Overview This tutorial shows, step by step, how to create a WordPress admin options screen built in React that uses the official @wordpress/data package for state management. It covers the full flow: scaffolding, registering the admin page, enqueueing the JavaScript bundle, registering a data store with actions/controls/reducers/selectors, implementing a REST route to persist options, and […]
Overview This article explains in detail how to structure a must-use (mu-) plugin for WordPress that uses an autoloader in PHP. It covers mu-plugin loading rules, recommended file layout, several autoload strategies (PSR-4 simple autoloader, classmap caching, Composer integration), a safe bootstrap/loader pattern for mu-plugins, how to perform one-time setup (activation-like), and performance/security best practices. […]
Introduction Purpose: This article explains, in exhaustive detail, how to apply PSR-4 autoloading in a WordPress plugin or theme. It covers recommended project structure, composer configuration, the plugin/theme bootstrap code, fallback autoloaders for environments without Composer, optimization and deployment strategies, debugging tips, and common pitfalls. Wherever examples are used, complete code samples are provided. What […]
Why integrate Composer into a WordPress plugin? Using Composer inside a WordPress plugin brings dependency management, modern autoloading (PSR-4), reproducible installs, and the ability to consume third-party libraries reliably. It enables you to keep plugin code modular and unit-testable, avoid reinventing utilities like HTTP clients or validation, and create a predictable build process. However, integration […]
Why use environment variables and dotenv for credentials in WordPress Using environment variables (env vars) or a dotenv (.env) file to store credentials and configuration for WordPress separates secrets from code, reduces the risk of accidentally committing passwords to a VCS, allows different values per environment (development, staging, production), and simplifies automated deployments. Environment-based configuration […]
Introduction This article is a comprehensive, step-by-step tutorial for moving the WordPress wp-content directory to a custom path by using constants. It covers reasons to move wp-content, required preparations, exact code snippets to add to wp-config.php, filesystem operations, webserver configurations for non-webroot locations, database updates, WP-CLI usage, multisite considerations, common pitfalls, testing and rollback procedures, […]
Introduction This article is a complete, detailed tutorial for logging user activity in WordPress using hooks in PHP. It covers architecture decisions, database schema, a production-ready plugin scaffold, example hook implementations (login, logout, registration, profile updates, failed logins, AJAX, comments, etc.), an admin UI for viewing and exporting logs, alternatives (custom post type, file-based logging), […]
Overview This article is a comprehensive, production-ready tutorial showing how to limit login attempts and log IP addresses in PHP for WordPress. It covers design choices, privacy considerations, multiple implementation options (transients, custom DB table), robust helper methods for fetching client IPs behind proxies, exponential backoff lockouts, admin UI basics, and recommended thresholds and deployment […]
Overview This article shows a complete, practical tutorial to add a basic two-factor authentication (2FA) by email for WordPress logins using PHP. The approach is implemented as a self-contained plugin (drop-in) and works by intercepting a successful username/password authentication, sending a one-time numeric code to the users registered email, and requiring that code to complete […]
Overview This article explains, in full detail, how to enforce strong passwords in WordPress using server-side filters and actions. Client-side password meters (JavaScript) help users choose better passwords, but they can be bypassed enforcing rules on the server is the only reliable way to make sure every account meets your password policy. Well cover every […]
