#wordpress 2023-04-24
2023-04-24 UTC
gRegor, fef and [Jo] joined the channel
# 
[tantek] saw this use of compromised WordPress sites and thought folks here might want to be aware: https://www.bleepingcomputer.com/news/security/google-ads-push-bumblebee-malware-used-by-ransomware-gangs/
# 
[chrisbergr] Thanks for pointing that out, [tantek]
fef joined the channel
# 
[pfefferle] oops
# [pfefferle] wrong channel
fef, RasAlGhoul, [schmarty] and gRegor joined the channel
# 
[TMichelleMoore] [tantek] Thank you!
# [TMichelleMoore] I don’t use it.
# [chrisbergr] Whoever uses this should think about whether they want to use a CMS at all.
[Tim_Nolte] joined the channel
# 
[Tim_Nolte] [TMichelleMoore] & [chrisbergr] I have it on my list to come up with an alternative to the Friends plugin, and the new apps support "companion" plugin, that doesn't start creating new users in a WordPress site. That fact alone is why I can never use the Friends plugin. I know there is some prior history to why it's that way but I'm not OK with things staying that way. At the moment the new plugin I'm planning on will be
# [Tim_Nolte] for months and someone beat me to releasing something for that. 🤷♂️
# [Tim_Nolte] called MastoPress. The intent will be to also bring support for the Mastodon API to WordPress, which will allow Mastodon app login support, but also provide an integration into WordPress itself that will leverage existing plugins like ActivityPub. This will undoubtedly sound like a "copy" of what's available now today but the implementation will be different and I've been talking about the Mastodon app login support aspect
# [Tim_Nolte] [chrisbergr] and to answer your question specifically about why use a CMS at all aspect. My intent is that I want a usable mobile experience with my WordPress site that just isn't viable with the WordPress mobile apps, and also not great on the web via mobile.
# [chrisbergr] [Tim_Nolte] The question was explicitly related to the use of this "PHP eval" plugin, sorry I didn't make that clear.
# [Tim_Nolte] Oh, ha
# [Tim_Nolte] 👍
# [chrisbergr] But let me ask you why you'd brand your upcomming plugin into the mastodon direction? Wouldn't AP be more than that one plattform?
# [Tim_Nolte] So my plugin won't be about implementing ActivePub, itself it will be about implementing the Mastodon API. I'm not going to completely reinvent the wheel on everything.
# [Tim_Nolte] In order to use your WordPress site with a Mastodon app, you need to implement the Mastodon API specifically.
# [Tim_Nolte] Now, you do bring up a good point that I could conceivably use Indigenous. And implement more support for general Fediverse integration on a WordPress site.
# [chrisbergr] You are the developer of Indigenous?
# [Tim_Nolte] Like I suppose I could implement the Reader endpoint so that an app like Indigenous could present the feed.
# [snarfed] [chrisbergr] afaik that's https://marksuth.dev/
# [Tim_Nolte] Ha, no I am not.
# [Tim_Nolte] I have used it. And have it on my phone currently with both my Mastodon instance and my WordPress site added to it.
# [Tim_Nolte] Yes it is Mark ☝
# [Tim_Nolte] Mark did share not long ago on Mastodon that an update is being worked on.
# [chrisbergr] Yes, now that I read the name, I remember. Thanks [snarfed]
# [Tim_Nolte] I think the big push right now is people using Mastodon. I know that it is somewhat disappointing that Mastodon is becoming what's known as the "Fediverse" to a lot of people.
# [chrisbergr] [Tim_Nolte] Can you describe what you mean with "In order to use WordPress with a Mastodon app"? What do you want to do, what are the usecases?
# [Tim_Nolte] Hopefully as people explore they will discover that Mastodon is just one part of the greater Fediverse.
# [Tim_Nolte] So like I use the Tusky Mastodon app for Android.
# [Tim_Nolte] I can't login to my WordPress site with that app, and add my WordPress site as another account on an instance.
# [Tim_Nolte] A Mastodon client application expects certain Mastodon specific API endpoints to exist.
# [chrisbergr] Interesting, I never thought about using Mastodon apps for writing new posts on my website.
# [Tim_Nolte] I recall that I tried FediLab, as that supports Mastodon as well as like Friendica and others I think.
# [Tim_Nolte] Well, and it wouldn't be just for writing new posts.
# [Tim_Nolte] You'd be able to use the Mastodon app to reply to comments.
# [Tim_Nolte] Comments that would be left on your WordPress posts from say Mastodon for example.
# [Tim_Nolte] And you'll be able to follow people using the app, see those followers posts, and reply to them.
# [Tim_Nolte] This would also allow you to see those on your WordPress site.
# [Tim_Nolte] Regular web visitors should also be able to see the conversations in the comments and also take part.
# [chrisbergr] That sounds pretty good so far, but of course I would then be limited to Mastodon users and posts.
# [Tim_Nolte] Well, no, you wouldn't be limited to Mastodon users, just like with an actual Mastodon instance you can follow non-Mastodon users.
# [Tim_Nolte] Again, my plugin would more than likely require the installation of the ActivityPub plugin.
# [Tim_Nolte] Which would mean that your WordPress site would still be available on the wider Fediverse.
# [Tim_Nolte] And when you follow someone on your WordPress site it shouldn't matter if they are on Mastodon or something else like PixelFed/PeerTube/Friendica/etc.
# [Tim_Nolte] And for that matter you should be able to follow another WordPress site that has the Fediverse suite of plugins installed.
# [Tim_Nolte] I'm now thinking that perhaps I have the main plugin be FediPress, and then in the case of Mastodon API support, there would be an add-on called MastoPress. This could open things up to additional add-ons for other API implementations. Like if you wanted your WordPress site to leverage the PixelFed API to serve as a photo site. 🤔
# [Tim_Nolte] We'll see.
# [Tim_Nolte] I have to get some other items wrapped up here so that I can start hammering this out.
# [Tim_Nolte] I guess the fact that I'm even sharing this all here means someone else with more immediate time is going to start working on it an do it. 🤷♂️
# [chrisbergr] My approach is different. I want to be able to interact with everything with my website. If it's another (indieweb) site then via webmention, if it's a mastodon account then via AP or if it's a "normal" blog then pinback.... And much more. Of course also a reader for all the protocols. For this I'm building an external toolset, tailor-made for me (category structure, language requirements). This is a webapp, around which I
# [chrisbergr] would like to build an iphone app container.
# [Tim_Nolte] Ah, OK.
# [Tim_Nolte] However, yes, I also essentially want to interact with everything through my website.
# [Tim_Nolte] That being said though I don't want to manage the mobile app side of things.
# [Tim_Nolte] And I don't have, or use, and iOS devices.
# [Tim_Nolte] Everyone has their personal preference for how they like their apps. By implementing the API into WordPress that any of those apps could use I get the benefit that any app made by others could be used.