WordPress Snippet

$string= implode( '', file( 'example.txt' ) );
 <a href="https://twitter.com/intent/tweet?url=' . esc_url( get_permalink() ) . '">icon></a>
`'default' => get_theme_mod( 'body_color', '#ffffff' ), // change the default to the correct color`
 add_filter( 'widget_text', 'do_shortcode' );

echo ''. __( 'WordPress ', 'iograficathemes' ) .get_queried_object()->name. '
';
single_term_title(), single_cat_title(), or single_tag_title(),
remove_action('wp_head', 'wp_generator');
function remove_header_info() { 
 remove_action('wp_head', 'rsd_link'); 
 remove_action('wp_head', 'wlwmanifest_link'); 
 remove_action('wp_head', 'wp_generator'); 
 remove_action('wp_head', 'start_post_rel_link'); 
 remove_action('wp_head', 'index_rel_link'); 
 remove_action('wp_head', 'adjacent_posts_rel_link');// for WordPress < 3.0 
 remove_action('wp_head', 'adjacent_posts_rel_link_wp_head'); // for WordPress >= 3.0 
} 
add_action('init', 'remove_header_info');
$html			= '<h1>hello world&nbsp;hello world&nbsp;hello world&nbsp;hello world&nbsp;</h1>';
$html			 .= '<h1>hello world&#160;hello world&#160;hello world&#160;hello world&#160;</h1>';

$esc_html		= esc_html( $html );
$textarea_html	= esc_textarea( $html );
printf( '<div><textarea style="width:640px;height:100px;">%1$s</textarea></div>', $esc_html );
printf( '<div><textarea style="width:640px;height:100px;">%1$s</textarea></div>', $textarea_html );
kevinhaig 
[3:26 AM] 
@greenshady I know your post says otherwise but is wp_kses_post() adequate sanitization for css boxes, given we accept for textarea boxes?

superwinner [3:31 AM] 
can you sanitize css with kses :simple_smile:?

jcastaneda [3:35 AM] 
Jetpack uses `wp_kses_split` for it.

kevinhaig [3:35 AM] 
well I think it is an issue of whether it is secure doing it that way

kevinhaig [3:36 AM]
@greenshady: recommends `wp_filter_nohtml_kses()` or `wp_strip_all_tags()`

kevinhaig [3:37 AM]
but many authors push their textareas through wp_kses_post()

kevinhaig [3:39 AM]
I realize wp_kses_post() is good for html allowed textarea boxes. So really what is the difference in a css box....end use?
Hello everyone!
This is my first time reviewing a theme here, so I have a question...

On the theme I'm reviewing I have a ticket where the theme author is using
hybrid as a base for his own theme. Hybrid however uses shortcodes since it
was published when these were allowed (at least I think so). Do we allow
shortcodes to themes that are based on frameworks already published on .org?
Shortcodes intended to be used in post content (i.e. shortcodes added to
the post editor) are not allowed, ever.

Shortcodes used elsewhere (such as for configuring the site footer, which
IIRC is how Hybrid uses shortcodes) is fine.

The determining factor is the intended use of the shortcodes, as defined by
the Theme.
theme-slug
theme-slug
&amp;lt;?php
function oenology_enqueue_comment_reply() {
	if ( is_singular() &amp;amp;&amp;amp; comments_open() &amp;amp;&amp;amp; get_option( 'thread_comments' ) ) {
		wp_enqueue_script( 'comment-reply' );
	}
}
add_action( 'wp_enqueue_scripts', 'oenology_enqueue_comment_reply' );
?&amp;gt;
$string= implode( '', file( 'example.txt' ) );
 <a href=" get_permalink( ) . '">icon></a>
`'default' => get_theme_mod( 'body_color', '#ffffff' ), // change the default to the correct color`
 add_filter( 'widget_text', 'do_shortcode' );

echo ''. __( 'WordPress ', 'iograficathemes' ) .get_queried_object()->name. '
';
single_term_title(), single_cat_title(), or single_tag_title(),
remove_action('wp_head', 'wp_generator');
function remove_header_info() { 
 remove_action('wp_head', 'rsd_link'); 
 remove_action('wp_head', 'wlwmanifest_link'); 
 remove_action('wp_head', 'wp_generator'); 
 remove_action('wp_head', 'start_post_rel_link'); 
 remove_action('wp_head', 'index_rel_link'); 
 remove_action('wp_head', 'adjacent_posts_rel_link');// for WordPress < 3.0 
 remove_action('wp_head', 'adjacent_posts_rel_link_wp_head'); // for WordPress >= 3.0 
} 
add_action('init', 'remove_header_info');
$html			= '<h1>hello world&nbsp;hello world&nbsp;hello world&nbsp;hello world&nbsp;</h1>';
$html			 .= '<h1>hello world&#160;hello world&#160;hello world&#160;hello world&#160;</h1>';

