Tagged Questions
1
vote
1answer
50 views
Why Better WP security plugin returns 418 I'm a Teapot “error”?
I am working on the Wordpress website and all of a sudden after deploying it on the server, I started seeing a problem where some of the pages on my website return 418 I'm a Teapot as Response status ...
0
votes
1answer
45 views
Is this plugin safe to run?
This is an extract of code from a wordpress plugin. Is it safe to run despite the variables not being filtered? Also does the wpdb class filter to prevent any injection?
list($email_id, $user_id, ...
1
vote
0answers
149 views
Security - Ajax and Nonce use [closed]
I'm developing a site which posts a number of ajax calls from jquery to PHP and returns data from PhP to jquery.
Everything is working, but i'd to know if my approach to handling the calls is ok, in ...
2
votes
2answers
389 views
Renaming wp-content folder dynamically
Is it possible to rename the wp-content folder dynamically? I am building a custom framework to use on themes and it would be nice to set it up where it does everything on its own.
I am using this ...
0
votes
1answer
86 views
Security updates to 3.3.2
I know all security updates are important but given that how important on a scale from 1 to 10 is it to upgrade from 3.1.3 to 3.3.2.
I have some sites that need to be upgraded but the host has me ...
3
votes
2answers
1k views
How do I create a WP user outside of Wordpress and auto login?
I've built a directory of members on a non-WP site (using php and mysql). Each member can log in and update their details using a username and password.
I want to be able to get this to automatically ...
1
vote
1answer
255 views
Detect session/cookie variable in wordpress to prevent access to documents
<?php
@session_start();
If (!array_key_exists(‘authed’, $_SESSION))
{
include ‘not_authed.inc’;
exit();
}
// go about your business.
?>
and i'm trying to add that to this:
...
0
votes
3answers
358 views
WP Insert Post If user refreshes override new post
WP Insert Post is a very simple and easy to use function. Currently I have it set up on event triggered by whether a user is logged in during a booking to ratify their booking in its own page. My ...
2
votes
2answers
767 views
Correct Approach for Validating Custom Field Input
I have a custom post type with several custom fields. I am looking to do some validation on these fields because they will be used downstream by other services. So, it is important that it can't be ...
0
votes
1answer
145 views
security concerns if using html data-* attribute for l10n?
I need to pass a localized multidimensional javascript object to a page. The object is constructed using php and represents some wp-theme settings. I cant find a way to utilize wp_localize_script for ...
4
votes
2answers
463 views
How Attackers write script into my php files?
I have a blog created with wordpress, now i have a problem. Attackers writes javascript codes into my files.
Let's assume i have holes in my plugin scripts, but how can they write into php files?
...
1
vote
2answers
138 views
What may be causing failure of auto-install features in Wordpress (v3.0.3)?
What may be causing the installation errors I continue to get when trying to auto update anything in Wordpress? I've been manually upgrading everything for quite some time, and I've tried all sorts ...
