security Archives - Page 29 of 38

I’m looking through _s (underscores) starter theme and see that they’re using esc_html for nearly everything. Just an example from functions.php register_nav_menus( array( ...

April 28, 2022
0 Comments

WordPress

IT Nursery

WordPress and PHP Sessions – Security and Performance

I’m writing a WordPress plugin to deal with a third-party API. This API requires a session identifier be passed to it so that ...

April 28, 2022
0 Comments

WordPress

IT Nursery

Which KSES should be used and when?

The WP source shows that wp_filter_kses and wp_filter_post_kses are passed data that’s “expected to be escaped with slashes.” On the other hand, wp_kses_data ...

April 28, 2022
0 Comments

WordPress

IT Nursery

WordPress it’s cleaning a custom query_var to avoid sql injections?

I am using get_query_var function to get a custom query_var. This query_var will be used later in to query arguments to retrieve posts ...

April 28, 2022
0 Comments

WordPress

IT Nursery

Can someone explain what wp_session_tokens are, and what are they used for?

I am trying to understand how WordPress determines where a user is logged in or not? I read that it’s done using just ...

April 28, 2022
0 Comments

WordPress

IT Nursery

multi page password protection

Is it possible to have the “password protected page” feature of WordPress apply to more than one page? I have dozens of pages ...

April 28, 2022
0 Comments

Authentication versus Authorization

What’s the difference in context of web applications? I see the abbreviation “auth” a lot. Does it stand for auth-entication or auth-orization? Or ...

April 27, 2022
0 Comments