Tagged Questions
0
votes
3answers
105 views
How to stop direct HTTP POST to a PHP script?
I have a form on my site, created using Contact Form 7 with Captcha. Contents of the form when POSTed are being sent to a PHP script, the "action" attribute of the form is set to ...
2
votes
1answer
154 views
Stop wordpress automatically escaping $_POST data
I have a custom front end form which creates a custom post type post and have just discovered WordPress automatically escapes $_POST data in the same way that Magic Quotes does.
I have Magic Quotes ...
1
vote
1answer
60 views
Where should my plugin POST to?
I'm creating a simple plugin to set a page as a homepage from the list pages (to appear next to edit, preview, trash actions etc), I was just wondering what that the most appropriate/secure place to ...
-1
votes
1answer
131 views
Will my Wordpress site become vulnerable after adding this functions which allows more HTML tags for subscribers?
I was thinking of adding the following lines of code to my functions.php file:
/**
* Change the default list of allowed html tags
*/
add_action('init', 'edittag', 10);
function edittag() {
...
1
vote
1answer
425 views
How Could I sanitize the receive data from this code
<form id="tellastory" method="post" action="">
<label for="fullname">Full Name </label>
<input id="fullname" name="fullname" type="text" maxlength="255" value=""/>
...
