WPMU Security - JS unfiltered in text widgets Thumbs up to the WPMU team, emailed Donncha about this yesterday and he fixed it in a coupla hours: http://mu.wordpress.org/forums/topic.php?id=7809 If you’re on WordPress MU 1.3.3, you probably want to follow the fix in the link above. Rails Gracefully Degrading Javascript link_to for post / non-get methods This works at least on Rails r8440. Just stick the code somewhere it gets loaded - I put it in vendor/plugins/graceful_link_to/init.rb # graceful_link_to # Jason Ling # http://jason.lah.cc # # This hacks link_to to produce an alternative button_to that shows for users without javascript # You need to include the prototype libraries and put at the bottom of your pages the following javascript # javascript_tag "$$('.js_hide').invoke('hide'); $$('.js_show').invoke('show');" ActionView::Helpers::UrlHelper.class_eval do def link_to_with_graceful(name, options = {}, html_options = {}) return link_to_without_graceful(name, options, html_options) if !html_options[:method] || html_options[:method] == :get %Q( InvalidAuthToken? Forgery protection is incompatible with cached forms Obviously, since caching forms = caching the auth token as well. Not only forms though, anything that results in a non-get request - AJAX links, delete/post/put links, etc etc. My entry music… Shall be the Deftone’s ‘Shove It’! Wish me luck that I won’t get beat up. NX and Alt-Tab OMG NoMachine NX is a fantastic piece of software. Let’s me remote desktop to my servers anytime anywhere and darn quick as well. But one thing that really got to me was the catching (or lack of) of the Alt-Tab keys etc. The client was catching alt-tab on my home computer, but not on my 2 work computers. It was one of those puzzles I was tearing my hair out trying to figure out. Googling got me no where. NX has no user forums. Just a scattering of information from loosely related mailing lists littered over the net. Their website / knowledge base / documentation was of little use as well. Guess they need to earn their support subscriptions. Then I stumbled across it. Ctrl-Alt-K. Wordpress.com Theme Repository Want to quickly populate your WPMU site with the themes from wordpress.com? Here: http://svn.automattic.com/wpcom-themes/ You might need to make some small changes to get it working on your site: I had to create an empty avatar_by_id function and put it in my wp-config.php file. You might also want to replace all reference to wordpress.com with references to your site. References: R R Comment on Theme Toolkit for Wordpress MU by Joen Hi, I’m developing a theme called Fauna at www.noscope.com/fauna. It is using the themetoolkit, in a version 1.13 in which Ozh made some extra fixes with regards to options menus. (I think he later forgot to release this on his own site, if you want me to send you this file let me know). Apparently it does not, however, contain the fixes you have made to this file, as I’ve been contacted by a Fauna MU user reporting your file solved the problem. I’ve tried diff’ing the two files, and many of the changes from 1.12 seem to be the same. As such, I’m having a hard time pinpointing exactly what makes YOUR file work with WP MU, and not mine. Can you be more specific as to exactly what changes you made to make this work? I’d appreciate any help you can give. Comment on Jason’s Customciser :: Customise your themes! by Don Lapre Jeffery Excuse me, I heard about this more and more …so plsss provide new informations in this category… Don Lapre Jeffery webmaster@nanoosenativeplants.org www.nanoosenativeplants.org Comment on Jason’s Customciser :: Customise your themes! by des I guess the plugin is no longer supported ? What a real shame :9 Its not compatible with 2.1 either .. Comment on Jason’s Customciser :: Customise your themes! by des HI. Great plugin but i have a few concerns about the possibilities to parse javascript. How secure is the plugin and does it strip out javascript from any input boxes ? Also do you plan on updating to add a color picker ? Comment on Kubrick’s (Wordpress’ default theme) footer alignment error by Josh Kaufman Wow thank you for this. I was starting to go insane with that 1px! Comment on Jason’s Customciser :: Customise your themes! by gerald Hi Jason, I am glad to come across your informative blog. By the way, I am the author of a Rocky book and I am currently lauching my website at www.therealrockychallenge.com. (please take a look) My objective is to get as many inspiring real life Rocky stories as possible