More often than not i am asked how to hide wp-login.php part of the login and registration URL. For some reasons site owners do not want users to know that they are using WordPress or maybe they just want to have SEO friendly login/registration URL, either way the problem remains. Recently i took this problem […]
Customizing your WordPress login and registration URL
Properly Escaping User Input Data in Themes and Plugins
One of the fundamental rules in web development is to never trust user entered data, failure to do so makes website vulnerable to cross site scripting (XSS) attacks (among others), this is the most common attack i can think of as it requires only a bit of web development knowledge and a web browser. It […]
Maintaining Compatibility With Pre WP 3.8 wp-admin
The biggest, visible to end user change in WordPress 3.8 was the wp-admin panel redesign. One can argue if this change is for better or worse, but from plugin developer perspective the only thing that matters is we need to target new admin design now. If i remember correctly there was even announcement sent to […]