99 a month range. There we know the plugins we want will run.
My feeling is this: yes, it runs on Windows, but I have yet to see a situation where I didn’t have some strange problem that took time to diagnose which was related the use of that platform. If you like chasing phantoms around a server, then maybe this is a project for you. I personally have better things to do.
So in the future, my general rule is this: no Windows servers for WordPress. If you want my help, it’s going to move to Linux first.
Updated to WordPress 3.0
Nothing major, just did a quick backup then hit the upgrade button. While things may have changed significantly in the backend code, there really isn’t much to show you here.
- WordPress MU (the multiblog variant of WordPress that is used on WordPress.com) is now built into the maintstream code. Thus endeth the tyranny of MU, a code branch I personally despised.
- Custom menus make it really easy to create a special nav menu. I’ve already used this, and it’s a nice feature.
- They finally let you pick your own username and password for the admin user during installation. Seems like a little thing, but it’s been a system issue since day one with legions of users forgetting to either change the admin user password or to write it down.
- Custom Post Types and Custom Taxonomies – I haven’t used either, but I suspect that I will soon. Both of these are hardcore CMS functions.
- Scads of new hooks and functions for plugin and theme developers.
WordPress 2.8.6 Released and a 2.9 Preview
I got the notice last night that WordPress 2.8.6 was released to fix a pair of security holes. So I hopped right into the admin console from my Iphone and in 2 minutes, it was updated. If you have a WordPress installation, I urge you to update right away as well.
This will almost certainly be the last release prior to the much anticipated release of 2.9 which is our next major (feature related) release. Aaron Brazell had a great preview on his site yesterday, and since I’m not currently running the beta, I’ll leave the full on feature review to him. Here are the major bits to expect:
- Enhanced image handling – scaling, cropping, and thumbnail sizing on a per picture basis.
- Trash Can – this really goes back to the old notion we saw in newspaper editorial systems, delete doesn’t really delete, it just hides. This will come in handy.
- The_post_image – if you’ve ever tried to add an image to an excerpt of a post you will know why this is important.
- oEmbed – video support, which I’ve had for years using Vipers Video Tag Plugin.
- Custom Post Type – this is one of those CMS type functions. It’ll make my life easier, although honestly in the past I’ve been able to make categories do my bidding with little trouble in WordPress CMS settings.
- Comment Meta – I have no idea what to think about this one.
- Metadata API – Another feature I’m sure I’ll use, but currently I can’t think of anything I’d use it for. I guess this is like custom fields for everything, not just limited to posts.
- Theme System Modification – this will allow developers to work on one theme, while real users look at another. This has been needed for some time.
- Rel=Canonical Optimization – seems like a little thing, but it will help a lot with SEO.
Check out the preview at Technosailor.com for the full scoop.
Tags: Automattic, Wordpress
WordPress 2.8.5 Released
A new WordPress release came out last night. Unlike the previous, this is what they are calling “a hardening release”, i.e. it is generally designed to make the code base more secure, but doesn’t fix any known vulnerabilities. As with all minor level releases, I suggest you update as soon as possible, if for no other reason than to stay current.
- A fix for the Trackback Denial-of-Service attack that is currently being seen.
- Removal of areas within the code where php code in variables was evaluated.
- Switched the file upload functionality to be whitelisted for all users including Admins.
- Retiring of the two importers of Tag data from old plugins.
We can expect to see 2.9, the next major level release within around the end of the month, certainly before mid-November. That release will supposedly center on enhancements to image handling features.
(For those casual readers, I should probably explain that I develop sites daily with WordPress, and have for many years…hence I think my opinion on matters WordPress should have some level of importance to you…)
Tags: Automattic, Wordpress, Wordpress 2.8.5
WordPress 2.8.4 – Update Now
The folks at Automattic released a security update for WordPress today due to a very specific bug:
…a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner.
While this isn’t an incredibly nasty bug, it does affect the admin user, which many folks use as their only point of access to the system, which is poor practice. On my customer sites, the admin user is never actually used by anyone (except for me, and only in an emergency). Everyone gets a user specific account and that account has the right privelidges for that user.
Click the upgrade button now, or have your web guy/gal/poodle take care of it for you.
Tags: Automattic, Wordpress, wordpress 2.8.4
A Grand Diaspora – The “Conversation” Disappears in the Ether
One of the things that is most missed in the Social Media rush to “join the conversation” is that in many cases, by offering a plethora of places to get our content, we’ve turned the tables. Our readers who used to find us now expect us to find them. Even though I write on my blog, I’ll often get the comments for that post on my Facebook page, or via FriendFeed or Twitter, or on some other blog somewhere that quoted from my post. So instead of my comments coming to me, right alongside my post, I need to schlep out into the great wide web and find them.
Think about where your content appears. It may start on your blog, then it shows up on a myriad of social media platforms in which you participate, each with their own means of commenting or discussion and even, in some cases, yet another email function. Let’s face it, in many cases, those commenting functions are ratholes. You may not even see them for days or weeks, at which point, why would you even bother responding?
Look at the previous post here. I had a great comment that came in via my Facebook account, but I had to do a cut and paste to pull it into my blog. How 1998 that functionality is.
How about:
- If social apps offered a “redirect comments to original publishing platform” option?
- What if we had a function like a ping back that used xml-rpc to import a comment when it was made on your Facebook, or on another blog.
- How about if readers thought to try to comment on the original article, instead of the summary?
I love comments, I love forum discussions. The problem I have is that when you start to spread them out acrross many separate and distinct platforms, their value decreases. The “conversation” is affectively split and disjointed, and we end up with a grand, yet failed, experiment.
30 Aug 10 |
Over the past two years, we’ve seen the genie come out of the bag on blogging. In the good old days if you wanted our content, you came to our blog. Now, our content is being automatically posted in a bunch of spots, perhaps on Facebook, Google Buzz, Google Reader, and even the headline shows up on Twitter.
The permalink – nothing could be more core to the concept of blogging, and indeed, content management. In it’s early inception, it was the one link to rule all others. The problem is that with the advent of microblogging systems like Twitter, the permalink has been devalued and now faces possible extinction.
Yesterday the Federal Trade Commission issued it’s first change the policy on endorsements in over 30 years. From this point forward, if you accept any form of payment for a post, you need to disclose it. PCWorld.com sums it up:









