Category Archives: WordPress

The open source publishing platform I co-founded — development, releases, community, and the ecosystem.

2.6 by the numbers

Themes, WordPress, ,

Now that we’re now 10 days into the release of version 2.6 of WordPress, it’d be interesting to look at a few of the numbers around it.

  • There have been around 23 thousand downloads per day. (Of just the English version.)
  • According to the update system there are 201 thousand blogs using 2.6 already.
  • That’s about 9% of all known WordPress.org blogs in 10 days.
  • The video in the announcement post has been viewed 665,080 times.
  • There have been over 300 themes submitted to the new Theme directory, which launched just 6 days ago.
  • In the same period (10 days) there were 579,871 downloads of 2,527 plugins.

I imagine 2.6 adoption will pick up after the 2.6.1 release — a lot of people wait for the .1 before upgrading.

How are we celebrating? By working on 2.7!

It should be a fun release both for the features we have planned and also because it might incorporate some of the aspects of Crazyhorse, our experimental bizarro world dev branch which we’re laser-eye-testing in NYC next week. (700 blogs are running 2.7 already.)

IE6 Independence?

Press, WordPress

Hot off the news that 37signals is removing support for IE6 in their products I thought it would be interesting to look at the stats from WordPress.com as an update to my previous post just under a year ago. Is it reasonable to drop support for IE6 in a mainstream app?

These stats cover Jan 1 – Jun 30: 787 million “absolute unique” visitors, 1.6 billion visits, and 3.3 billion pageviews. I feel these numbers are large enough and WordPress.com-hosted blogs diverse enough to be fairly representative. All the numbers come from Google Analytics. In parentheses I’ve put the delta from the last time I blogged these stats.

  1. 59.41% – Internet Explorer (down 3.05%), sub-breakdown:
    1. 53.42% – Version 7.0 (up 18.25%)
    2. 46.28% – Version 6.0 (down 17.82%)
    3. 0.14% – Version 5.5 (down 0.14%)
  2. 32.82% – Firefox (up 2.08%)
  3. 4.81% – Safari (up 0.98%)
  4. 2.04% – Opera (up 0.26%)
  5. 0.41% – Mozilla (down 0.11%)

The operating system breakdown:

  1. 89.41% – Windows (down 0.95%)
  2. 7.86% – Macintosh (up 1.13%)
  3. 1.82% – Linux (down 0.37%)
  4. 0.17% – iPhone (out of nowhere!)
  5. 0.10% – PlayStation Portable (up 0.07%)

So as you can see, IE6 users account for about 27% of all the visits we saw. If I were building something for “the internet” IE6 compatibility would still very much be on my radar. Everyone’s users or customers are different, and if I saw IE6 falling below 10% on one of my sites I’d probably very seriously consider what 37signals is doing.

The good news is most trends are going in the right direction: strong growth of Firefox, IE7, and Macintosh, and the iPhone came out of nowhere to generate 2.6 million visits (and another 1.1 million from the iTouch).

Happy July 4th!

New Spring Design

Meta, Press, Quote, WordPress,

Time to come out of your RSS readers and visit the site. In celebration of Spring, Summer, the new domain, and WordPress 2.5 I’m launching a new version of Photo Matt / Ma.tt. Here’s a before and after picture:

Old and new ma.tt

A couple of functionality changes you’ll notice:

  • Thumbnails and photos are now much larger. (Especially photos, now 840px wide.) Imagine it like going HD, you’ll definitely enjoy it more on broadband.
  • I’ve brought back the photo tech details like aperture and focal length.
  • In addition to posts and asides, I’m now doing new post types: galleries, quotes, videos, and highlight photos.
  • You can now click on a photo to go to the next one, making  browsing galleries easier.
  • The header is a lot shorter, so you get to the content faster. You can’t say I have a big head anymore. 🙂
  • I’m starting to use the new taxonomy bits in 2.5 to tag people, places (geotagging), things, and concepts in the various photos. (More on this later, still a bit broken.)
  • This is the first iteration of this site that is powered entirely by WordPress. (I know, 5 years late. The cobbler’s children go shoeless!) Before it was a cobbled together set of PHP includes and software like Gallery. Now 100% WP.
  • Gravatars are much more prominent. I wonder if there’s a way to only allow comments from people with Gravatars? It looks so much better.
  • Name has changed from Photo Matt to Ma.tt, tagline is the same.

The fine design was executed by Nicolò Volpato, the same talented fellow who did the last design. My concept was to evoke Spanish talavera, inspired by my trips to Spain and Argentina and pottery at my parents’ house like this, this, and this. It was a lot of fun to work with Nicolò on and I already have a few ideas for Fall. 🙂

I’ve been noodling on the implementation for months now. Last night I had just arrived from New York and it turned out the Jay-Z/Mary J Blige concert in Oakland got postponed so I found myself with a bit of time on my hands and decided to tie up all the loose ends. There are still a ton of things broken like the photo border on portrait images, I still have 15k old photos to import, and you may see the old design on some older pages, but I wanted to get it out there. There are also some weird things, like Firefox seems to back the background image blurry while it’s razor-sharp in IE and Safari. I feel like I’ve seen that somewhere before.

Finally I’m hoping to release a lot of the work I did here, including a version of the old theme, the plugin + script I’m using to resize all my old images on the fly, the taxonomy stuff, and some core improvements to WP to make some of the things I’m doing here easier. (I got lazy and did some direct SQL queries, etc.)

SecurityFocus SQL Injection Bogus

Press, Spam, WordPress

Since people are asking, this so-called alert on Security Focus appears to be completely false and has no information that an attacker or the WordPress developers could use. It is completely content-free, except for making claims that every version of WP since 2.0 is vulnerable.

Online, apparently, it’s fine for someone to run into a crowded theatre and yell “fire” and the less basis there is in fact the more people link to them. It’s not uncommon to see crying-wolf reports like the above several times in a week, and a big part of what the WP security team is sifting through things to see what’s valid or not.

A valid security report looks like this, it usually includes sample code and a detailed description of the problem. The WP security team was notified of the KSES problem and it was fixed in 2.5. You can impress your friends by saying whether a security report is valid or not, so it’s a good critical facility to pick up.

All that said, there is a wave of attacks going around targeting old WordPress blogs, particularly those on the 2.1 or 2.2 branch. They’re exploiting problems that have been fixed for a year or more. This typically manifests itself through hidden spam being put on your site, either in the post or in a directory, and people notice when they get dropped from Google. (Google will drop your site if it contains links they consider spammy, you’ll remember this is one of the main reasons I came out against sponsored themes.) Google has some guidelines as well, what to do if your site is hacked. If I were to suggest WordPress-specific ones, I would say:

Continue reading SecurityFocus SQL Injection Bogus →