I have created a plugin wherein I have a custom post type. I am using
post_content for some simple text. I do not need to offer any fancy editing or insertion of data for this field, so I looked for a way to remove the buttons from the tinyMCE editor.
I never found a very good solution so I removed the
editor from the custom post type supports in the register function.
'supports' => array('title','revisions','thumbnail'),
Then to create an area for the content to go I simply echo a
textarea in the back end form with the
id attribute as
<tr> <th scope="row"> <label for="content">Review body</label> </th> <td> <textarea style="height: 300px; width: 100%" autocomplete="off" cols="40" name="content" id="content">' . $post->post_content . '</textarea> </td> </tr>
This works exactly as I want, and is pretty simple.
The question is, am I losing sanitation or skipping security measures by doing this?