Sanitize textarea instead of input
I want to add a new field to the user registration. I’m using this tutorial by Paul Underwood. The tutorial works but I … Read more
sanitization
Filter string like a slug
I have a WordPress site using pretty permalinks. I want to filter a string to that the it ends up with the exact … Read more
Is default functions like update_post_meta safe to use user inputs?
Is default functions like update_post_meta() safe to use user inputs? e.g. update_post_meta(76, ‘my_key’, $_GET[‘value’]) Or should I use $_GET[‘value’] = sanitize_text_field($_GET[‘value’]); before using … Read more
Multiple register settings, with same option name – issue
I already posted this question in wordpress support forums here but I didn’t get any help and nor could I find a solution … Read more
Data Validation: Always escape late / escape HTML Code
I uploaded a Theme at THE marketplace and got soft rejected because I should “always escape late” I am not sure how to … Read more
How to save html and text in the database?
I have two fields. The first is for plain text (but with special characters) and the second for html content (wp_editor is used). … Read more
where to apply “apply filters” and other Sanitization Functions
I got to learn something new today here on this post. I have code written for a Post widget → <?php class chimp_post_widget … Read more
Coding a plugin on WordPress; when should I sanitize? [duplicate]
This question already has answers here: In Which Contexts are Plugins Responsible for Data Validation/Sanitization? (2 answers) Sanitize and data validation with apply_filters() … Read more
How to sanitize post meta field value?
I have added a meta field for text input. I want to allow some html tags such as <strong> and <i> For example: … Read more
Must I serialize/sanitize/escape array data before using set_transient?
Everything is in the question. For a notices system to show warnings/errors in the admin, I´m using transient. When I published my first … Read more