A very basic template I created a file named about.php in a pages folder in the root of my theme with this code. You can do the same or change the location as you see fit, just dont put it inside a child folder that is in a child folder, wordpress can’t read templates two … Read more
escape html in jQuery for WordPress
wp_kses_post escaping doesn’t appear to work as described?
Escaping is only necessary when you have no full control of the the thing you are echoing. So as long as $folder is a variable that you have defined yourself, there’s no real need to escape. But if there is user input involved, there is esc_html, to be used as follows: echo esc_html (“this input … Read more
You don’t need to escape HTML you wrote. You wrote it and it’s hard-coded a certain way so there’s no way for it to be replaced by malicious or broken code. You only need to escape the external values that are being inserted into the attributes and you’ve done that. Also, note that the purpose … Read more
* SOLVED * sorry for the bother. my problem wasnt this char at all –> ; but this line which i missed: echo ‘$(‘a.lightbox’).lightBox(); // Select all links with lightbox class’ . “\n”; Sometimes sterring at code i miss such stuff.. sorry = thanks for anyone who watched.
You have to escape th < and the > with < and >, otherwise WordPress will remove the “unknown tags”. You could also filter pre_kses to change the output before it gets stripped. add_filter( ‘pre_kses’, function( $str ) { // find and escape < and > on specific positions, then return $str; });
Try… base64_encode(serialize($array)) base64_encode(json_encoe($array)) and reverse decoding in shortcode ofcourse
Your string example is wrong. You´re ending the echo statement right after opening the <div>. It should look like this: echo ‘<div class=”quarter”><img src=”‘ .$image[0]. ‘” alt=”Logo”></div>’;
And the strange part: both codes echo the same string for $url!!! No, they don’t. Look at the page source. esc_url() is encoding the & control character. You can’t do that and expect the HTTP request to work correctly. Use esc_url_raw() instead. Note the description in the Codex concerning that function: The esc_url_raw() function is … Read more