Escaping is only necessary when you have no full control of the the thing you are echoing. So as long as $folder is a variable that you have defined yourself, there’s no real need to escape. But if there is user input involved, there is esc_html, to be used as follows: echo esc_html (“this input … Read more
WordPress search shows protected content
User media folder for each users on registration
Hide plugins and theme from public
Website Captcha Error: The reCAPTCHA wasn’t entered correctly
Double check mod_security and ask hosting to check its logs. It can be configured to ignore .htaccess and obscure 404 in admin seems like something it does at times. I had to ask my hosting to explicitly whitelist WP core files some files in mod_security on their end for everything to work properly.
Have a look at this excellent question and answers on Server Fault that discusses how to secure your LAMP stack. Make sure your FTP user can only access the directories you want. Setup sudo to allow a non root user to run commands as root. Lock down your ssh so that root cannot log in … Read more
Q: 1.) Is this browser compatible? Yes, for all browsers supporting jQuery data(). jQuery is generally supported by most modern browsers. Q: 2) Are there any security concern to be aware of as compared to using wp_localize_script? wp_localize_script() is mainly doing the same but it’s keeping the data on the serverside and not within the … Read more
In wordpress you can do that with so called nonces: WordPress Nonces (Codex) Add a nonce to your form and when send, check if the nonce is correct. The next time the form get’s submitted, the nonce isn’t correct any longer, so if you check for that you can prevent replaying the data into your … Read more
You could call a function whenever a user publishes a post (checkout the publish_post action here) In this function you would first check how many posts your user has already published, and only allow the new post to be published if this number is within a range you specify (ie. < 100) Then you would … Read more