There is one valuable thing that WordPress blocks left behind, however: code commenting. They’re common when building custom PHP templates and writing CSS. We use them to provide context for what a code snippet does or why it was implemented.

There are times when that extra context is useful in the Block Editor. For example, you might want to share information about a block with clients or colleagues. Perhaps it’s locked or requires a specific setting to display correctly. Sometimes we need to remind ourselves why we did something.

That’s where the WordPress Notes feature comes in handy. Use it to add notes to specific blocks and even keep a threaded conversation. It’s another way to improve your editorial workflow and provide a quick reference for users.

Here’s a look at how the feature works. We’ll show you how to add and retrieve notes to any block on your site. In addition, we’ll share a few tips and hidden gems worth knowing about.

Sample Project: Let’s Collaborate With Blocks

The WordPress Notes feature is part of the larger Gutenberg Collaboration phase. At the very least, it’s a way to add reminders or have an asynchronous discussion with other site users. That second part is what we’ll focus on here.

We’ll simulate a discussion of colleagues regarding a Group block. We promise it will be quick and easy!

Step 1: Choose a Block

The first step is to open a page or post in the Block Editor and select a block. We’ll choose a Group block at the top of the page. We want to discuss its styling with a colleague.

Step 2: Add a Note

Now that we know which block we want to discuss, it’s time to add a note.

1. Click on the Options menu (⋮) and select Add note.
2. A note dialog appears on the right side of the screen. We can add our note in this space.
3. Click the Add note button to save the note.

For reference, we asked if our Group block should have a background color to stand out from the rest of the content.

Next, we’ll wait for our colleague to reply to our note. When they click the block in question, they’ll see a user avatar that indicates a note is available.

Step 3: Our Colleague Replies

Here’s a handy feature: WordPress will send you an email when someone replies to your note (it’s based on the existing comment system). As such, we don’t have to keep checking our page for the latest news.

Our colleague replied to our note and acted on our design suggestion. When we visit the page, we notice that their avatar has also been added to the block’s note notification.

Step 4: Reply and Resolve

We love what our colleague did to dress up the Group block on the page. The last steps are to reply and mark the note as resolved.

To resolve the note, we’ll click the checkmark on the upper right of the dialog. Keep in mind that the note will stay in place unless we manually delete it from the block.

An Easy Way To Collaborate in WordPress

The WordPress Notes feature is a great way to relay information to others or remind yourself of something important. And it will continue to be enhanced as more collaborative features are added to the content management system (CMS).

Even better, you don’t need a plugin to get started – it’s already built into WordPress. That being the case, there are ways to customize the experience. We recommend checking out this guide to tapping into that potential.

Whether you’re part of a team or working solo, give WordPress Notes a try. You may wonder how you lived without it!

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post Quick Tip: How To Use WordPress Block Notes appeared first on The NOKIA Blog.

Sure, building a custom plugin has always been an option. That’s fine for scenarios that require a code snippet. However, complex tasks were reserved for highly-skilled developers. This meant that most of us had to settle for whatever was available on the market.

AI has swooped in to change that calculus. Advanced models like Claude Code enable even novice developers to build powerful, multi-layered projects. These days, it’s more about knowing what to ask for than understanding every line of code. We now have a tool that does the heavy lifting for us.

This technological shift gives new life to an old question: Should you use an existing plugin or build one yourself? AI certainly expands the potential scope of what’s possible, thus calling into question the need for third-party tools.

But don’t go on a vibe-coding rampage just yet! There are some important considerations when making this decision. Let’s talk about them.

Which Approach Best Fits Your Needs?

There are tens of thousands of WordPress plugins on the market. Some utility-based options are very niche, but most plugins are built to serve a broad range of use cases. Product makers must account for the many ways people use WordPress.

The downside of that approach is that a plugin might be more than what you need, or fall short in some areas. The old “too much or not enough” conundrum has long been a part of the plugin experience.

Building a plugin with AI, on the other hand, lets you narrow the focus. You can include only the features and functionality your project needs.

For example, let’s say you need a feature that only applies to one WooCommerce product. There is probably a third-party extension to fit this purpose. But a single-purpose plugin could do the same thing without the overhead or the cost of a yearly renewal. AI makes the process quick and easy.

On the other hand, needs evolve during a project’s lifecycle. Perhaps your client will need similar functionality on more products down the line. A vibe-coded solution may not be quite as flexible in that case. You may need to refactor the plugin to meet new requirements.

As such, it’s important to consider your current and future needs. If scope creep is a concern, a third-party plugin may be a better choice.

Do You Want the Maintenance Responsibilities?

An existing WordPress plugin may not solve your every need. However, it takes you off the hook regarding future maintenance. It’s the plugin author’s responsibility to fix bugs and build new features.

Naturally, that’s a double-edged sword. Some product makers are more responsive to issues than others. In addition, more than a few plugins have been abandoned over the years. And sometimes a product goes in a direction you don’t support. You don’t want to be left to pick up the pieces or placate clients when there’s a problem.

It’s all about control and responsibility. If your project (or personality) requires absolute control, then building it yourself makes sense. That way, you know what’s going on every step of the way. You don’t have to wait for someone else to take action.

Still, we should note that vibe coding plugins result in a higher level of responsibility. It means checking for security holes, compatibility testing, and acting as your own technical support staff. The practice puts everything back into your capable hands.

Kudos to you if this fits with your philosophy! To be safe, we also suggest thinking about how these responsibilities scale. Maintaining a single plugin for a client is one thing. The upkeep of dozens of plugins spread over dozens of websites is another. Make sure you have processes in place to keep things running smoothly.

Can You Build It Better?

The final consideration on our list is simple. The idea is that just because you can build something with AI, it doesn’t mean you should do so. Sometimes, there are established products that do the job well enough. Why reinvent the wheel?

The scope and depth of a plugin play a role here. Consider a popular plugin like Jetpack. It does a lot of things and has been around for a long time. Sure, you could vibe code your own suite of similar functions. However, ask yourself if you want to take on a project of that magnitude, or if it’s even worth the effort. The same could be said for Yoast SEO, Gravity Forms, and other flagship products.

That being said, you could reasonably use AI to recreate specific aspects of a plugin. For example, building a social sharing plugin that includes a few of the missing features you want. Smaller and more focused projects are better in most cases. And there’s also an opportunity to build your own extensions of an existing plugin.

There are also scenarios when your needs are very specific, and there aren’t any great options available. It’s here where vibe coding really begins to shine. You can take your idea to your favorite AI model and build it from scratch. It’s empowering for those working with clients!

The bottom line is to use AI when it’s beneficial. You might be able to build the next WooCommerce, but what’s the payoff? Instead, look for opportunities that help you level up.

There Are Endless Plugin Options and Opportunities

The WordPress plugin ecosystem has an answer for many project requirements. It’s one reason why the content management system (CMS) has remained so popular. Adding more capabilities has always been a few clicks away.

The introduction of AI into the development process has expanded those possibilities even further. If an existing plugin doesn’t do everything you need, it’s easier than ever to build your own solution. In many cases, AI works quickly and is cost-effective. It helps us provide clients with more personalized functionality.

All of this makes deciding to go custom more compelling. AI lowers the bar for building complex features. Sometimes that means fewer advantages for existing products.

Still, vibe coding isn’t always the best option. It comes with a higher level of responsibility and adds to your long-term maintenance list. Plus, there are questions about code safety and stability. AI doesn’t necessarily reduce those risks.

The good news is that you have a world of choices. We hope the considerations above help you make the right one!

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post A New Choice: Use an Existing Plugin or Vibe Code Your Own? appeared first on The NOKIA Blog.

Adopting this technology has significantly changed our role. It’s no longer about poring over each line of code. Now, we’re closer to a symphony conductor, orchestrating projects as a large language model (LLM) does the dirty work.

We can certainly appreciate the increase in productivity. Fewer moments spent knee-deep in documentation or support forums means more time to get things done.

This also makes it tempting to remove humans from the picture. Some agencies and development shops have cut staffing in favor of AI. It makes sense on a few levels. An AI tool is cheaper than an employee or freelancer. And the gains in efficiency mean one person can do the work of many.

But there’s a fine line between increasing output and relying too heavily on AI. Here’s why humans should still be a part of the process.

Knowledgeable Humans Are Essential for Quality Assurance

There’s something to be said for a well-trained eye. A seasoned developer can envision how an app should work. Their experience helps them effectively structure projects and avoid common pitfalls. They understand the importance of performance and security.

On the other hand, AI models are great at generating code, but they don’t think like a human. They may use techniques that aren’t as efficient for a particular purpose. They can also misinterpret what we’re asking them to do. Like their human counterparts, AI tools aren’t perfect.

Even the most advanced coding tools can make mistakes. It could be as simple as a syntax error. However, they may also produce work that doesn’t account for edge cases or future maintenance.

That’s why a human should carefully review all AI output. Generated code should be tested with a mix of manual observation and automated tools. It’s no different than a senior-level developer keeping a watchful eye on what their team is producing.

Remember, automation isn’t an excuse to lower your standards. If anything, it provides an opportunity to squash bugs and refine functionality. Building with AI works best when done in tandem with a knowledgeable person.

Developers Can Shift Their Focus to the Bigger Picture

Solo developers and teams alike have traditionally struggled with the little things. Tight deadlines and shoestring budgets make it hard to get the details right. So often, it’s a race to the finish line, rather than a quest to create the best possible result.

The details are often what make a WordPress plugin or theme great. This happens when we go beyond software that merely works and focus on things like the user experience. AI gives us a chance to take a larger view of our projects.

We no longer have to write code by hand. That may bring a tear to your eye (or make you leap for joy). The bright side is that you now have time to create a comprehensive plan for each project. You can define how it looks, how it works, and how it will adapt to future needs. Even if you were doing these things before, you’ll have a chance to think bigger and better.

All of a sudden, deadlines are a little less important. You’re free to explore options and test them. Most of all, you can afford to make a mistake or two along the way. Rewriting a code snippet isn’t a disaster that puts you behind. Rather, it was just a failed experiment you encountered along the way.

The additional room for creativity could be a difference-maker. We can go from “we’ll get to it later” to “let’s get it right from the start” – that’s powerful for developers of all stripes.

People and AI Are Better Together

Every WordPress developer should be exploring AI and how it can benefit their workflow. We’re well beyond the point where it’s just a curiosity. The future of our industry depends on how we use and adapt to this technology.

The sad truth is that AI will continue to cause some businesses to reduce their staff. It seems like an unavoidable consequence.

We must be careful, though. To borrow from WordPress terminology, this doesn’t mean we should cut people out of the loop. Humans are still integral to building great software. As such, we shouldn’t cede everything to the machines quite yet.

Things like quality control and holistic thinking are too important – and it’s what we do best. We should use AI as a vehicle to put those traits into action. Doing so will put us on a path to greater efficiency and better outcomes.

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post Why Humans Should Still Be a Part of WordPress Development appeared first on The NOKIA Blog.

WordPress is the ideal testing ground for AI tools. You can work with code, generate content, or discover new ways to manage your website. It could do wonders for your workflow.

However, you probably don’t want to experiment in a production environment. There’s always a chance that something will go wrong and affect users. It’s not a risk worth taking!

Thankfully, there’s a new option worth getting excited about. The recently released my.WordPress.net installs a copy of the content management system (CMS) directly in your browser. It’s completely private, but can connect with various AI providers. It’s the perfect place to get a feel for what you can do with AI inside WordPress.

Let’s take a quick tour of my.WordPress.net. We’ll install it (super easy), connect it to AI, and start experimenting.

Sample Project: Integrate AI Into a Local WordPress Install

Today’s project is dead simple. First, we’ll install WordPress in our browser. Then, we’ll add our ChatGPT API key to integrate with the AI model. Finally, we’ll run a few test prompts to explore AI-based site management. Oh, and we’re sure to have a few adventures along the way.

Here we go!

Step 1: Install WordPress in Your Browser

We don’t want to spoil any surprises, but you might be amazed at how easy it is to install WordPress in your web browser.

1. Visit my.WordPress.net.
2. Enter a name for your website when prompted.

That’s all there is to it! You could optionally import content from another WordPress site. But we’re starting from scratch.

Once installed, you’ll see a welcome screen.

Step 2: Install the AI Assistant App

Those familiar with WordPress might be confused by the use of the term “apps”. After all, the CMS is famous for its plugin ecosystem. Not to worry. This offshoot decided that “apps” was a more user-friendly word for beginners. Consider plugins and apps as interchangeable.

Regardless, our next task is to install the AI Assistant app. Once again, it will be quick and easy.

1. Click on the Apps menu (an icon with four squares) on the upper right of the screen.
2. Find “AI Assistant” on the list and click on it.

The AI Assistant will automatically be installed on your local site. You’ll be returned to the welcome screen after it’s finished.

Step 3: Connect With an AI Model

We have everything we need to connect WordPress with an AI model. Now, it’s time to choose a provider.

At the time of this writing, AI Assistant works with Anthropic (Claude), OpenAI (ChatGPT), or a local AI model via Ollama. More providers may be added in the future.

1. Click on the command menu at the top of the screen (the long bar with a “/” inside) and select Dashboard.
2. Navigate to Settings > AI Assistant inside the dashboard.
3. Choose an AI provider and enter your API key.
4. Choose a model from your AI provider (we used gpt-4o-2024-08-06).
5. Save the revised settings.

In our case, we grabbed a ChatGPT API key and entered it into the settings. For reference, this method requires purchasing API credits from OpenAI. This is separate from your regular ChatGPT account.

The AI Assistant app also provides some information on what various WordPress user roles can access. You can also choose to add an AI Assistant button on the front-end of your site, which is displayed to logged-in users.

Step 4: Experiment!

The only thing left to do is have some fun with AI inside WordPress. You’ll find the AI Assistant throughout the dashboard and, optionally, the front-end of your website.

1. Click the AI Assistant button at the top right of the dashboard.
2. Enter a prompt in the chat window and start working with AI.

Here are a few sample prompts to get you started:

Create the following new pages on my website: About Us, Services, Contact Us

What time zone is my website using?

Activate the Hello Dolly plugin.

ChatGPT handled each of these requests without hassle. However, it did install a second copy of the Hello Dolly plugin. We’ll chalk it up to an early bug.

Note that you may be asked to approve certain actions, like creating pages or installing plugins. It’s a safety measure and is worth reviewing before allowing AI to make changes.

An Easy Way To Try AI Inside WordPress

Perhaps our experiments weren’t earth-shattering, but that’s not the point. The idea is that AI can tell you a lot about your website and perform routine tasks. And my.WordPress.net provides a safe space to learn and play.

Even better, the process for installing WordPress and integrating an AI model couldn’t be easier. You can be up and running within a few minutes. Just note the potential cost of using Anthropic or OpenAI for this purpose. Be sure to check your spending limits so you don’t lose a small fortune.

All told, it’s a great way to discover how AI can help your workflow inside of WordPress. So, take some time and find what works for you!

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post Using my.WordPress.net to Experiment With AI appeared first on The NOKIA Blog.

There are also opportunities to build professional relationships. We hire each other for coding tasks, marketing, support, or even business consulting. It’s a way to expand our capabilities and boost revenue, not to mention the new products and services that were launched as a result of these relationships.

Like everything else in our industry, artificial intelligence (AI) is poised to impact these professional bonds. We’re experimenting with this technology, looking for ways to make us leaner and more productive. Perhaps we’re in the early stages. But it’s reasonable to assume that there will be a human cost to adopting AI.

Let’s look at the potential benefits and drawbacks of going all-in on AI and its impact on our relationships.

Greater Productivity and Expanded Capabilities

If there’s one thing we’ve discovered about AI, it’s the relative ease with which it writes code. It can spin up a new WordPress plugin (or a framework for one) within a few minutes. It can also troubleshoot a code snippet in the blink of an eye.

These tasks used to take hours, days, or weeks to complete. AI has saved me from countless searches of support forums and blog posts. In some cases, I might have broadcast my pain points on social media, hoping for a kind soul to offer advice.

These days, AI generally points me in the right direction. There are several positive aspects to this arrangement.

For one, I feel more self-sufficient when working with code. Perhaps that’s ironic, as the machine is writing the code for me. Still, there’s something to be said about not placing my burden on anyone else.

AI also improves my productivity and expands my capabilities. Those client requests that used to drive me crazy aren’t as stressful these days. It’s not always easy, but I’m still producing solutions faster than ever.

What’s the downside? An individual working this way might not have a big impact. The problem arises when we use AI for all the things at scale.

Web Developers Working in Silos

The cumulative effect of “doing it ourselves” with AI is less collaboration. For example, why would I send a task to a fellow freelancer if I can perform it with AI? I’m saving time and money.

Agencies that rely on contractors will do the same thing. They’ll have less incentive to outsource all or some of a project because AI is cheaper and easier. Never mind that it potentially adds more to an employee’s plate.

This will result in fewer gigs for some of us. There will be an economic impact, as we’ll lose some of the recurring revenue we depend on. It will also require a shift to building our own things, rather than building for others.

The other potential side effect is becoming more insulated from the community around us. We might find ourselves interacting more with bots than people (it’s already the case for me). We could be less likely to share what we’re doing or explore what others have done.

If we’re not careful, it might also lead to less in-person interaction. AI won’t make conferences and WordCamps irrelevant. However, some may feel less desire to learn from other humans. Again, why travel and sit through a session when AI will do whatever I want?

Sharing knowledge is such a big part of what web professionals do. Once we’re past the experimentation phase of AI, we might have fewer tips to share – not to mention fewer people willing to listen.

Let’s Keep the Human Element in Web Design

For all the amazing things AI can do, it shouldn’t replace what makes the web design industry so unique. We are a community of thinkers and doers. We’re at our best when working together.

Just think, the open-source movement wouldn’t be where it is today without collaboration. People built the foundation of this work. Technologies like AI can contribute, but only humans can be the thinking and breathing stewards of such projects.

I hope we don’t lose sight of what we’ve accomplished. In the rush to use AI for this and that, we shouldn’t leave our traditions behind. If anything, we should use technology to create more time for human interaction.

Less time working, more time getting together. That sounds like a better future to me!

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post How AI Could Change Collaboration for Web Designers & Developers appeared first on The NOKIA Blog.

Artificial intelligence (AI) is a tool for getting things done. The WordPress community is already using it to write and troubleshoot code. Meanwhile, the WordPress project is in the midst of making AI integrations easier for all.

That’s all great and exciting stuff. However, we may be missing the boat regarding other use cases. AI has the potential to do more than perform menial tasks. We can also pick its virtual brain to learn more about WordPress and related technologies.

Human knowledge still matters, and AI is only as effective as the person interacting with it. So, why not learn as much as we can? This new technology could be a goldmine of information, with the results improving our project outcomes and helping us develop better processes.

So, what can AI teach us about WordPress? Let’s find out!

Explain What a Function or Code Snippet Does

Code snippets aren’t always easy to understand, particularly when you’re unfamiliar with them. For example, you may inherit a website that includes a custom plugin or theme template. Likewise, you might not recall the purpose of something you wrote years ago.

In addition, WordPress includes hundreds of hooks, filters, and functions. Some have better documentation than others (and even that can be difficult to comprehend).

AI can help you identify what a code snippet does in short order. Paste it into your favorite Large Language Model (LLM), and you’ll receive a detailed overview of what’s happening. You can even ask follow-up questions to narrow down a specific line.

Here’s a simple example, using a snippet commonly found in theme templates and plugins. We’ll ask ChatGPT to provide some details.

"What does the following code snippet do?"

if ( ! defined( 'ABSPATH' ) ) {
  exit;
}

ChatGPT responded with a breakdown of the code’s functionality and operation.

This snippet is a standard security guard used in WordPress PHP files, especially in plugins and themes.

What it does
It prevents the PHP file from being accessed directly via the browser.

How it works
1. ABSPATH

• ABSPATH is a constant defined by WordPress in wp-config.php during the normal WordPress bootstrap process.
• It contains the absolute filesystem path to the WordPress installation.

2. defined( ‘ABSPATH’ ) check

• The code checks whether WordPress has already been loaded.
• If WordPress is running normally, ABSPATH will exist.

3. Direct access scenario
If someone tries to access the file directly in a browser, e.g.:
https://example.com/wp-content/plugins/my-plugin/my-file.php

WordPress has not been loaded, so:
defined(‘ABSPATH’) === false

4. exit;
Because the constant isn’t defined, the script immediately stops executing.

Why this matters
Without this check:
-Someone could directly run the PHP file.
-Internal functions might run outside the WordPress environment.
-It could expose sensitive data, database queries, or admin functionality.

ChatGPT’s response was even more robust than what’s included above. It also gave specifics on where our snippet is typically found and advice on security best practices.

This is all valuable information. We now know the purpose of our snippet and have a step-by-step guide to explain what it does.

Discover Different Approaches for Building a Feature

Our first attempt to build a feature isn’t always the best one. After all, the goal is to find the best answer, not the quickest.

That’s why code typically undergoes several rounds of revisions. It seems like there is always something we didn’t account for in the initial try. For instance, there could be a missing detail or a feature that includes unnecessary bloat. Both humans and AI models make these mistakes.

As such, it’s worth weighing your options. There may be an approach that’s easier to maintain or extend later. This also comes in handy when a client inevitably changes their mind.

We can use this line of thinking when instructing AI to generate code. Let’s consider building a related posts plugin.

You might start with a prompt like this:

"Build me a related posts plugin for WordPress."

The above may get the job done. However, AI may not offer you multiple approaches by default. Let’s add some nuance to the prompt:

"I want to build a related posts plugin for WordPress. Give me at least two approaches for achieving this, along with the pros and cons for each one."

AI’s answer may even lead you to think of other potential features or issues. It’s another example of how AI should work for you, not the other way around.

Research Improvements and Optimizations

Our code may work, but is it the best it can be? Is it secure and performant? Will it be compatible with the next version of WordPress? All are important considerations.

There’s something to be said for having a second set of eyes (or the virtual equivalent) review your work. That applies to proofing a new project or refactoring legacy code. You won’t have to look far to find room for improvement.

Why not ask AI for a few suggestions? Paste a code snippet or upload a file, then instruct the app to improve performance, efficiency, and security.

You may also want to share relevant documentation, such as the WordPress theme and plugin handbooks. That will ensure AI compares your code against best practices.

Let’s put that theory to the test by asking AI to review an old-school WordPress post query.

"Review this code snippet and tell me how to improve it. Could it be more secure or efficient?"

  <?php
  global $post;
  $args = array( 'numberposts' => 1, 'offset'=> 0,  'category' => 4 );
  $myposts = get_posts( $args );
  foreach( $myposts as $post ) :    setup_postdata($post); ?>
  <p><a target="_blank" href="<?php the_permalink();  ?>"><?php the_title(); ?></a></p>
  <?php endforeach; ?>

  <?php wp_reset_query(); ?>

Once again, ChatGPT gave us a detailed overview of what our code does and steps to improve it.

Yes — you can make this cleaner, safer, and a bit more correct (especially around globals and reset functions).

What your snippet currently does

• Fetches 1 post from category ID 4
• Loops it, outputs a link with title
• Calls setup_postdata() so template tags like the_title() / the_permalink() work
• Resets something at the end

Issues / improvements

1. Don’t rely on global $post in the loop variable

Right now you’re doing:
global $post;
foreach ( $myposts as $post ) :

That overwrites the global $post reference inside the loop (and can confuse readers). Use a different variable name (e.g. $featured_post) and then pass it to setup_postdata().

2. Use wp_reset_postdata() (not wp_reset_query())

• get_posts() does not modify the main query ($wp_query)
• wp_reset_query() resets the main query and is meant for query_posts() usage (which you should avoid)
• After setup_postdata(), the right cleanup is wp_reset_postdata()

3. Escape output (security/hardening)

• the_title() and the_permalink() generally output safe data, but in custom code it’s best practice to use the “get_” versions and escape yourself:
• esc_url( get_permalink( … ) )
• esc_html( get_the_title( … ) )

This is the main “more secure” improvement.

4. Prefer newer/clearer query args

numberposts works, but posts_per_page is the more standard arg.

Also consider:

• ‘no_found_rows’ => true (micro-optimization; avoids pagination counts)
• ‘ignore_sticky_posts’ => true (avoid sticky surprises)
• ‘post_status’ => ‘publish’ (explicit)

5. If you only need one post, you don’t need a foreach

You can grab the first result and output it, reducing code and risk.

In addition, AI provided two revised snippets that include the above suggestions. It’s an easy way to modernize an old code snippet.

Using AI as a Learning Opportunity

AI apps are easy to use when working with code – almost too easy. It’s tempting to copy the results and ignore the app’s explanation of what it just did. However, there’s value in slowing down and reading those details.

In some ways, using AI can be akin to having a seasoned developer by your side. You can learn a lot by paying attention.

That’s particularly true for well-documented software like WordPress. The content management system (CMS) is full of niche functions and settings. Not to mention a whole ecosystem of themes and plugins.

You can use AI as a guide for understanding how everything works. It’s a way to dig deeper and experiment with building from scratch and reworking your existing code.

The bottom line is that, if you want to learn more about WordPress, AI offers a simple way to do it. Even better, it (probably) won’t get mad if you keep asking questions!

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post What AI Can Teach Web Developers About WordPress appeared first on The NOKIA Blog.

It’s more than just business as usual, though. WordPress also boasts a global community of users and contributors. As such, agencies don’t have to operate in a vacuum. There’s an opportunity to connect with people and pay it forward.

Community engagement is a win-win situation. First, you’re helping others learn and use WordPress more effectively. There’s a great sense of satisfaction that comes with getting involved.

