W-Shadow.com

One thing that many developers are not aware of is that WordPress automatically adds magic quotes to request variables. This means that all quotes, backslashes and null-byte characters will be escaped with a backslash. Even if you disable magic quotes in php.ini, WordPress will apply them to $_GET, $_POST, $_COOKIE and other superglobals anyway. If […]

After a long delay, a new version of my PluginUpdateChecker library is finally ready for release. Read on to find out what’s new, or go straight to the download page. For those of you not familiar with this library, here’s a short summary: You can use it to add automatic update support to any WordPress plugin. Especially […]

There’s one thing that always annoys me when installing new plugins: No matter how popular or obscure the plugin, the first few seconds (or minutes) are usually wasted on trying to figure out where it put its settings page. We’ve all been there. Trawling the admin menu, looking for that elusive link that will actually […]

As you may already know, WordPress stores top-level menus in a global $menu array. The array indexes correspond to menu positions, and each array item contains the properties of a single menu – the menu title, required capability, URL, and so on. Separator items are structured just like normal menus, except they also have a […]

You can use the undocumented all_plugins filter to control what plugins will show up on the “Plugins” page. WordPress applies this filter to the list of all installed plugins just before sorting it into “active”, “inactive”, “update available” and other categories and displaying it to the user. The list of plugins is an array indexed […]