Nonce generated is product of: user ID time $action argument The action is important part and needs to precisely describe what kind of event you are verifying. So if your actions are create something and delete something, your nonces should be generated for example like my_prefix_create and my_prefix_delete and verified accordingly.
You can temporarily remove the filter that adds paragraph tags: // remove the filter remove_filter( ‘the_content’, ‘wpautop’ ); // output content the_content(); // add the filter again add_filter( ‘the_content’, ‘wpautop’ );
If you are looking for a shortcode like this: [question text=”What has four legs?” answer=”Horse” message=”Right answer!” messageid=”message1″ ] with output like this: then here is a very simple non-jQuery skeleton version: add_shortcode(‘question’,’question_func_wpse_88192′); function question_func_wpse_88192($atts, $content = null ){ extract( shortcode_atts( array( ‘text’ => ”, ‘answer’ => ”, ‘message’ => ‘Right answer!’, ‘messageid’ => ‘message’, … Read more
First of all I would recommend you to rename your function to wpPartSanitize_settings, because this function doesn’t validate anything. As it doesn’t validate anything, then you aren’t able to “inform” administrator that one input is invalid. Nevertheless, to create your hook for wpPartValidate_settings filter, just do it like this: add_filter( ‘wpPartValidate_settings’, ‘wpse8170_sanitize_settings’, 10, 2 ); … Read more
When you get those “headers already sent” messages, it is usually one of several things: You are echoing something when you shouldn’t be, which is any time before get_header on the front end. I can’t remember exactly where the window is on the backend. You are doing something that is triggering a warning or notice … Read more
That code is behind a paywall but assuming that is follows the free version fairly closely, that attribute appears to be hard-coded and I don’t see a filter. That is a lot of code to dig through and it would be easy to miss something, but I don’t think you can alter that without hacking … Read more
There are functions available for url sanitization. esc_url() is one of them.
WordPress is running Jquery in noconflict mode. (WordPress Codex Reference) or read this brief article I posted some time ago. View it here. You need to replace: $(document).ready(function(){ With this: jQuery(document).ready(function($){ So all together, try this: jQuery(document).ready(function($){ $(“#contact_form”).validate({ rules: { name: “required”, email: { required: true, email: true }, message: “required” }, messages: { name: … Read more
there are two possible injection vectors, server side and client side server side – Just don’t write your own SQL and use the more high level DB access APIs, in your case probably update_option. If you must to access the DB at lower level make sure the API use wpdb::prepare while generating the SQL, which … Read more
Before the foreach loop: foreach($authors as $author) { Add this empty option element: echo ‘<option value=”0″></option>’; Hope it works! 🙂