There are also benefits to your business. It puts your name out there and helps you build relationships. That could result in booking more clients. At the very least, you’ll create goodwill and establish a strong reputation.

Giving back is also easier than you think. Here are a few ways to say thanks to the WordPress community!

Join or Host a Local Meetup

If you want to impact the WordPress community at a grassroots level, Meetups are a great place to start. They’re local get-togethers that welcome people of all skill levels, including beginners.

These events open up a world of possibilities. You might have meetings dedicated to a specific subject, guest presentations, or group projects. It’s also an opportunity for attendees to help each other with site issues or plugin suggestions.

Agencies are uniquely positioned to help. Your team of experts can give talks and connect with your local community. That makes you a trusted resource – one that prospective clients will remember when it’s time for a new website or other project.

Finding a place to hold regularly scheduled meetings is challenging in some communities. So, hosting a meetup at your office or another space is a huge help.

Plus, not every city has a meetup. In that case, you might consider establishing one. It brings people together and builds enthusiasm for the WordPress project.

Being part of the meetup space requires a commitment. However, connecting with others one-on-one is worth the effort.

Set Aside Time To Contribute to WordPress

The WordPress project includes several teams tasked with building and maintaining the software. There are also teams dedicated to providing technical support, writing documentation, language translation, and reviewing themes/plugins.

Joining one or more teams is an opportunity to improve WordPress and its community. This could include anything from fixing bugs, building new features, or improving the user experience. That’s only scratching the surface of the potential impacts.

Contributions of all kinds are welcome – even if they don’t involve writing code. So, think about which team(s) interest you and fit your skillset. It’s also worth considering how much time you can dedicate to the project.

The Five for the Future program is a compelling option for agencies willing to commit 5% of their time to the project. Individuals are also welcome to join.

However, the type or number of contributions you make isn’t as important as your willingness to participate. One way to look at it is that every contribution helps someone. That makes a difference!

Build Free Plugins, Themes, or Educational Resources

There’s also a more traditional approach to paying it forward. Your agency is likely building custom plugins or themes for your projects. And teaching is a key part of working with clients. Why not level up and share what you know?

Once again, this benefits everyone. The community receives something useful. Meanwhile, you increase your visibility across the WordPress ecosystem. It’s a way to generate leads while doing good.

What you share and how you share it are up to you. It might be as simple as posting your GitHub repository link on social media. Or, you might opt to distribute your work via the official WordPress theme and plugin directories.

We should note that some responsibilities are involved with either approach. Plugins and themes must be maintained and supported. Community engagement is part of the deal. It’s also a good idea to keep sales pitches to a minimum if your goal is to give back.

Offering educational resources, such as online courses or tutorials, is also a possibility. Being a guide to users or developers will showcase your expertise. Do it well, and you’ll have loyal visitors returning to your site or YouTube channel.

Say Thanks to WordPress and Its Community

If your agency builds websites with WordPress, it benefits from the open-source software. It also stands to reason that you’ve benefited from the knowledge shared by community members. Every code snippet or piece of advice is valuable.

Giving back is simply the right thing to do. It says that you care about the project and the people surrounding it. Consider the potential boost to your business as good karma.

It’s also a chance to connect with other people and organizations. You never know what may come of these relationships. Friendships, business ventures, and side projects could be in store.

So, think about ways to give back and pick one that’s right for you. It will help you grow as a person and a web professional.

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post How WordPress Agencies Can Give Back to the Community appeared first on The NOKIA Blog.

There are a few drawbacks, however. The content management system’s (CMS) predictable file structure makes it easy to guess where a file is stored. For instance, a UK budget document leaked before its official release. How did this happen? A journalist was able to guess the file name based on last year’s version:

The BBC was able to access the PDF version of the OBR’s key report at 11:45 on Wednesday by replacing the word ‘March’ with ‘November’ in the web address of a previous edition.

Search engines can also index your site’s media files. This can be a benefit to your SEO strategy, but it’s not always desirable. Consider a membership website that requires registration to access specific files. A user may stumble upon a file via search, defeating the purpose of hiding files behind a login.

None of this means that there’s a security flaw. Rather, WordPress wasn’t built with private media storage in mind. Thankfully, there are easy ways to improve media file security.

Let’s review some tools and techniques for protecting your WordPress media files. They’ll keep your files away from prying eyes and might even save you some hosting bandwidth.

Available Methods of File Protection

The first thing to know about protecting your media files is that there are multiple types of protection. The method(s) you use will depend on your specific needs. We’ll break this section down by common scenarios.

Note that none of the following options will guarantee file security in high-stakes situations such as the UK government leak above. Rather, they are basic measures that will make it harder for someone (or something) to access your files.

With that in mind, here are a few ways to improve file security.

Block Direct File Access From Outside Sites (Hotlinking)

Let’s say you have a large PDF file on your website. By default, an external website could link directly to that file (a.k.a. hotlinking). It may seem harmless, but every time a user clicks that link, the file access counts against your hosting bandwidth. Even worse, the user never visits your website.

The solution is to block hotlink access at the server level. Add the following snippet to your website’s .htaccess file:

# Deny direct access to uploads unless navigated from your  site (change example.com to your domain name)
<IfModule mod_rewrite.c>
RewriteEngine On

# Only apply to files inside uploads directory
RewriteCond %{REQUEST_URI} ^/wp-content/uploads/ [NC]

# Allow requests from your own domain
RewriteCond %{HTTP_REFERER} !^https?://(www.)?example.com/  [NC]

# Block direct access to specified file types
RewriteRule .(mp3|mp4|pdf|zip)$ - [F,NC,L]

</IfModule>

If your website runs on an NGINX server, add this snippet to the nginx.conf file:

# Deny direct access to uploads unless navigated from your  site (change example.com to your domain name)
# File types protected: mp3, mp4, pdf, zip
  location ~* ^/wp-content/uploads/.*.(pdf|zip|mp4|mp3)$ {
  
	valid_referers  none blocked server_names *.example.com example.com;
    if  ($invalid_referer) {
  return 403;
  }
}

Be sure to change example.com to match your domain name and edit the included file extensions to match your needs.

Note: We don’t recommend protecting image files this way, as it may lead to undesirable results. For instance, you won’t be able to include images or file links from the server in your email newsletter without adding some exceptions to the code above.

Prevent Search Engines From Indexing Your Media Files

Uploaded WordPress media files can easily end up in search results. This can be undesirable for a few reasons:

• Direct links to large files can eat up bandwidth.
• Users aren’t visiting your website, just downloading files.
• Members-only files could be exposed to the public.

