Stick around till the end to discover a father who named his “kids” Stop and No.
In this edition:
- We’re mixing things up a bit. Please show us some love.
- This new security tool will have you RAVEing. *Cue “Sandstorm” by Darude*
If you’re using the Jobify theme – there’s a serious bug to be aware of.
Just In: What’s Happening?
We’ve Been Keeping an Eye on You…
This marks the 10th edition of DEV, and if you’re still here reading our whimsical banter, we must be doing something right. Thank you for sticking with us!
However, we can’t win over everyone. We’ve noticed that while you’ve been thoroughly enjoying the news stories, you’ve been zooming past the educational content nestled in the middle to reach the tantalizing “Coffee Break” section at the conclusion.
This insight comes from our click-through statistics, of course. No need to fret, we haven’t been shadowing you from behind your computer. (Or maybe we have? 
)
So, it seems you prefer to savor a collection of quick laughs, news snippets, and links, right? Who can fault you for that? We understand!
Even though my therapist advised me to stop bending over backwards to satisfy others, we’ll be switching things up with DEV in hopes that you’ll enjoy it more.
This edition’s Deep Dive compiles links to assorted helpful how-to articles scattered throughout the web. We’d love to hear your thoughts on this format and if it entertains you more.
And if you have any other insights regarding DEV, please share them in the comments!
Ready for the RAVE? Grab Your Glowsticks!
John Blackbourn, the mastermind behind the Query Monitor plugin, has developed a clever new tool called RAVE.
RAVE stands for “Reproduce and Verify” and this automated tool does just that. It enables you to regenerate WordPress builds, ensuring that both official and unofficial packages remain intact.
RAVE analyzes the contents of the released packages against the canonical source code, swiftly pinpointing any discrepancies.
Why validate the official package? There are various scenarios where the official WordPress package could be compromised, such as an assault on the build server, on wordpress.org, or by anyone else gaining unauthorized access.
RAVE will instantly identify if the official package diverges from the actual source code in the source control repositories – no need for flashy bracelets or JNCO jeans.
Using the Jobify Theme? Beware! 
If you’re presently utilizing the Jobify theme, your site faces a significant security threat.
Patchstack recently alerted Jobify theme users about a vulnerability that allows unauthenticated arbitrary file reading.
This flaw permits hackers to rummage through your server and access confidential files, without needing to log in at all. Any malicious individual could download a file from your site utilizing the download_image_via_ai function. If your WordPress site operates on cloud services like AWS or Azure, it could expose secret keys, potentially leading to complete server compromise. Eeeek. 
The vulnerability remains unpatched in version 4.2.3. If you’re using Jobify, you should remove or disable the theme until a fix is implemented.
Patchstack has issued a virtual patch to minimize the risk by blocking attacks until an official resolution is released.
While you’re at it, let this serve as a reminder to consistently keep backups of your sites and stay updated with vulnerability alerts. Hackers never rest, folks.
Mind-Boggling Facts & Figures
- WordCamp Granada 2024, taking place October 26-27, was the first industry-specific WordCamp ever, focusing entirely on tourism and the travel sector. (Source)
- Based on Jamie Marsland’s official polls on the WordPress YouTube channel, 49% of participants utilize Gutenberg for building their websites, with a mere 1% opting for Divi. (Source)
- Karol Krol surveyed bloggers (not developers) about their feelings on the Block Editor, and an astonishing 40% are not fans. (Source)
- Marcus Burnette from Bluehost conducted polling among his audience regarding their top considerations when selecting a hosting company, revealing that 44.9% prioritized “support,” while only 4.1% selected “price.” (Source)
- Weglot raised €70k this year through charity donations via their annual Black Friday campaign. Well done! (Source)
Deep Dive Special Edition: Your Favourite Deep Dive’s Favourite Deep Dives
There’s a wealth of great expert insights from incredibly talented developers and WordPress enthusiasts available out there.
In this special installment of the Deep Dive, we aimed to showcase some extraordinarily useful guides and how-tos you’ll want to bookmark.
Want to become the best in block development?
Deryck Oñate has created a comprehensive tutorial on constructing multiple Gutenberg blocks and utilizing the Interactivity API.
Curious about creating a “code sandbox” to make live edits in the browser and observe changes in real-time within a separate iframe?
Grab your plastic shovels and sandcastle molds, as Chris Ferdinandi is here to guide you through it.
Interested in eliminating project management apps and consolidating ALL your workflows within Slack?
Check out this deep dive into how the team at We Are AG completely embraced this approach.
Want to secure your WooCommerce store better than Fort Knox?
The team at Patchstack has assembled this comprehensive checklist for reinforcing your site’s security.
Looking to make this meta Deep Dive even more meta?
Discover the challenging skill of mastering difficult skills with Julia Evan’s timeless guide, How to Teach Yourself Hard Things.
Must-See Blogs & Resources
Forget partridges and turtle doves! KrautPress has a plugin-a-day advent calendar instead.
Tom McFarlin notes that AI hasn’t entirely obliterated developer content – but it has transformed it.
Real IP addresses being logged in your WordPress comments? Yikes. That’s a privacy disaster. Consider this plugin instead.
Search Engine Journal ranked 20 website-building platforms based on accessibility, and WordPress did NOT claim the top spot.
We’re really enjoying this episode of the WP Tavern Jukebox, where Stephen Dumba discusses how WordPress is transforming the lives of children and educators in Uganda.
The WordPress Sustainability Team is seeking contributors to assist with projects such as drafting sustainability guidelines, eco-optimizing events, and creating a plugin to assess how “green” your site is (spoiler: probably not green enough).
Coffee Break Delights
Developer Daniel Mangum has crafted a website within Bluesky. Wild, right?
TV writers recently found out, to their dismay, that 139,000 of their scripts were used to train AI.
Speaking of AI: Be cautious with chatbots offering mushroom foraging advice – it might be dangerous.
If you remember Homestar Runner, it’s likely time to pop an Advil for your back pain.
And finally, meet the Dad of Stop and No. (Watch for the hoop skirt…)
Recent Comments