PHP
How To Customize The WordPress Login Page Logo And Styles
The default login page shows the WordPress logo and links to wordpress.org. A few hooks let you replace the logo, change the link and style the page to match your…
How To Upload Files From The Front End In WordPress With Media_Handle_Upload
Use media_handle_upload() to accept a file from a form on your site and add it to the Media Library. WordPress validates the file type, moves the file and creates the…
How To Use Nonces In WordPress To Protect Forms And Links
A nonce is a one time security token that proves a request came from your own form or link, and not from an attacker who tricked a logged in user.…
WordPress Sanitizing And Escaping Cheat Sheet: Secure Your Code
Two rules keep WordPress code safe: sanitize input when data comes in, and escape output when data goes out to the browser. Sanitize early, escape late.
How To Run Safe Database Queries In WordPress With $Wpdb
The global $wpdb object lets you query the WordPress database directly. Use it when the standard functions are not enough, and always use $wpdb->prepare() to protect against SQL injection.