Part of any file protection strategy should include preventing (or discouraging) search engine indexing. As such, there are a few methods to implement.

First, we can add the following to our site’s robots.txt file to discourage crawling of the /wp-content/uploads/ folder:

User-agent: *
Disallow: /wp-content/uploads/

This won’t prevent indexing of your files, just crawling. The main benefit is reducing the load on your server.

To fully prevent indexing, we can use the X-Robots-Tag header.

For Apache servers, add this snippet to your site’s .htaccess file:

# Prevent indexing of media files in /wp-content/uploads/
<IfModule mod_headers.c>
<FilesMatch  ".(pdf|doc|docx|xls|xlsx|ppt|pptx|zip|rar|7z|mp3|m4a|wav|mp4|mov|avi|webm)$">
Header always set  X-Robots-Tag "noindex, nofollow, nosnippet, noarchive"
</FilesMatch>
</IfModule>

NGINX users can add this to their nginx.conf file:

# Prevent indexing of media files in /wp-content/uploads/
  location ~*  ^/wp-content/uploads/.*.(pdf|doc|docx|xls|xlsx|ppt|pptx|zip|rar|7z|mp3|m4a|wav|mp4|mov|avi|webm|jpg|jpeg|png|gif|webp|svg)$  {
  add_header  X-Robots-Tag "noindex, nofollow, nosnippet, noarchive" always;
  }

The above methods will reduce bot traffic and reduce the likelihood that your files will appear in search results.

Prevent Access to WordPress Attachment Pages

By default, WordPress creates a post for every media file you upload. It may come in handy for some niche use cases, but it is most often a forgotten feature. Without further action, these posts can be indexed by search engines.

Some SEO plugins, such as Yoast SEO, RankMath, and All in One SEO, offer settings to disable attachment pages. This is the simplest way to prevent search engines or users from accessing them.

Short of that, you can also use a code snippet in your theme’s functions.php file or a custom plugin. We’ll share a couple of them that cover common scenarios.

Return a 404 Error on Attachment Pages:

If you’d like to deny access to attachment pages, the following snippet will do just that. Visitors will see a 404 page, rather than the attachment.

<?php
  /**
  * Force attachment  pages to 404.
  */
  add_action( 'template_redirect', function () {
  if ( !  is_attachment() ) {
  return;
  }
  
  global  $wp_query;
  $wp_query->set_404();
  status_header(  404 );
  nocache_headers();
  
  // Load  your 404 template.
  include  get_query_template( '404' );
  exit;
  } );

Redirect Attachment Pages to Parent Post:

Here’s a slightly different approach that redirects users to the attachment’s parent post. This is handy for blogs and other online publications looking to ensure users see their content, rather than media files.

<?php
  /**
  * Redirect attachment  pages to their parent post when available.
  */
  add_action( 'template_redirect', function () {
  if ( !  is_attachment() ) {
  return;
  }

  $attachment_id  = get_queried_object_id();
  $parent_id     = wp_get_post_parent_id( $attachment_id );
  if (  $parent_id ) {
  wp_safe_redirect(  get_permalink( $parent_id ), 301 );
  exit;
  }

  // No  parent: redirect to file URL if it exists.
  $url =  wp_get_attachment_url( $attachment_id );
  if ( $url  ) {
  wp_safe_redirect(  $url, 301 );
  exit;
  }
  wp_safe_redirect(  home_url( '/' ), 302 );
  exit;
  } );

If you don’t need WordPress attachment pages, there’s no reason to keep them around. Thankfully, you have several options for giving them the heave-ho.

Use a Plugin for Media File Protection

You can also use a plugin to protect your WordPress media files. The right plugin can do some or all of the above functions to keep your files safer.

For example, Download Monitor offers multiple functions, including file protection. Among its features:

• Disable or enable specific folders for file downloads.
• Create randomly-generated URLs for files you want to protect.
• Attempting to access a file directly will result in a 404 error.
• Require users to log in before accessing a file.
• Keep track of how many times a file has been downloaded.

The free version of the plugin covers common use cases. A premium version goes the extra mile by integrating with popular form plugins and adding CAPTCHA protection.

Meanwhile, many membership plugins come with some form of file protection. Check out the plugin’s documentation to see what’s available.

Take Control of Your Files and Gain Peace of Mind

There are several reasons for locking down your WordPress media files, even if you aren’t posting sensitive information. For one, the rise of AI bot traffic means higher bandwidth usage. Restricting access to large files can prevent surprise charges on your hosting bill.

Plus, media files and attachment pages can be taken out of context. A simple redirect can help by pointing users toward your content. That could be the difference between a one-time visitor and a loyal reader. Say hello to lower bounce rates!

The above solutions are easy to implement into your existing website. What’s more, they bring a little peace of mind. You won’t have to worry about the wrong people accessing your files or causing a traffic nightmare on your server.

Consider your file protection needs and how they might impact your SEO strategy. From there, you can create a plan that works for you.

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post How To Protect Media Files Uploaded to WordPress appeared first on The NOKIA Blog.

Some of us are using AI to build custom plugins, but it doesn’t have to end there. We can also extend existing ones. This skill comes in handy when a free or commercial plugin doesn’t quite do everything you need. Everything from minor tweaks to complex features is possible.

For instance, we’ve used AI to generate a custom WooCommerce email when a specific product is ordered. Perhaps that doesn’t sound like an earth-shattering use case. But building such functionality without hours of research is a win in our book. About 30 minutes is all we needed to go from concept to finished product.

Let’s face it: Every WordPress project is nuanced. There are always things our clients would like to change – regardless of size or difficulty. AI can help us go from “Oh, no!” to “That was easy!”

With that in mind, here are some tips for using your favorite large language model (LLM) to extend an existing WordPress plugin.

Is This the Right Plugin for the Job?

Wouldn’t it be nice if the plugin you installed also did x, y, and z? It’s a common refrain when building a website. After all, the little details often separate the good from the great.

Perhaps a client requested a feature that differs from the plugin’s default behavior. Or maybe you had an idea for leveling up the user interface. It’s a great way to spark creativity and go the extra mile.

However, not every plugin is the right one for the job. Some extensions may be too complex and difficult to maintain, while others could take the plugin in a completely different direction. The result is an inefficient path to achieve your goals. In short, it’s an easy way to go down the old rabbit hole.

The WordPress plugin ecosystem is vast, and there are often multiple options for every need. As such, you may find that a different product is a better fit for your project. Look for a plugin that already does most of what you need. From there, extending will be easier.

