I think that would depend how you’ve made your site private? I’ve used this plugin to set sites to private https://wordpress.org/plugins/jonradio-private-site/ It also has settings to exclude any URLs from being set to private. There are a bunch of other plugins that do similar thins.
Does WordPress require it’s developers to manually save, sanitize, validate all the meta boxes? Yes. Are there no pre-built options for simple data such as text, textarea and similar? Not in core, no. There are plugins like Advanced Custom Fields or CMB2, among others, that simplify this process though. A Fields API has been proposed, … Read more
You can actually do this on the web host without actually any PHP code. Using the same procedure as is recommended to deny access to wp-config.php, you can also deny access to upgrade.php. All you need to do is create a file named .htaccess in wp-admin and put the following in it: <files upgrade.php> order … Read more
Why are the latest visits to my website originating from my own website?
CSRF attack to create USER
How can I stop other plugins from using my class’ sensitive methods?
How to fix this CORS error?
Personally, I back up my site with a plugin and don’t rely on my web host provider to create backups. ManageWP is a good option for website backups. However, if you need to upload your backups to own cloud storage (like Amazon S3, Dropbox) from ManageWP, you have to pay the extra fee for that … Read more
Escaping a WPDB Object in One Shot
How to safely pass post_id and user_id via AJAX to the backend (prevent user from changing it via JS)?