When to use esc_url, esc_html, esc_attr, and friends?

Those function are used to produce a valid HTML and not to sanitize input. You should use them anytime you are not 100% sure that what you want to output is a valid HTML for that context.

Should you escape everything? I guess the _s theme people decided that it is better to be safe then sorry, and there is some logic to that.

Related Posts:

  1. Using classes instead of global functions in functions.php
  2. Change admin bar to default:off
  3. How to add custom template tag in wordpress theme?
  4. Can’t change theme name
  5. When to use is_home() vs is_front_page()?
  6. Get the blog page URL set in Options
  7. Worthwhile to restrict direct access of theme files?
  8. Function to return true if current page has child pages
  9. What is the difference between wp_register_sidebar_widget and register_widget?
  10. Display random categories on the front page (Finding and Editing Theme Functions)
  11. Should `get_template_directory_uri()` be escaped?
  12. What are the ADVANTAGES of ORIGINAL wordpress template structure?
  13. List of all theme customizer control types?
  14. Create “File-less” Page Template in Functions.php
  15. How to change admin bar color scheme in MP6 / WP 3.8 front end?
  16. Template for individual post designs
  17. Is it good to rename theme folder downloaded from WordPress.org?
  18. How to sanitize select box values in post meta?
  19. How to edit bbPress template files – WordPress + BuddyPress + bbPress? [closed]
  20. Best practices – Should I create a child theme vs. customizing a framework theme? (such as HTML5 reset)
  21. Worthwhile to restrict direct access of theme files?
  22. How can you develop on a live WordPress installation that is using W3 Total Cache? [closed]
  23. How to disable 3.1 “Admin Bar” via script for the admin user?
  24. Where i should not use if (!defined(‘ABSPATH’)) { exit; }?
  25. What is the best practice for customizing a plugin’s JavaScript/jQuery?
  26. How to change post thumbnail title and alt attributes to post title?
  27. Why might $input (Settings API) be coming through empty?
  28. Set the transport of the Customizer ‘header_image’ core setting to ‘postMessage’
  29. Override default cropping in WordPress [duplicate]
  30. Get password when user registers and save it sha1 into database
  31. Front End Post Submit Form
  32. How do I “unhook” / de-register jQuery so that it’s not called as part of wp_footer();?
  33. Removing the default sidebar from admin panel
  34. Feature Survey – What would you want in a resume theme?
  35. Merging PHP download script into `functions.php`
  36. How the WordPress sidebar works
  37. Is there an error in get_the_tag_list()?
  38. Should we localize custom-made themes / plugins?
  39. Change loop order via form or link (jquery, not URL)
  40. Extend walker – navigation, adding data attribute to a tag
  41. How can I remove the Static Front Page option from the Customizer
  42. Returning Variables back into a template
  43. Set front page as static page [closed]
  44. How to programmatically bring back “excerpts” field in post editor in WP 3.1+
  45. How can i customize the comment list
  46. Allow users to add custom functions to wordpress theme
  47. Change date number to another language/script?
  48. How should I store global information such as a phone number so that it is editable through the CMS?
  49. When developing a distributable Theme, does it HAVE to be “inheritable”?
  50. How to handle theme customization and sass variables
  51. wp_enqueue_scripts not called on search page?
  52. wp_head() not inserting the default stylesheet style.css
  53. Upgrading a custom theme through the Dashboard
  54. Nesting Functions within Functions
  55. Is using eval() ok in this scenario
  56. Custom php page in WordPress theme?
  57. First completely customized theme, where should I start?
  58. WordPress how to override function adjacent_posts_rel_link_wp_head() in link-template.php the correct way
  59. Theme Customizer not loading
  60. Whats the safest way to output custom JavaScript and Css code entered by the admin in the Theme Settings?
  61. Responsive Images – Generating multiple images from Theme Customizer control upload?
  62. How to retrieve an image from a post and display it before excerpt of a post? [duplicate]
  63. Modify Javascript Configuration Options for Theme Customizer Colour Picker
  64. Best practices: Custom theme sidebar menu – hardcode or widget?
  65. Can’t access WordPress functions in file called via Ajax?
  66. Best approach to create sites with Modular Content? [closed]
  67. Modify the Additional CSS section (adding a disclaimer)
  68. Is it safe to enqueue a font style without putting http or https?
  69. How can I customize wp_footer, where is the code that controls what this function does?
  70. What’s the best action to use when you want to do something only once per theme setup?
  71. How to list all images in uploads directory except those that are attached to any post
  72. Version control for both Vagrant config and themes being developed [closed]
  73. More than one meta field in a single meta box?
  74. Customizer API and add_panel(). Panel doesn’t show
  75. Is there a theme function for is_password_protected()?
  76. How to correctly add JQuery in a WP theme?
  77. how do you create an admin interface in plugin for your theme
  78. How to determine which custom header image is being shown
  79. Creating multiple hooks for theme
  80. What is the best way to handle multiple calls to get_template_directory_uri() and similar functions?
  81. Toggle Sidebar Display
  82. Override the filter from plugin in child theme
  83. How to call custom function from functions.php in site-wide template files?
  84. Why is the Links Manager visible?
  85. How to store functions in… functions.php?
  86. Unhook jQuery from WooCommerce via `functions.php`? [closed]
  87. trying to use wp_handle_upload with ajax
  88. Best way to start becoming a wordpress developer
  89. How to add a second stylesheet to the editor
  90. Removing non native customizer settings from a child theme
  91. How to reorganize the items returned by wp_list_comments()?
  92. Should I use include or load_template for including shortcodes, plugins and so on?
  93. which is the best way to customize nav-menu-template.php?
  94. Check if home.php and set home.php as page_on_front
  95. Where should I update_options in a theme?
  96. WP 3.1 upgrade breaks AutoFocus+ theme
  97. Create another “Display Site Title and Tagline” checkbox, “Header Text Color” setting and control
  98. Displaying recent post excerpts on static front page
  99. Using esc_url with a hard coded url
  100. is_customize_preview() like function to check if Customizer “Live Preview” in JavaScript

Leave a Comment

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)