It’s great that we can extend plugins using AI. Yet, that doesn’t mean we should extend every plugin. So, consider the pros and cons of a product before you dive in headfirst.

A Well-Documented Plugin Often Yields the Best Results

WordPress plugins come from all corners of the ecosystem. Thus, you’ll notice that some authors provide more thorough documentation than others.

Well-documented plugins tend to be better candidates for an AI-generated extension. AI models will have ready access to that information, and it will likely improve your odds of a successful outcome.

Another side effect is that other developers have probably built extensions as well. AI can research forums and blog posts to understand how things work. Plugins often have custom functions, hooks, and filters that developers can tap into. The more information that’s available, the better.

Hint: Feel free to include any relevant documentation or demo links in your AI prompts. This ensures that the AI model is looking in the right place. It could save you from some trial-and-error when building an extension.

What if a plugin has little or no documentation? You may still have a chance to build on top of it. Upload the plugin or share a relevant snippet with AI. The model should be able to determine how things work and move forward from there.

Think About Structure and Future Maintenance

Let’s say that you’ve found the perfect plugin to extend with AI. Now what? You’ll want to think about the best way to structure your extension and how you’ll maintain it.

It’s always tempting to paste a few code snippets into your theme’s functions.php file. That may work in the short term. But what happens when it’s time to change to a new theme? You’ll have to do another copy-and-paste, or risk losing your custom functionality.

Placing your code into a custom plugin is usually the best option. This ensures that your functionality stays intact throughout your website’s lifespan. Better still, most AI apps can help you build a plugin structure that’s easy to maintain. A simple plugin might require a single file, while a more robust one could benefit from a tree structure.

Speaking of maintenance, that places another responsibility on your shoulders. It’s possible to build a custom extension that you won’t need to edit for years. However, it’s important to keep track of changes to the plugin you’re extending. For instance, a major change to Elementor or Gravity Forms could mean refactoring your code.

Building plugins that depend on other plugins is great – just be sure to understand what you’re getting into.

Make Your Existing WordPress Plugins Do More

AI is a great asset when extending an existing WordPress plugin. Explain what you want to achieve, share code and/or documentation, and let the app do the dirty work for you. It’s possible to have a working prototype within minutes.

That’s not to say the entire process is seamless. AI can make mistakes or misinterpret your instructions. As such, your generated code may require a few rounds of revisions. Not to worry! That’s still faster than writing something from scratch.

A word of advice: Ensure that your generated code uses security best practices. We have a handy guide to help you test. Taking a few extra minutes here will give you peace of mind.

Do you have an idea that makes an existing plugin even better? Now is a great time to experiment with a little help from AI.

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post How to Use AI To Extend the Functionality of WordPress Plugins appeared first on The NOKIA Blog.

That’s all good news. However, it’s also tricky for web developers hoping to prevent their clients from accidentally breaking a layout. It’s all too easy to delete a component or drag one to a different spot. Oh, the horror!

Keeping your designs looking good and safe is essential. Fortunately, WordPress offers several built-in methods for doing just that. They could save you from a headache or two.

Let’s learn how to protect your WordPress block layouts the easy way!

Step 1: Create WordPress Block Patterns

You spent all that time creating a custom block layout. Preserve your work by saving it as a block pattern. It only takes a few seconds and allows you to reuse custom layouts at any time.

This means you can easily restore a layout if something goes wrong. That’s simpler than trying to piece things back together or clean up a royal mess.

Even better, you can export block patterns and save them locally. This keeps your original layout intact, no matter what happens on the live site. You can then re-import the pattern should the worst happen. The other benefit is that the pattern can be imported to other sites or included in a custom plugin.

To create a block pattern, click on a block’s Options menu (⋮) and select Create pattern. Give the pattern a name and optionally assign it a category.

Once your pattern is saved, you can access it in the Appearance > Design menu within WordPress.

Helpful Resources:

Step 2: Lock Your Blocks

Block layouts can be easily edited and rearranged by default. For example, you might use the Block Editor’s List View to drag items to different areas of your page. It’s great for flexibility, but it can also result in some unintended consequences.

The Lock feature allows you to prevent blocks from being modified or removed from your layout. Users can still change the contents of a block. However, they must use the same type of content. For instance, you can only replace an image with another image, and so on.

If you’re locking a Group block, you can also choose to lock all blocks within the group. This step protects the entire custom layout. It’s another reason why the Group block is great for housing layouts.

To lock a block, click on its Options menu (⋮) and select Lock.

Note that there’s also an option to unlock a block if you need to make further edits. If you want more control over who has permission to unlock a block, there’s a code snippet that can help.

Helpful Resources:

Keep Your Block Layouts Safe and Beautiful

In days past, web developers had various tricks to client-proof custom layouts in WordPress. We hardcoded them into PHP-based theme templates and implemented custom fields to allow content changes. This approach doesn’t work as well in the world of blocks, though.

No, using the WordPress Block Editor to build layouts is about more than just aesthetics. You also need a plan to ensure that what you create is protected against breakage – block patterns and locking offer quick, built-in solutions for doing so.

Combined, these features add some resiliency to your custom layouts. And, even if something goes wrong, you can still restore the original version. That provides some peace of mind for you and your clients.

<!–

–>

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post How to Protect WordPress Block Layouts From Accidental Changes appeared first on The NOKIA Blog.

However, building a custom block hasn’t always been easy. Even seasoned WordPress developers can struggle to learn the process. Blocks are based on React, rather than PHP. As such, there’s a serious learning curve. That has left many to look at alternative methods or use third-party block suites.

There’s a new tool looking to change the narrative. Telex is Automattic’s AI-powered block builder. Tell the app what you want, and Telex goes to work. It generates code and, once you’re satisfied with the result, creates a custom plugin to install on your website.

Telex is ripe for experimentation. Let’s take it for a spin and see what it can do.

WordPress.com Black Friday Deal

Read moreRose gold design

For Black Friday, if you sign up for a WordPress.com Business Plan, you will not only get a 10% discount, but also a free professionally designed website worth $499, which includes setup on the platform with a custom theme and five core pages.

Get the WordPress.com Hosting Deal

Getting Started With Telex

First things first, you’ll need a free WordPress.com account to use Telex and save your projects. Click the Login button on the upper right of the screen to get started.

Once that’s taken care of, it’s time to tell Telex about your project. The interface should be familiar to anyone who has used ChatGPT, Gemini, or other popular AI models.

Enter your idea into the text field, and the tool takes care of the rest. It generates your custom block’s code and even lets you test it in a real WordPress installation (thanks to WordPress Playground).

Doesn’t that sound otherworldly? Follow along as we create a demo block.