from around the world and the only way to do that is by installing Wordpress MU. However I have no experience whatsoever in installing it, and with so many reported bugs i am afraid my project would be delayed. Can I request your help to set up a WPMU blogsite for me, so I can continue with real rocky campaign - to serve a noble deed in inspiring people from around the world. And i would like to invite you to post your inspiring story as well. Greatly appreciate your help. To the real rocky in all of us, Thank you. Gerald (my e-mail is gchuah@gmail.com) Comment on Widgets as an ‘mu-plugin’ on Wordpress MU by Tom Fisher Jason, I will be giving the widgets.txt a try, and will let you know how it goes. I noticed below the security code? How did you add it to the comments form? Thanks, Tom Comment on Jason’s Customciser :: Customise your themes! by ovidiu I just noticed, that if my theme loads a style.css and later on a plugin loads another style.ccs your plugin only parses the second style.css, meaning I am actually unable to change any style belonging to my theme, just those styles belonging to my plugins… any fix for this? Comment on Jason’s Customciser :: Customise your themes! by ovidiu hello, can you tell me which is the last line to be cut out? I installed HTML_CSS but I am not sure exactly what to cut out, maybe you can tell me which is the last line to cut out? thx Comment on Jason’s Customciser :: Customise your themes! by ovidiu hello, the php4 download link ist dead, can somebody put it up again please? Theme Toolkit for Wordpress MU Ozh’s Theme Toolkit allows theme authors to easily incorporate an admin menu in their themes to facilitate user customisation. It does not work too well out of the box with Wordpress MU, displaying some undesirable behaviour like the menus persisting to appear despite the user having chosen another theme. This version has been modified to work with Wordpress MU and has been tested on the r542 nightly. Simply replace the existing themetoolkit.php with the one in the archive in all your themes (or use symbolic links if you want). [Download] Kubrick’s (Wordpress’ default theme) footer alignment error Sometimes, the footer’s alignment is off by 1px. This is due to a CSS wordaround for non-standard IE compatibility as such: #footer { padding: 0 0 0 1px; margin: 0 auto; width: 760px; clear: both; } To fix it, just add below: #page > #footer { padding: 0; } This will be ignored by IE until they get their standards in order and hopefully by then there won’t be a need for the first workaround. So it’s pretty future proof. Jason’s Customciser :: Customise your themes! I wrote this plugin for my Wordpress MU site and am releasing it as GPL with the hope that some might find it useful. It allows your users to customise any theme on your site, changing images and colours in the CSS. It's still pretty raw but I do have plans to make it much prettier in the future. Downloads: [Download Original] [Download PHP4 Compatible Version] (ported by Donncha) Installation: Download and unzip package, copy Jason_Customciser.php into your plugins directory (/wp-inst/wp-content/plugins). Requirements: Plugins need to be enabled for your site. Screenshot: Notes: If you are able to install Pear's HTML_CSS 1.0.0RC2 package, you can look for the line that says //Everything below this line may be deleted if you are able to install PEAR's HTML_CSS and delete everything below it. Q&A Q: If someone customises a theme, will everyone else using the theme be affected? A: No. Each user’s customisation will affect only his/her own theme. In future versions, we might allow users to ‘share’ their customisations. Q: How does it work? A: Briefly: When the plugin is run, it scans through the currently used theme and parses the CSS. It identifies images and colours and stores them as options that the user can change. It then injects these changes back into the theme. Widgets as an ‘mu-plugin’ on Wordpress MU The widgets code has been released for public consumption as a Wordpress plugin and appears to work out of the box for Wordpress MU. However, this would still require a user to ‘activate’ the plugin before use as opposed to on wordpress.com where the plugin is enabled site-wide. This is relatively simple to achieve and involves the following steps: Copy the widgets directory and everything in it to /wp-inst/wp-content/mu-plugins/. Download widgets.txt, rename it to widgets.php, and copy it to /wp-inst/wp-content/mu-plugins/ (not in the widgets directory).