Web Developer Security Checklist

Web Developer Security Checklist is a good collection of security issues to keep in mind when building web applications.  Not much new in there, but it’s nice to have all of these conveniently gathered in one place.  All items are grouped into a few sections – database, development, authentication, denial of services protection, web traffic, APIs, validation, cloud configuration, infrastructure, operation, etc.

PHP Smart Analyzer

PHP Smart Analyzer (or PHPSA for short) is yet another item in a growing list of tools for PHP code static analysis.  It’s in an early alpha state, but looking at the list of goals, it’s quite promising.

If that’s up your valley, have a look also at PHPQA and PHPStan, which I wrote about earlier.

Choosing a future JavaScript framework for WordPress

WordPress in general, and Matt Mullenweg in particular have been pushing for JavaScript for a while now.

So, it’s not surprising that WordPress developers are chatting about the JavaScript framework that they’ll use for the WordPress core JavaScript needs.

The discussion is far from finalized right now, so it’s particularly interesting to see how it develops, both in IRC/Slack chatrooms and in Make WordPress p2 comments.

So far, there are two primary contenders – React and Vue.  I have zero experience with either one (or pretty much with any JavaScript frameworks, trying to avoid JavaScript as much as I can), but I’m still interested in the reasoning that goes behind the choice, especially so, from the people who know so much in this domains.