Overview: Validating Options with the WordPress Settings API This tutorial explains, in full detail, how to validate and sanitize plugin or theme options using the WordPress Settings API in PHP. You will learn how to register settings, add sections and fields, render fields, and — critically — validate or sanitize user input with callbacks. The […]
Overview This tutorial shows how to build a single-page application (SPA) for plugin or theme settings inside the WordPress admin using React (JavaScript). It covers the complete flow: plugin scaffolding, registering an admin page, enqueuing a bundled React app, secure REST API endpoints to read/update settings, development/build tooling, state management, validation, security (capabilities, nonces, sanitization), […]
Overview This tutorial shows everything needed to create custom and dismissible WordPress admin notices in PHP. It covers the native WordPress notice markup, how to control where and when notices appear, how to make notices dismissible either temporarily (query-string) or persistently (per-user, via AJAX), accessibility considerations, security (nonces and capability checks), multisite nuances, styling and […]
Overview This article explains, in full detail, how to send Google Analytics events from a WordPress block (Gutenberg) using JavaScript. It covers GA4 vs Universal Analytics, adding the tracker to WordPress, sending events from the block on the front-end and in the editor, using Google Tag Manager (dataLayer), recommended event schema and parameters, debugging and […]
Introduction This article is a complete, practical tutorial for implementing GDPR-compliant consent for tracking in a WordPress site using JavaScript and PHP. It explains legal principles briefly, shows recommended consent categories, provides front-end cookie banner and consent manager implementations, explains how to block and conditionally load trackers, and shows secure server-side checks and optional logging. […]
Overview: Why restrict upload MIME types in WordPress WordPress allows file uploads through the Media Library, REST API endpoints, custom upload handlers and third-party plugins. By default WordPress controls which file extensions and MIME types are acceptable, but server configuration, browser behavior and user-supplied data can make MIME type checks unreliable. Restricting allowed MIME types […]
Introduction — middleware, controls and side effects in WordPress data stores When building complex Gutenberg blocks or administrative UI in WordPress, you will often need to perform asynchronous side effects (HTTP requests, local cache writes, background tasks) while keeping your data layer testable and predictable. The @wordpress/data package uses the concept of controls (middleware-like handlers) […]
Introduction This article explains, in exhaustive detail, how to register a custom store with @wordpress/data (JavaScript) and use it correctly inside a WordPress block, plugin or admin UI. It covers the conceptual background, exact APIs, synchronous and asynchronous patterns (controls and resolvers), React integration (useSelect/useDispatch and HOCs), createReduxStore convenience, TypeScript considerations, testing, debugging, advanced topics […]
Why code-splitting blocks matters for the WordPress editor Problem: Many block plugins bundle every blocks editor code into a single large JavaScript file. The Gutenberg editor must parse and execute that file on editor load, which increases time-to-interactive, memory usage, and CPU on lower-end devices. Goal: Load only the JavaScript that the editor actually needs […]
Introduction This article is a comprehensive, practical walkthrough showing how to use Vite to develop WordPress blocks and front-end assets. It covers full project setup, development-server (HMR) workflow, production builds, integration with WordPress (editor and front-end), manifest handling, CSS/Sass, images, and tips for common pitfalls. All code examples are included and ready to copy — […]
