Loop through the global: <select> <?php foreach ( $GLOBALS[‘wp_registered_sidebars’] as $sidebar ) { ?> <option value=”<?php echo ucwords( $sidebar[‘id’] ); ?>”> <?php echo ucwords( $sidebar[‘name’] ); ?> </option> <?php } ?> </select> Note: The ucwords() function is only there to display it exactly as you asked. Not sure if you really want that. How to … Read more
I can’t answer every single Q you asked, as reading the Q took enough time so far ;), but I try to give you some insights about my personal experience with developing free, open source plugins. 1. Never do too much. Features are the death of every plugin. Build a basic version first and test … Read more
As an ex-software engineer building large business types who landed in an interactive agency let me give you a few thoughts on testing when developing for WordPress: Your Unit Testing should test the smallest amount of behavior that a class can perform. Each class should be able to be tested independently of WordPress. If you … Read more
The string used in WordPress to identify the plugin is: plugin_basename($file); … where $file is a file with the plugin headers. So if you are in your plugin, get the slug with: $slug = plugin_basename( __FILE__ );
Alex King Website WordPress.org Profile Mark Jaquith Website WordPress Profiles Otto Website WordPress.org Profile Stephen Rider Blog Google Code (Strider Core) WordPress.org Profile
No, they should not. If a plugin has vulnerabilities just because someone might see its directory structure it is broken. These bugs should be fixed. Security through obscurity is a bug for itself. It’s up to the site owner to allow or forbid directory browsing. A second issue is performance: WordPress scans all PHP files … Read more
When in doubt, look at the source code. Digging in to get_option(), you’ll see (abbreviated): $value = wp_cache_get( $option, ‘options’ ); if ( false === $value ) { $row = $wpdb->get_row( $wpdb->prepare( “SELECT option_value FROM $wpdb->options WHERE option_name = %s LIMIT 1”, $option ) ); // Has to be get_row instead of get_var because of … Read more
Maybe using the wp_redirect() function in the activation hook. In the following example myplugin_settings is a placeholder. Normally this simply is the $hook_suffix you get back from $hook_suffix = add_menu_page( /* etc. */ ); and similar functions. THIS CODE DOESN’T WORK, READ BELOW register_activation_hook(__FILE__, ‘cyb_activation’); function cyb_activation() { // Don’t forget to exit() … Read more
Send the form action either to your homepage, or to a specific page URL. You can’t have $_POST handling within the template because you need to redirect after your process it, and redirect needs to be fired before any HTML output. // you should choose the appropriate tag here // template_redirect is fired just before … Read more
There are two concepts here: validation – making sure data is valid, i.e. an integer is an integer, a date is a date (in the right format etc). This should be done just before saving the data. sanitisation – making the date safe for its use in the current context (e.g. escaping SQL queries, or … Read more