How to quickly/easily make an analysis (reverse engineering) of WordPress?

The best way to understand wordpress is to work with it and then use the WordPress CODEX to understand core functions.

That said there are a few tools that many WordPress Developers use:

  1. A code editor with search and find functionality that will traverse all the files in your installation. I use Coda. Almost any good IDE will provide this.
  2. Plugins that provide further information: Developer , Debug Bar , Debug Bar Extender , There are many more, but I use these on every project.
  3. URL routing is accomplished through URL variables or Permalinks, most devs use Permalinks. The Template Hierarchy page will help you understand which template files are chosen and why.
  4. WordPress is not architected in the strict MVC pattern. That said many of the Classes and Functions do follow the MVC pattern. The template hierarchy is equivalent to Views, but not very strictly followed. More on that here.
  5. The Database structure can be found here.

Final Notes: You’ve asked some questions above that have no answers because WordPress is not a strict MVC patterned architecture. I use the Debug Bar and Debug Bar Extender to trace variables and know what template file is producing what browser output. it is an addon to the WordPress Admin Bar, which provides a quick way to get to the backend from any front end section. I encourage you to turn that on for your user profile on the front end so you can quickly flip back and forth between the front and back.

hope that helps!

Related Posts:

  1. How to fix the admin menu margin-top bug in WordPress 5.5?
  2. error_log() output for print_r() appearing on page
  3. esc_attr() right way and use
  4. Enforcing password complexity
  5. Does My Child-Theme Functions.php Need if{die} Security In It? [duplicate]
  6. How Attackers write script into my php files?
  7. Does the debug.log do log rotation?
  8. Debugging an error: wp_enqueue_style was called incorrectly
  9. Renaming wp-content folder dynamically
  10. How do I create a WP user outside of WordPress and auto login?
  11. Security – Ajax and Nonce use [closed]
  12. Can I write ‘RewriteCond’ using ‘functions.php’?
  13. Is it unsafe to put php in the /wp-content/uploads directory?
  14. Where exactly do I write define( ‘WP_DEBUG’, true ) in wp-config file
  15. Utilize WP-CLI from inside WordPress, not SSH
  16. error_log is not working as expected in functions.php file
  17. Using FirePHP with WordPress
  18. Debugging PHP object during Ajax call in WordPress
  19. Sanitize get_query_var() url parameters
  20. “Notice: Undefined variable: content” is showing [closed]
  21. mysqli_real_connect() – authentication method unknown to the client Warnings
  22. When must I use and verify nonce?
  23. How to debug php code in hostgator cPanel
  24. how to trace notice warning on core function is_page() & is_singular in class-wp-query.php
  25. Hiding WordPress Plugin Source Code
  26. Is this code malidcous
  27. Admin username and password
  28. Evaluations of two wordpress security plans against php code injection attack
  29. Preferred Method of debugging a wordpress SQL calls?
  30. Huge debug.log because of “undefined offset in media.php”
  31. Same log message keeps on printing to debug.log file thousand of times
  32. WordPress custom login form using Ajax
  33. How to find error in my code when the error message is pointing to WP core file?
  34. Detect session/cookie variable in wordpress to prevent access to documents
  35. Is there any risk setting WordPress file permissions and FS method to ‘direct’ on localhost?
  36. SQL Injection blocked by firewall
  37. How to prevent XSS alter custom global javascript object & methods in WordPress
  38. Mute Debug Messages from Plugins
  39. XAMPP-VM Mac OS Mojave wordpress debugging using XDebug
  40. How to debug my custom login form looping intermittently
  41. Generating an nonce for Content Security Policy and all scripts – How to make it match/persist for each page load?
  42. Cannot execute php files in wp-content
  43. How do I get around “Sorry, this file type is not permitted for security reasons”?
  44. Security: blocking direct access of php files
  45. “Undefined index” error when saving empty array with checkboxes
  46. Correct and safe way to include php content in my page
  47. Password minimum length in personal subscription [closed]
  48. How to add API security keys into JS of wordpress securely
  49. Site throws 500 error after upgrading from PHP 5.6 to 7.X
  50. Is it best to avoid using $wpdb for security issues?
  51. Hardening uploads folder in IIS breaks images
  52. Troll the hackers by redirecting them
  53. Security updates to 3.3.2
  54. how to prevent wordpress admin from logging in via woocommerce my-account page
  55. malware undetectable by multiple scans
  56. Decoded malware code [closed]
  57. How to display SQL query that ran in WC_Order_Query?
  58. How can I find the cause of a 500 server error?
  59. Hooks for post saving make a post-new.php to load latest post’s data
  60. add button to specific post
  61. Updating From Mobile App – Exposing Site to Hacking
  62. security concerns if using html data-* attribute for l10n?
  63. Publish button now showing content after saving
  64. How to correctly escape an echo
  65. Reject all malicious URL requests functions.php
  66. portfolio site – about this site section – is it safe to post some code
  67. echo cutom css code to WordPress page template file ? is this safe?
  68. var_dump() and print_r() display null in php
  69. File is executed twice if plugin is activating
  70. Fatal error: wp-settings.php on line 199
  71. How to display only specific Error types in debug.log? No notices, warnings, etc
  72. How to secure my php forms
  73. How to identify which php file a plugin is using on page load?
  74. $.ajax results in 403 forbidden
  75. Site infected by link
  76. Access WP files on “server 1”, from “server 2” – using wp-load on an external website
  77. Notice : Array to string conversion on array_intersect user meta
  78. Deny php execution in /wp-includes – using .htaccess in /wp-includes VS root folder
  79. Notice: Undefined index: post_title error
  80. (Xdebug Profiler) Why are there two cachegrind files generated for one page?
  81. Retrieve $_POST data to send to javascript without using localize script
  82. Previewing/Updating some Pages causes “The requested URL was rejected” Error
  83. Stripe button is not working in a template page
  84. I’m writing my first plugin and my echo output is showing up on every page of my wordpress installation
  85. What is the best practice for restricting a section to logged in users?
  86. How to find the function which is outputting Array
  87. Accessing Variables Used In a Plugin Using PHPStorm + XDebug
  88. WordPress won’t display errors at all
  89. Warning: Cannot modify header information (with a twist)
  90. which php or css file has generated an inline style in WordPress that overwrites my css
  91. WordPress White Screen Error
  92. what to do after instlling cyberpanel on VPS
  93. Internal server error when enabling Multisite in WordPress
  94. renaming an admin menu item with decimal array index number
  95. How to get the original price of the product in woocommerce?
  96. How to make sure that only one wp_cron() runs at a time?
  97. Widgets not showing in my custom theme
  98. Is there any wordpress plugin to upload images and captions to multiple pages once
  99. Database entry removed on browser refresh, Ajax PHP jQuery
  100. Query category name by variable