Nonce code vulnerability

you should not use nonce on public pages. Nonces should protect against action which can perfom things the user might regret that they were done without his explicit consent. While the user might also regret sending some kind of “contact form” that is more of a mental thing, not something that can be solved with … Read more

Pass WP data to javascript

The most direct answer to your question as it stands is “yes” – there are many ways to acquire data from WordPress without embedding it in the page’s markup or an inline <script> generated via wp_add_inline_script()/wp_localize_script(). A couple of options would be to have your JavaScript make a web request to the REST API (either … Read more

Prevent publishing of uncategorized posts

The in_category function works only on existing (saved) posts. Here you can directly access the category in $postarr like this: if (‘affitti’ == $postarr[‘post_category’])) { wp_die(‘Error: Posts cannot be published with the default category.’); } By the way, are you sure you want to use wp_die for this and not some other error message? People … Read more

How to customize WP_Error (REST JWT authentication plugin) [closed]

✨ Solution I’m not sure this is the most efficient way to use rest_post_dispatch (documentation) for this purpose (maybe overkill but I didn’t found other way). It works as expected. add_filter(“rest_post_dispatch”, “rest_customize_result”, 10, 3); function rest_customize_result( WP_REST_Response $result, WP_REST_Server $server, WP_REST_Request $request ) { if ( $request->get_route() === “/jwt-auth/v1/token” && $result->get_status() === 403 ) { … Read more

Developing a “fallback” for empty wp_query results based on post dates

PHP strtotime() takes some weird string values that we can use in combination with the WP_Query date_query ‘before’ keyword. For example, we can get X posts before 1 year before tomorrow: $tomorrow_a_year_ago = wp_date( ‘Y-m-d’, strtotime( ‘-1 year +1 day’ ) ); $args = array( ‘post_type’ => ‘post’, ‘posts_per_page’ => 5, ‘post_status’ => ‘publish’, ‘orderby’ … Read more

How to connect wordpress with db using ssl client certificate

I finally found a solution. I had to extend the wpdb class inside wp-contents/db.php. It looks like this: <?php /** * WordPress Database Access Abstraction Object * Custom DB Connection class to provide ssl connection to the database */ class ssldb extends wpdb { /** * Connects to the database server and selects a database. … Read more

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)