15 articles
Every article tagged Plugins, newest first. Search all articles
Enterprise7 min read
Must-use plugins in WordPress: what belongs there and how to load them
WordPress MU plugins are PHP plugins that WordPress loads automatically from a special directory before normal plugins. Use them for code that is part of the platform and must stay enabled, then keep optional features and third-party packages in the normal plugins directory.
Development5 min read
WordPress plugin database migrations with dbDelta, done safely
WordPress plugin database migrations should compare a stored schema version with the version your plugin expects, then run only the missing steps. Use dbDelta() for table creation and supported schema changes, and use explicit, guarded migrations for destructive or unsupported changes.
Security8 min read
WordPress plugin supply chain security: when the update itself is the attack
WordPress plugin supply chain security treats the update channel itself as something you must verify, not just a way to receive fixes. Use trusted sources, inspect unusual releases, verify installed files, and stage updates so one bad package does not reach every site at once.
Development7 min read
WordPress plugin unit testing with wp-env and PHPUnit
WordPress plugin unit testing stays repeatable when pure PHP tests stay small and WordPress integration tests run in a wp-env environment. Set up wp-env, bootstrap the WordPress PHPUnit files through WP_TESTS_DIR, write tests with WP_UnitTestCase, then run the same command in GitHub Actions.
Monitoring8 min read
WordPress plugin vulnerability monitoring: from alert to fix
WordPress vulnerability monitoring works when you keep a current inventory of installed plugins and themes. Compare exact versions with trusted vulnerability data, then record what you did with each match.
Development6 min read
How to write a custom WP-CLI command for your plugin
A WP CLI custom command belongs in your plugin when a maintenance or data task needs a repeatable command-line interface. Register a command class only when WP-CLI is running, describe its arguments in PHPDoc, then add dry-run handling, bounded batches, machine-readable output and exit codes.