Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options answers only user 3966

Strengthening themes, plugins and core installation to prevent intrusion.

3
votes
You can safely move wp-config.php up one directory from the base WordPress install. You don't need to "name" any directories anything differently, as the relevant directory already exists. Also, WordP …
answered Aug 11 '11 by Chip Bennett
9
votes
No. WordPress sanitizes the search query. To use the sanitized search query, use the_search_query() to echo, or get_search_query() to return, the search query. Edit Based on your edit: Don't use …
answered Aug 30 '12 by Chip Bennett
80
votes
Have you identified the exploit vector? If not, you may be leaving yourself open to future exploit. Other things to consider: Change WordPress admin user passwords - done Change Hosting account use …
answered Jun 10 '11 by Chip Bennett
16
votes
Here is a modified checklist, based on my current (work-in-progress) settings/data security checklist used for reviewing Themes (the principles should be no different for Plugins than they are for … , rather than relying on copy-and-paste scripts from website tutorials, such as the ones below, which are outdated, and do not include proper data security: http://www.1stwebdesigner.com/wordpress/how …
answered Mar 30 '11 by Chip Bennett
1
vote
Prefix function and variable names Plugins should prefix all options, custom functions, custom variables, and custom constants with plugin-slug. Themes should prefix all options, custom functions, c …
answered Mar 30 '11 by Chip Bennett
7
votes
Save data in single array Plugins and Themes should save options in a single array, rather than create multiple options for the settings page. The use of the Settings API would handle this.
answered Mar 30 '11 by Chip Bennett
1
vote
Just use the post_password_required() conditional: <?php if ( post_password_required() ) { // Post is password-protected; do something } else { // Post is NOT password-protected; do something …
answered Jul 19 '11 by Chip Bennett
1
vote
in this list of TimThumb 2.0 enhancements that changes the fundamental functionality of the script. The enhancements provide some additional security-through-obscurity, but in reality, obscurity is … not security. Until I see objective evidence to the contrary, I stand by my admonition to use the core image-resizing and post thumbnail functionality only and always. …
answered Jun 4 '12 by Chip Bennett
5
votes
include proper data security, such as those listed below. Examples of what not to do: How to create an options page for your wordpress theme (1stwebdesigner.com) Create an awesome WordPress theme options page part 1 (wpshout.com) …
answered Mar 30 '11 by Chip Bennett
0
votes
Add settings pages to appropriate sections of admin menu Plugins should use the add_options_page() function to add the Plugin Settings Page to the Settings menu, rather than using add_menu_page() to …
answered Mar 30 '11 by Chip Bennett
6
votes
Check for appropriate capability when adding and outputting settings pages Plugins should use an appropriate capability (e.g. manage_options) for the capability to add the settings page. Themes shou …
answered Mar 30 '11 by Chip Bennett
1
vote
For checkboxes and select options, Plugins and Themes should use the checked() and selected() functions for outputting checked="checked" and selected="selected", respectively.
answered Mar 30 '11 by Chip Bennett
12
votes
); ?>">anchor</a> Here is a great video of Mark Jaquith explaining the usage of the escaping functions: Theme & Plugin Security
answered Mar 30 '11 by Chip Bennett
13
votes
Jaquith) Improving security in WordPress plugins using Nonces (Vladimir Prelovac) 5 tips for using AJAX in WordPress > 3. Use nonces and check for permission (Gary Cao) …
answered Mar 30 '11 by Chip Bennett
4
votes
Use Settings API Plugins and Themes should use the Settings API, which is easier to use, more secure, and takes care of a lot of the hard work of settings pages: Settings API (Codex) For a good t …
answered Mar 30 '11 by Chip Bennett

15 30 50 per page