Creating a Custom Timeline Block

From the looks of things, there’s no idea that’s too far-flung for Telex. There is a plethora of creative examples popping up on the web.

For our purposes, we’ll try to keep things practical. We’ll create a Timeline block that allows us to highlight important dates with style.

Here’s the prompt we used:

Create a Timeline block that allows me to highlight important dates in a vertical format. It should have fields for the following:

1. Year
2. Content

The design should feature the Year on the left and the Content on the right. A vertical line should be displayed between the Year and the Content. The Year should be bold text and stand out.

Hint: Telex has an “Enhance Prompt” feature that will that will rewrite your prompt using AI. Give it a try if you’re having trouble describing what you want. We tried the feature, and it added a few elements we hadn’t thought of, including responsive styling.

Click the Build button once you’re satisfied with your prompt.

Generating & Testing Our Custom Block

Telex will start building your block in plain view. The UI shows your prompt at the top of the screen, while the app’s internal dialog scrolls by below.

In our case, the process took about two minutes to complete. Once finished, we were redirected to a WordPress install and placed into the Block Editor.

This is where the fun begins! Telex provides an opportunity to test our new block and see how it works. We can use the chat panel on the right side of the screen to ask questions or make edits.

Judging the Initial Result

At first glance, our Timeline block looks similar to what we envisioned. Telex followed our instructions with the help of its AI enhancement feature. It also added a few details we didn’t think of, such as the ability to style the block’s colors and spacing.

There’s even a handy plus (+) icon for adding additional milestones to our block. As promised, the block is also responsive. The Year and Content blocks are stacked on small screens for easier reading.

It’s a strong start. However, we think there’s room for improvement. Can Telex help?

Improving Our Timeline Block

Perhaps the biggest thing missing from our block is the ability to customize the typography. We’d love to change the font sizing and spacing. Let’s ask Telex for some help:

Can you add font size and spacing settings to the Year and Content fields?

Telex receives our prompt and immediately begins revising the block. Once finished, the Block Editor is refreshed, and it’s time to inspect the changes.

Sure enough, our block now features typography settings for the Year and Content fields. Nice!

We’re one step closer to completion. However, there are a few other small tweaks we’d like to make:

I notice the line between entries isn't connected. Can we change that?

Also, I'd love the ability to horizontally align each entry to the Top, Middle, or Bottom.

Telex got both requests correct, to a point. We can now align our milestones horizontally. However, the connecting line has now moved to the left side, which is not what we wanted. Recall that the line had been in the middle.

Can you move the connecting line back to the middle? It should be connected to the icon between the Year and Content fields.

It took a few tries and a recovery from a PHP crash inside WordPress Playground. Telex eventually moved the line to the middle and adjusted the styling so the milestones are connected on the front end (there was still a bit of space in the editor).

Things are looking good, so we’ll click the Download button on the upper right of the screen. Telex provides a ZIP file containing a plugin for our custom block.

Now, we can install the plugin on any WordPress website!

Making Custom Blocks a Prompt Away

Our experience with Telex was a pleasant one. Within 30 minutes, we had a working prototype of our custom Timeline block. Even the most talented of React developers would have difficulty matching that pace.

Sure, there were a few glitches along the way. That’s to be expected from any AI tool. However, Telex produced the result we were hoping for.

What about security? We ran the plugin through Plugin Check, which gave us a thumbs-up. We recommend using the tool for every custom block you generate. Also, review the code manually. Don’t take security for granted.

Telex is still in its “experimental” phase as of this writing. However, it’s safe to say that the future looks very bright.

<!–

–>

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post How to Build a Custom WordPress Block With Telex appeared first on The NOKIA Blog.

Enhancing your site’s login security is crucial, and implementing two-factor authentication (2FA) should be a part of your plan. The technology requires a user to verify their identity via email, text message, or a third-party app. It’s the last line of defense against a hacker accessing a user’s account.

The good news is that you don’t have to be a security expert to implement 2FA on your website. Several WordPress plugins can add this layer of security in just a few clicks.

We’ve put together a list of the top 2FA plugins to help you get started. You’ll find options covering different authentication methods, along with the ability to protect administrator and lower-level accounts. You’re sure to find the perfect match for your site’s needs.

An official plugin from the WordPress team, Two-Factor adds 2FA settings to each user’s profile. It also supports several verification methods, including email, time-based one-time passwords (TOTP), FIDO Universal 2nd Factor (U2F), and backup codes. Note that 2FA can be enabled on a per-user basis or for all users via a code snippet.

Wordfence is known for its all-in-one security suite. However, they also offer a niche plugin that secures your site’s login. Wordfence Login Security supports TOTP-based apps such as Google Authenticator and Authy. What’s more, you can add reCAPTCHA protection to your login pages and guard against XML-RPC attacks. It’s a lightweight option that adds peace of mind.

WP 2FA makes it easy to protect user accounts. There are options for protecting all users, specific users, or users with a particular role. The plugin supports email and TOTP authentication methods. It also allows users to set up their 2FA preferences on the front end where appropriate. Developers can use the plugin’s API to add support for additional 2FA providers.

Add a layer of security to any user or user role on your WordPress website. Two Factor Authentication supports TOTP and HOTP methods. It’s also compatible with WooCommerce, Elementor Pro, Gravity Forms, and other popular plugins. The plugin can also remember trusted devices and will alert you if a user enters the correct password with an incorrect 2FA code.

Here’s a simple solution for adding 2FA to your website. Install Two Factor (2FA) Authentication via Email, and a toggle will be added to each user profile. Enable 2FA for individuals or use the provided code snippet to turn it on sitewide. Note that email is the only supported authentication method.

Solid Security includes a suite of tools to protect your website, including 2FA. The free version of the plugin offers email-based authentication, while the pro version supports TOTP and backup codes. You can also configure strong password requirements and ban users after repeated failed login attempts.

An Easy Way To Improve Your Website’s Security

Two-factor authentication is a must-have feature for every WordPress website. It’s also one of the easiest items to implement.

The plugins above streamline the process and provide multiple authentication options. So, whether you need to protect site administrators, e-commerce customers, or both, there’s a plugin for you.

We hope you found this plugin roundup useful. Check out our WordPress Security section for more helpful tips and tools.

–>

here. He recently started a writing service for WordPress products: WP Product Writeup. He also has an opinion on just about every subject. You can follow his rants on Bluesky @karks.com.

Read more articles by Eric Karkovack

The post 6 Best Plugins for Adding Two-Factor Authentication (TFA) to WordPress appeared first on The NOKIA Blog.