Attaching Uploads to Custom Post Types

I’m working on a plugin that implements a custom post type, and it doesn’t need the editor, but I do want to upload files. I setup the everything like you normally would, but I noticed that the files weren’t being attached to the post when they were uploaded. I couldn’t find anything online, so I dug through […]

Progressive Enhancement with Backbone.js

I’m mostly focusing on back-end development these days, so I’m a bit behind the curve on a lot of the recent front-end practices, but I’ve been playing around with Backbone.js a bit, and one of the things that’s been nagging me is the hard dependency on JavaScript for the core functionality of the site. Looking around for some […]

Is TDD Dead?

Is TDD Dead? is an insightful debate about the merits of test-driven development, and the pitfalls of following it dogmatically.

My favorite quote, from part 5: “Most people cannot just leave good ideas the fuck alone.”

Walled Gardens

Jeff Atwood makes a compelling argument that the ideology and values behind private social networks (e.g., Facebook) conflict with the core values of the Internet, and that they’re doomed to fail.

Preventing Clickjacking on WordPress Sites

WordPress already sends the X-FRAME-OPTIONS header for wp-login.php and the Admin Panels in order to prevent clickjacking, but it doesn’t send it on the front end because that could interfere with remote services that legitimately frame parts of a site. That’s only relevant for a small number of pages, though, so I’ve added a snippet to my functionality plugin skeleton […]

WordPress.tv Developer Presentation Roundup

I’m one of the mentors for WordPress’ SupportPress project in this year’s Google Summer of Code, and I wanted to put together a list of WordPress.tv videos to help introduce Varun to the WordPress community and some development best practices. I figured it’d be good to save it for future reference, so I’m also posting […]

PayPal Security Sucks; or, Why Two Factor Authentication is Worthless Without Strong Account Recovery Policies

Even though two-factor authentication isn’t the silver bullet many make it out to be, I’m still a big fan of it and think that it should be offered by any web service that wants to be taken seriously. It’s completely pointless, though, if the service doesn’t also have strong account recovery policies, or if their customer support […]

Ian Dunn

WordPress Developer

Attaching Uploads to Custom Post Types

Progressive Enhancement with Backbone.js

Is TDD Dead?

Walled Gardens

Preventing Clickjacking on WordPress Sites

WordPress.tv Developer Presentation Roundup

PayPal Security Sucks; or, Why Two Factor Authentication is Worthless Without Strong Account Recovery Policies