I'd like to put text areas in a theme options area to allow users to easily add analytics code, scripts, and css.

Is it silly to worry about malicious code being inserted via un-sanitized theme option text areas when, theoretically, a user could add malicious code just as easily via the standard wordpress theme editor?

These types of theme options would be so helpful, but I'm struggling with the lack of sanitation/validation that comes with implementation.

  • Please read about "cross-site script attacks". Your question currently is pretty vague and unclear. Maybe you want to rework it and bring it on topic. As it stands it could also (maybe better) be asked on SO. Hint: You can flag your question and ask the mods to move it. – kaiser Sep 26 '12 at 23:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.