PHPCS warnings
Issues reported as VIP warnings should not be pushed to a production server unless a specific use case requires it. Some common issues reported as VIP warnings are listed below.
Tag: tech-ref
Showing page 19 of 26
PHPCS errors
PHP_CodeSniffer (PHPCS) scans that are run against WordPress application code by the VIP Code Analysis Bot—or scans that are run manually after following the instructions to install PHPCS for WordPress VIP—will run with identical standards that include the WordPress-VIP-Go standard.
Encode values passed to `add_query_arg`
VIP recommends checking the WordPress Codex when using an unfamiliar or less frequently used function. The usage description and user-supplied notes can help show “gotchas”, identify possible unexpected results, or clarify whether the function returns output-safe results or if further escaping is needed.
The VIP Cache Personalization API
When serving dynamic content within a Content Management System (CMS), there are two ends of the spectrum of caching behaviors:
Security
The VIP Platform is built with multiple levels of security controls and protection—including edge protection, secure networking, robust access controls, continuous security monitoring, and code scanning. VIP performs recurring internal security testing of the platform, vulnerability assessments, and engages with third-parties to perform platform penetration testing on a regular basis.
Elasticsearch
Elasticsearch (ES) is an open-source search and analytics engine that powers Jetpack Search and WordPress VIP’s Enterprise Search.
VIP File System
On the VIP Platform, media files that are uploaded to a WordPress site are not stored in a filesystem that is local to the web container. Instead, an API is used to store the uploaded files in a separate read-only service called the VIP File System. The VIP File System is an external, globally distributed object store.
Code review
Code in pull requests made to an application’s wpcomvip GitHub repository should be reviewed before merging and deploying to a production environment. In addition to peer reviews, VIP provides tooling to provide more robust and timely feedback on code in pull requests.
WordPress multisite
The WordPress multisite feature enables a single WordPress instance with a single database to host more than one site, and for each of those sites to be mapped to a unique domain. The sites on a WordPress multisite are referred to collectively as a network.
Optimize database queries
The WordPress VIP Platform provides a resilient infrastructure for hosting at scale, but infrastructure alone is not a guarantee for a site to perform well in all scenarios. To increase a site’s resiliency, SQL database queries should be optimized wherever possible.