wordpress-core

What problem does it solve?

This Skill provides foundational knowledge for developing WordPress plugins, ensuring they are secure, performant, and adhere to best practices. It helps developers avoid common security vulnerabilities and leverage WordPress's powerful API system, saving time on debugging and refactoring.

Core Features & Use Cases

• Security Principles: Implement critical security measures like input sanitization, output escaping, nonces, and capability checks to protect against common attacks (e.g., CSRF, XSS, SQL Injection).
• Hooks System: Master WordPress actions and filters to extend and modify core functionality without altering core files, ensuring future compatibility and maintainability.
• Database Operations: Safely interact with the WordPress database using $wpdb and prepared statements to prevent SQL injection, ensuring data integrity and security.
• Use Case: Develop a new WordPress plugin that stores user-submitted data. This Skill guides you through sanitizing all user input, escaping output for display, using nonces for form submissions, and performing secure database inserts with $wpdb->prepare(), ensuring your plugin is robust and secure from day one.

Quick Start

Create a new WordPress plugin called 'my-custom-widget'. Outline the basic file structure and add a plugin header.