Tag value
WordPress Sanitizing And Escaping Cheat Sheet: Secure Your Code
Two rules keep WordPress code safe: sanitize input when data comes in, and escape output when data goes out to the browser. Sanitize early, escape late.
How To Run Safe Database Queries In WordPress With $Wpdb
The global $wpdb object lets you query the WordPress database directly. Use it when the standard functions are not enough, and always use $wpdb->prepare() to protect against SQL injection.
How To Create Custom Urls In WordPress With Add_Rewrite_Rule
Rewrite rules map a pretty URL, like /deals/summer-sale/, to a query that WordPress understands. Use them when you need URLs that do not belong to a normal page, post or…
How To Create A Settings Page In WordPress With The Settings Api
The Settings API is the standard way to build an options page in the admin. WordPress handles saving, security and the form submission. You only define the page, the sections…
How To Add Settings To The WordPress Customizer
The Customizer lets site owners change theme options with a live preview. Add a section, a setting and a control with the customize_register hook, then read the saved value with…
