I have created a plugin wherein I have a custom post type. I am using post_content
for some simple text. I do not need to offer any fancy editing or insertion of data for this field, so I looked for a way to remove the buttons from the tinyMCE editor.
I never found a very good solution so I removed the editor
from the custom post type supports in the register function.
'supports' => array('title','revisions','thumbnail'),
Then to create an area for the content to go I simply echo a textarea
in the back end form with the name
and id
attribute as "content"
.
<tr>
<th scope="row">
<label for="content">Review body</label>
</th>
<td>
<textarea style="height: 300px; width: 100%" autocomplete="off" cols="40" name="content" id="content">' . $post->post_content . '</textarea>
</td>
</tr>
This works exactly as I want, and is pretty simple.
The question is, am I losing sanitation or skipping security measures by doing this?