$esc_html		= esc_html( $html );
$textarea_html	= esc_textarea( $html );
printf( '<div><textarea style="width:640px;height:100px;">%1$s</textarea></div>', $esc_html );
printf( '<div><textarea style="width:640px;height:100px;">%1$s</textarea></div>', $textarea_html );
kevinhaig 
[3:26 AM] 
@greenshady I know your post says otherwise but is wp_kses_post() adequate sanitization for css boxes, given we accept for textarea boxes?

superwinner [3:31 AM] 
can you sanitize css with kses :simple_smile:?

jcastaneda [3:35 AM] 
Jetpack uses `wp_kses_split` for it.

kevinhaig [3:35 AM] 
well I think it is an issue of whether it is secure doing it that way

kevinhaig [3:36 AM]
@greenshady: recommends `wp_filter_nohtml_kses()` or `wp_strip_all_tags()`

kevinhaig [3:37 AM]
but many authors push their textareas through wp_kses_post()

kevinhaig [3:39 AM]
I realize wp_kses_post() is good for html allowed textarea boxes. So really what is the difference in a css box....end use?
Hello everyone!
This is my first time reviewing a theme here, so I have a question...

On the theme I'm reviewing I have a ticket where the theme author is using
hybrid as a base for his own theme. Hybrid however uses shortcodes since it
was published when these were allowed (at least I think so). Do we allow
shortcodes to themes that are based on frameworks already published on .org?
Shortcodes intended to be used in post content (i.e. shortcodes added to
the post editor) are not allowed, ever.

Shortcodes used elsewhere (such as for configuring the site footer, which
IIRC is how Hybrid uses shortcodes) is fine.

The determining factor is the intended use of the shortcodes, as defined by
the Theme.
theme-slug
theme-slug
&amp;lt;?php
function oenology_enqueue_comment_reply() {
	if ( is_singular() &amp;amp;&amp;amp; comments_open() &amp;amp;&amp;amp; get_option( 'thread_comments' ) ) {
		wp_enqueue_script( 'comment-reply' );
	}
}
add_action( 'wp_enqueue_scripts', 'oenology_enqueue_comment_reply' );
?&amp;gt;

2017/4/14

2016/9/13

2016/9/1

2016/7/8

2016/6/27

2016/5/25

2016/3/28

2016/3/24

2016/3/24

2016/3/22

2016/3/22

2015/3/4

2016/2/17

2016/1/30

2015/11/20

2015/11/18

2015/11/7

2015/10/21

2015/10/15

2015/10/8

Automation here we come!

2015/10/5

2015/9/26

2015/9/18

2015/9/10

2015/9/2

Memo

2015/9/1

2015/7/28

2015/7/3

2015/6/28

2015/6/9

2015/6/5

2015/6/3

2015/5/11

2015/5/10

2015/4/30

2015/4/15

'. __( 'WordPress ', 'iograficathemes' ) .get_queried_object()->name. '

2015/4/15

2015/2/16

2014/12/3

2014/10/17

2014/10/17

*reduxframework は、使っちゃいけません

*Post Format Metaboxの禁止

Thank’s and Regard’s*

Akhlesh Nagar*

2014/9/24

2014/9/18 アクセシビリティガイドライン改定

2014/8/3

2014/7/9

iTunes link removal

Replacement video

Span removal

Tables

Images

2014/6/19

2014 / 6 /14

2014/2/27

*jQuery Masonry

2014/2/7

2014/1

2013/11/13

2013/10/9

*クラス、メンバー変数のプレフィックスのルールがなくなる

*サニタイズについて

Hello. I am using Options Framework with my theme. I have properly sanitized all input using all the necessary functions including wp_kses. Is it neccessary to sanitize it on the output?

The general rule is: sanitize on input, escape on output.

I was just about to say the same thing. If you need a good example of how to sanitize this based on the `unfiltered_html` cap, check out the WordPress text widget in `wp-includes/default-widgets.php`.

2013/7/8

2013/5/10

WordPress3.51 (?)

Theme Namespacing

WordPress3.5

WordPress 3.4

WordPress 3.3

レビュー優先度の変更

レビューの観点

テーマの記述方法について

Hello.
I am using Options Framework with my theme. I have properly sanitized all input using all the necessary functions including wp_kses.
Is it neccessary to sanitize it on the output?

I was just about to say the same thing. If you need a good example of
how to sanitize this based on the `unfiltered_html` cap, check out the
WordPress text widget in `wp-includes/default-widgets.php`.

Hello.
I am using Options Framework with my theme. I have properly sanitized all input using all the necessary functions including wp_kses.
Is it neccessary to sanitize it on the output?

I was just about to say the same thing. If you need a good example of
how to sanitize this based on the `unfiltered_html` cap, check out the
WordPress text widget in `wp-includes/default-widgets.php`.