The Theme Builder Wars — Announcing the winners

We learnt a lot about Divi and Dynamik Website Builder last night, thanks to Quentin Delsante and @henscu. And both Elegant Themes (makers of Divi) and Cobalt Apps (makers of Dynamik) were generous and offered some prizes!

Here are the winners!

  • One Divi Developer license – Molnár Tamás and Nezih Bilgin
  • One Dynamik Website Builder license – @ahmad1alagha

Congrats! I’ll be emailing you all with more details later today!

#meetup, #divi, #cobalt

News in the WordPress world, November 2015

News in the WordPress world, November 2015

WordPress 4.4 Release Candidate

Test, test, test! WordPress 4.4 should be released next week, on December 8, and you should be ready. Check this post to find out the new things that will ship with this new release.

WordPress now powers 25% of the web

Matt talked about it on his blog: WordPress now powers 25% of the web. It’s an important milestone. Let’s see what we can do to get to 100%! 😊

A more RESTful WP-CLI

Do you use WP-CLI? Daniel Bachhuber will work on making it fully compatible with the upcoming Core REST API. His Kickstarter campaign was a huge success and helped him get the funds he needed to concentrate on that project in the months to come.

A new CMS in Town, Envato Sites

Envato is one of the biggest businesses related to WordPress (they’re the company behind ThemeForest, CodeCanyon, and others). They announced that they’re working on a brand new site builder, named Envato Sites.

While they’ll continue to release tons of WordPress themes and plugins on ThemeForest and CodeCanyon, that’s definitely something to keep in mind. I can imagine that ThemeForest authors will start spending some time developing themes for that new CMS. If you work with Envato prodcuts, keep an eye on that.

Read the announcement here.

WordCamp US, WordCamp EU

WordCamp US starts on Friday. Even if you don’t travel there, you can purchase a Live Stream ticket if you’re interested in some of the talks. Matt’s State of the Word is always interesting, for example.

WordCamp EU will be in Vienna this year. It’s only a few hours by train or car, so definitely worth the trip. You can already book your tickets here.

A new desktop app, a new admin interface for, and it’s all open source

Automattic, the company behind and Jetpack, open sourced the code they use to run the new amdin interface on

  • It’s built with React and Node.js (more details about the implementation here and there).
  • It interacts with’s WordPress installation via the REST API.
  • The interface is fast, and a big change from wp-admin.
  • You can use that new interface if you own a site, or a self-hosted site where you’ve installed the Jetpack plugin (the plugin is used to communicate with the REST API).
  • The code is open source and available here.
  • A desktop app is available for Mac users, Linux and Windows versions are being tested.

While this is limited to site owners and Jetpack users for now, it’s a good example of what can be done when building a client on top of WordPress, using a REST API.

  • WordPress Core will soon include its own API, and we’ll probably see more clients popping up.
  • Once that API is mature, will be able to adapt its code to use the core REST API instead of the REST API.

Give the app a try, it’s a refreshing experience. It’s still limited in some cases, like when you’ve built things inside wp-admin using custom fields (not supported yet or custom post types (not supported yet).

Want to read more about it?

#news, #WordPress, #meetup

Want to know more about…

Want to know more about theme builders? You should come to our next meetup, on December 2nd!

The Theme Builder Wars — Discover 2 WordPress theme builders

Wednesday, Dec 2, 2015, 7:00 PM

Tuborg csapolo
1065 Budapest, Nagymező utca 40. Budapest, HU

4 WordPressers Attending

This time, our topic will be theme builders. We’ll cover 2 popular theme builders, Divi and Dynamik Website Builder. We’ll discover how they work, their advantages, and we can then discuss about other options you can use to build the perfect theme for your site!/**   * Location   */Tuborg Csapolo 1065 Budapest, Nagymező utca 40., BudapestA q…

Check out this Meetup →

This time, our topic will be theme builders. We’ll cover 2 popular theme builders, Divi and Dynamik Website Builder. We’ll discover how they work, their advantages, and we can then discuss about other options you can use to build the perfect theme for your site!

