In WordPress the way of handling Ajax calls is a bit different the plain PHP but still very simple, all ajax calls should be to wp-admin/admin-ajax.php and you just define your own functions by hooks, Take a look at What’s the preferred method of writing AJAX in WordPress
I hacked the sh*t out of it. Here is my uggliest solution ever to a simple problem. I am not really happy with this, but it will have to do. For the sake of this example, I will use a custom post type called book and we’re gonna validate a field called ISBN. This solution … Read more
Is ‘sql injection’ already a part of that function or do I need to add my own code? When inserting input to the database you should use prepare method of WPDB class which supports both a sprintf() – like and vsprintf() -like syntax. read more at the codex Are there wordpress form input validation functions … Read more
I’d say, hook into pre_post_update and check what is given via $_POST…
WordPress doesn’t add the frameborder attribute. YouTube does. It’s part of their embed code. If you absolutely must remove it you can use the embed_oembed_html filter to modify the returned HTML: function wpse_308247_remove_frameborder( $html, $url ) { // If the URL to be embedded is from YouTube. if ( strpos( $url, ‘youtube.com’ ) !== false … Read more
There’s no reason a WordPress site can’t pass validation, it’s entirely up to the theme designer.
Ok, I’ve worked this out. You need to copy the complete first section of the `comment_form()’ from wp core. This is the code <?php function comment_form( $args = array(), $post_id = null ) { if ( null === $post_id ) $post_id = get_the_ID(); else $id = $post_id; $commenter = wp_get_current_commenter(); $user = wp_get_current_user(); $user_identity = … Read more
It’s used by sanitize_text_field function to Sanitize a string from user input or from the db.
It seems WP core adds the novlidate attribute to the comment form when your theme has HTML5 support enabled for comment forms (see includes/comment-template.php). To disable it, use remove_theme_support(‘html5’, ‘comment-form’);
You need to use delimiters in order for your regex to work. From the link above When using the PCRE functions, it is required that the pattern is enclosed by delimiters. A delimiter can be any non-alphanumeric, non-backslash, non-whitespace character. so in your case, you could have something like this. Notice how I used the … Read more