Description:
WordPress 2.9’s embeds feature is pretty handy if I may say so myself (I wrote it). However for security purposes, discovery is disabled. This plugin enables it for users with the unfiltered_html
capability (Administrators and Editors by default).
What is oEmbed discovery?
Website owners can add a bit of HTML to their head that says where their oEmbed provider is located. This allows consumers such as WordPress to embed things from their website without WordPress specifically knowing about their website before hand.
However this is disabled in WordPress by default to prevent someone (either on purpose or by accident) from embedding content from a malicious website.
So oEmbed discovery is bad?
No, it’s just powerful and has risks. Whatever HTML the remote website provides is used directly. Normally that’s fine, but they could also provide HTML that is bad for you and your visitors. So it’s best if you know what you’re doing which is why it’s disabled in WordPress by default.
Download:
- Download from WordPress.org (0 downloads)
Pingback: New Plugin: Enable oEmbed Discovery « Viper007Bond.com
Any chance the plugin will be available for wordpress.com blogs?
No. Only certain HTML is allowed on WordPress.com for security reasons (no one there has the
unfiltered_html
capability). This would allow users to bypass the restriction if it was enabled there.Pingback: WordPress Plugin Releases for 12/17 « Weblog Tools Collection
The plugin doesn’t seem to be working unless I have missed something?
WordPress version 2.9, plugin installed, only one user (admin created on installation of wordpress)
Youtube urls are not converted, ebmed shortcode has no efffect.
Deactivating plugin results in blank admin screen and does NOT deactivate plugin. Only way to deactivate is to manually delete form plugin folder
Ok, plugin works, but cannot be uninstalled without crashing admin screen and even if uninstalled does not deactivate.
I have manually deleted the plugin from the plugin folder and yet the embed feature still works even though plugin is not present. Which sort of renders the security reasons for not auto enabling this feature in wordpress moot.
OK I am realising where my error lies. It stems from this page: http://codex.wordpress.org/Version_2.9
which says the following about the embed feature: “Easier Embeds with oEmbed support (see Ticket #10337) (crippled by default, use plugin to enable it) ”
Which would seem to indicate that the whole embed feature is crippled when in fact its just the discovery feature (they really could have explained that better) and this plugin is only needed for discovery. (which, in fairness, is what the plugins page in the repository says about the plugin)
anyway I had the wrong starting assumption, my apologies for any confusion I caused. I was looking for the wrong indicators the plugin worked. disregard all my previous comments.
Yes, the “crippled” bit is rather biased and I believe it was added by someone who was unhappy that we disabled discovery by default. I’ll make it more clear.
Just the addition of one word : Discovery : would be enough
Easier Embeds with oEmbed support (see Ticket #10337) ( –discovery– crippled by default, use plugin to enable it)
The lack of that one word threw me. Of course if I had paid closer attention to what YOUR plugin page said I would have caught the error (colour me sheepish)
I changed it to “oEmbed discovery disabled by default, use plugin to enable it”. 🙂
Hello!…
what about compatibility with your Viper Video QuickTag PLugins and the new Embed Feature?
is there a way to change all the previous tags?
No, however my plugin is currently being recoded to make all of it’s shortcodes use the new embed API (oEmbed where it can, otherwise manually created HTML).
Pingback: Chase your dream! » oEmbed ? WordPress
Perhaps it could also support oohembed.com, which has a number of oembed hooks built in for various websites.
http://wordpress.org/extend/plugins/oohembed/
Okay, maybe I’m missing something, but what exactly does this do for me? Can I just include a link to a page:
http://site.com/file
and it will embed any video from that page? Or is there an embed code I need to use?
{oembed}http://site.com/file{/oembed}
Pingback: Unter der Motorhaube #6 » F!XMBR
Pingback: test nouvo « vedovini.net
“Website owners can add a bit of HTML to their head that says where their oEmbed provider is located.”
Yeah, that’s pretty vague. Obviously something needs to be done AFTER installing the plugin, but that’s all the installation instructions say.
*What* bit of HTML to the head section must we add?
WordPress is an oEmbed consumer. Sites like YouTube are oEmbed providers. You don’t need to worry about the bit of HTML as it doesn’t apply to you. 🙂
Thanks, Alex. Actually I wanted to add my own site (the one that hosts WordPress) to the list because it would be great to embed FLV files that live on my server by only including the URL to the file – without having to create an entry for it in Wordtube.
Vic
I’d recommend going this solution instead then: http://codex.wordpress.org/Function_Reference/wp_embed_register_handler
Just use some regex that will match your own video files. 🙂
Thanks!
Hi,
I have activated your plugin but it does not work with my Multisite. Here is my multisite:
http://www.studyguide.com.vn
and I want this member site have ability to embed simple code:
http://nguyenkhanhlam.com
Thank for your plugin.
No one on a multi-site install has the
unfiltered_html
capability unless you install a plugin like http://wordpress.org/extend/plugins/unfiltered-mu/I don’t seem to be able to use this. i’m on a wordpress blog, with plugin enabled. i’m creating a page – i paste the url of an enabled page ‘http://www.videojug.com/film/how-to-use-visual-voicemail’ and it doesn’t convert this to an oembed page. where am i going wrong?
That site incorrectly implements the oEmbed discovery protocol as it’s using relative URLs rather than absolute (full) URLs. WordPress only supports full URLs.
Pingback: » wordpress:WordPress refuses to show oembed URL