#meetup, #themes,

Keep your site safe – WordPress Security

Keep your site safe – WordPress Security

During our last meetup, I talked about some basic WordPress Security principles. You can read all about it here:


#meetup, #talks, #security

News in the WordPress world, October 2015

News in the WordPress world, October 2015

WordPress 4.4.

WordPress 4.4 Beta 2 is available for testing. The new version of WordPress will include 3 new important features:

Plugin translations

If you’ve had to deal with plugin translations in the past, you know it used to be a cumbersome process: people who translated your plugin had to send you .po and .mo files, and you would commit those files into your plugin’s languages folder in the next release. Things are much easier now, thanks to All translations happen on You can contribute to translations for just about any plugin, and as soon as your translations get approved, they’ll be shipped to everyone using the plugin.

Even the readme can be translated, so we’re slowly moving towards a fully localized plugin repository!

Let’s Encrypt

Not a WordPress news, but something that will affect everyone with a website. Let’s Encrypt is a new free SSL certificate authority, and is now trusted by all major browsers. Soon they’ll stat issuing free SSL certificates to everyone who’d need one. They contribute to a safer internet for everyone.

More XML-RPC news

XML-RPC is a feature allowing you to interact with a WordPress site. It’s used by the mobile apps, by plugins like Jetpack, by services like IFTTT, and by many other apps and services.

Since it can be used to publish posts remotely, it’s one of the points of entry hackers like to target. They’ll try to authenticate to your site via XML-RPC, and access your site through there.

Unfortunately, it can be abused, and the Sucuri security firm discovered that hackers had discovered a new way to abuse that feature. They now use a method named system.multicallto execute multiple methods inside a single request. That means they can test several username / password combinations to get into your site in one single request. That’s consequently not enough to just block folks who do multiple requests to your site’s XML-RPC in a short period of time, you now have to look at what people do in these requests. We’ll cover how to protect yourself against those attacks in my talk, a bit later.

#meetup, #news

WordPress Budapest Meetup — Happy Halloween!

It’s been a while since our last meetup! This time, we’d like to try something different. We haven’t decided about a topic yet and we’d like you to decide what you want to hear about!

Please fill in this survey, and tell us what you’re interested in. We’ll then find speakers and update this post and the Meetup page accordingly.

Thank you!


News in the WordPress world, April/May 2015

Update all the sites!

There were quite a few releases in the past few weeks:

  • 4.1.2, 4.2, 4.2.1, 4.2.2
  • Popular plugins, Security plugins (iThemes Security), Core, … Everyone has had their share of security issues in the past few weeks.
  • Luckily, WordPress’ Automatic Updater took care of most of these updates for you. You can learn more about the updater and how to configure it here.
  • The last security issue concerned Genericons, an icon font that’s bundled into several themes including Twenty Fifteen, and in popular plugins like Jetpack. You can read more about the vulnerability here.
  • Update fatigue is dangerous. Don’t give up, update, and thank the Core Security team who’s there to save us by reacting quickly and shipping new releases to fix all these issues. Now Requires Theme Authors to Use the Customizer to Build Theme Options

From now on, all themes submitted to the theme repository will have to use the Customizer for their theme options:


If you are not familiar with the customizer, and if you’d like to add options to your theme, I would suggest checking out the Customizer API docs on

WordPress 4.3 will be all about enabling users of touch and small-screen devices.

WordPress 4.2 was shipped a couple of weeks ago, and the core developers are already planning 4.3. You can find out more about the focus of the next major WordPress release here:


I would also suggest subscribing to make/flow if you’d like to help with testing and share your opinions.

WordPress’s Rest API is still in the works, version 2.0 was released a few weeks ago

  • The developers in charge of the API are looking for testers. If you’re interested, and if you want that feature to make it into core sooner rather than later, watch the GitHub repo and submit bug reports!

#meetup, #news