@Rarst Should Laps be working with 4.8?

I don't see why not, is there an issue?

Running into a notice which is caused by WP_Hook::current_priority() returning false. Seems like the array pointer is beyond the end ....somehow....

are you running Laps 1.4.1 at least? WP 4.7 broke hooks

1.4.2, just updated

might be some new WP silliness or just an edge case

I mean, hook without priority is kind of nonsense

Okay, I'll look into it. Just wanted to check with you before digging in

According to docs of WP_Hook::current_priority() false means "the hook isn't running"

well, tick() only fires inside hooks...

which is why this is so weird...

Is it just me or has the activity on this site dwindled lately?

define activity

like questions/answers

I just remember like 2 years ago I would refresh the home page and there was constantly new questions. Now there's like ONE new question when I refresh.

according to stats posts (questions/answers) fluctuate, roughly same. traffic way up over last year.

hmm interesting.

Only mods have access to that?

no longer a mod, available in mod tools to top users. traffic data is public in quantcast though quantcast.com/wordpress.stackexchange.com#trafficCard

and obviously q/a can be just counted with api or whatever :) mod tools pretty much just give specific slice from internal data

Gutenberg ticket on meta boxes

they suggest all "legacy" meta boxes are stuffed somewhere in the corner and "new" meta boxes should all be written in JS and fit into Gutenberg’s sidebar

can you imagine riots in the streets if this ships?..

@MichaelEcklund Wherever i step, people just run away as if they've seen a ghost. I joined WPSE and now there is one new question per hour.

@Rarst Hi! I had a simple question if you have a moment... Does WordPress send the credentials in plain text on the login form?

yeah, I think so, it's just a regular POST. think there was some plugin scrambling that, but really just use SSL.

Well i'm using this in a theme i'm developing. I don't decide for SSL, just wanted to know if it's ok to just send the pass in plain text

pretty much not :)

but WordPress itself does :(

well, then use its login form and blame WordPress if anything.

Tried to salt and send the hash, but couldn't find any function to validate the hash on the server

the only function i found was wp_signon

never ever invent security stuff. use security stuff which people competent for it made.

do you mean that sending a hash is less secure than plain pass?

I meant what I said, I don’t need to have an opinion on that because I am not a security professional. I just make things worse trying to think about it.

I didn't even know it's sending as plain. no wonder blogs get compromised to easy.

blogs get compromised by shit code and hosts. no one bothers to listen to random network traffic hoping to catch random WP password.