escaping Archives - Page 2 of 10

I am not understandinhg $wpdb->prepare correctly

I have a query that runs fine in raw PHP but I cannot run using $wpdb. I seem to be missing something in … Read more

Must I serialize/sanitize/escape array data before using set_transient?

Everything is in the question. For a notices system to show warnings/errors in the admin, I´m using transient. When I published my first … Read more

PHP sprintf escaping %

by IT Nursery

I want the following output:- About to deduct 50% of € 27.59 from your Top-Up account. when I do something like this:- $variablesArray[0] … Read more

How to properly escape a translated string?

by IT Nursery

I’m having trouble understanding how to escape a translated string with WordPress… The following piece of code is from the WordPress codex : … Read more

Sanitizing comments or escaping comment_text()

by IT Nursery

I’m creating a template for comments on my WordPress site. I noticed that a simple <script>alert(1);</script> slips through the default WP codex implementation … Read more

why is esc_html() returning nothing given a string containing a high-bit character?

by IT Nursery

In PHP 5.2, filter_var() sanitizes text. In WP, esc_html() sanitizes text. The former works with a high-bit character in the text string, e.g. … Read more