This is the type of question it would feel sad to flag, even though it's technically off-topic: wordpress.stackexchange.com/questions/230954/…

Christ, this freaking excerpt

I can't seem to frigging get wp_trim_words to work at all

Such a simple goddamned utility

lol I didn't realise stack bot would post that for me. Feel free to delete my message if you want... I don't think I can

:( the discussion of the scope comes over and over again.... just jetpack and WC by themselves have probably more features then WP core. And there is very little chance of anyone knowing all, actually most WP JS is a "here be dragons" area for most people . If anyone want to have WC and jetpack answer here the best thing to do is to speak with Matt so he will assign someone to monitor the tags.

Has there been any official words on a registration type of exploit in WP recently? For a week or so, we've seen tons of bot registrations. The bot fills in user fields that are not even accessible via the registration page. We can detect if they actually login to perform these changes and that never happens... So the registration must happen outside of the traditional registration page. Insanity.

That's a great review!

@ChristineCooper XML-RPC?

@ChristineCooper if they are just sending POST it doesn't matter if fields are in the page's markup

Right right, because the POST values will be processed regardless by the function that deals with the form.

Reading up on XML-RPC. The wiki page is pretty next level.

You can pretty much find any payed WP plugin on github via a filename:plugin.php type of search. Bizarre.

Anyone went to the WP Europe camp?

plenty of us did :) there is a photo of mods somewhere above

Oh yeah, that looks great. The lights behind you all make it look like you're posing on the star trek enterprise.

Did you meet any of the Codeable team there?

don't think so

I've never attended WP camps but I'm thinking about it if I were to make WordPress as a career choice.

@GhostToast - do you still hang around these parts? If so, you should consider creating a separate ticket for core.trac.wordpress.org/ticket/17115 - that said, there are some issues with your patch, what if my post type doesn't support title, content or excerpt?

@TimMalone The metapost is a good idea. I've seen some SE's make a game out of it too. They make a timeframe and users in the competition enter by answering the meta then edit their answer with a list of questions they've gotten checkmarks for during the timeframe.

@toscho Testing to disable XML-RPC for one day to check if there will be more bot registrations. Thanks!

@ChristineCooper Redirect 403 /xmlrpc.php

@toscho add_filter('xmlrpc_enabled', '__return_false');

meh, too slow

I'll do the .htaccess approach once we'll confirm that this will actually solve the issue :)

no need to load WP if you just don't want to use it

Just received another bot registration. How (the hell!) do they do it.

Trying to avoid installing heavy plugins like Wordfence etc. Maybe it's time to break into the trend.

When creating a custom widget, what defines the subtitle next to the widgets name? In this example, the grey text next to "My Widget". I assumed it was just the title value being present but that doesn't seem to be the case.

I would have assumed it would need to be present in __construct()

Oh, the field ID needs to be "title"

:) Nevermind guys

yes, idiotic code

one day I will look if it is possible to override it

@ChristineCooper, that filter doesn't do what you think that it does

IIRC

it only disables publishing, not the whole functionality

@Howdy_McGee Magic!

@MarkKaplun Returning false on that filter will stop registrations via xml_rpc, right? :0

I'm confident that the spam registration bot has find a way to create accounts outside of the traditional wp-login.php?action=register...

@toscho i.imgur.com/K0dpR.gif

@Howdy_McGee @Howdy_McGee That's a good idea. Think it would work here?

Well, we can give it a try and see how it goes. Probably would be best as like a once a year or twice a year thing so not to burn people out.

It would be cool if mods could make their own badges, then they could assign some kind of custom badge as a prize xD