First of all I would recommend you to rename your function to wpPartSanitize_settings, because this function doesn’t validate anything. As it doesn’t validate anything, then you aren’t able to “inform” administrator that one input is invalid. Nevertheless, to create your hook for wpPartValidate_settings filter, just do it like this: add_filter( ‘wpPartValidate_settings’, ‘wpse8170_sanitize_settings’, 10, 2 ); … Read more
When you get those “headers already sent” messages, it is usually one of several things: You are echoing something when you shouldn’t be, which is any time before get_header on the front end. I can’t remember exactly where the window is on the backend. You are doing something that is triggering a warning or notice … Read more
That code is behind a paywall but assuming that is follows the free version fairly closely, that attribute appears to be hard-coded and I don’t see a filter. That is a lot of code to dig through and it would be easy to miss something, but I don’t think you can alter that without hacking … Read more
There are functions available for url sanitization. esc_url() is one of them.
WordPress is running Jquery in noconflict mode. (WordPress Codex Reference) or read this brief article I posted some time ago. View it here. You need to replace: $(document).ready(function(){ With this: jQuery(document).ready(function($){ So all together, try this: jQuery(document).ready(function($){ $(“#contact_form”).validate({ rules: { name: “required”, email: { required: true, email: true }, message: “required” }, messages: { name: … Read more
there are two possible injection vectors, server side and client side server side – Just don’t write your own SQL and use the more high level DB access APIs, in your case probably update_option. If you must to access the DB at lower level make sure the API use wpdb::prepare while generating the SQL, which … Read more
Before the foreach loop: foreach($authors as $author) { Add this empty option element: echo ‘<option value=”0″></option>’; Hope it works! 🙂
If you take a look in source the condition for this message is get_option(‘require_name_email’). You can control it in Settings > Discussion > Comment author must fill out name and e-mail. The programmatic way could be add_filter( ‘pre_option_require_name_email’, ‘__return_null’ );
Since I do not have a great answer for you after checking logic above (seems okay).. something else I noticed. add_action(‘woocommerce_update_order_review’ … Are you using the most recent update? I see no reference here docs.woothemes.com/wc-apidocs/hook-docs.html or on github depo for that do_action. Here is the current layout for hooks/filters on form-checkout.php.. Are you sure you … Read more
The visual editor is not a textarea, it is an iframe, therefor even if you could set an attribute it will do nothing. You can set the attribute on the hidden textarea that will be sent to the server but since it is hidden I am not sure how an alert about it not being … Read more