What is the correct way of validating running code when a particular role accesses a screen?

Reducing the number of checks increases the performance of your code, so yes, check is_user_logged_in() and current_user_can() as few times as you can. For executing functions depending on the admin page, I’d probably attach callbacks to load-{$pagenow} hook (untested): function wpse417218_do_something_for_edit_page() { if ( ‘page’ !== get_current_screen()->id ) { return; } if ( ! current_user_can( … Read more

jQuery – Make multiple field Required with warning at WP Admin backend

I fixed the issues by replacing default HTML warning message using function setCustomValidity(). The default HTML warning message is issued at invalid field so that users know where to correct: // HTML: <input type=”text” name=”post_title” size=”30″ value=”” id=”title”> <input type=”text” name=”price” size=”30″ value=”” id=”price”> // jQuery: // Make post title field required – when it … Read more

how to sanitizing $_POST with the correct way?

Instead of looping through the array, use this: map_deep( $form_data, ‘sanitize_text_field’ ); (see the User Notes in the function doc: https://developer.wordpress.org/reference/functions/sanitize_text_field/ ) The docs state that Checks for invalid UTF-8, Converts single < characters to entities Strips all tags Removes line breaks, tabs, and extra whitespace Strips percent-encoded characters So you could also use the … Read more