Five common mistakes in custom WordPress REST endpoints
An always-true permission_callback, unvalidated input and data leaks — mistakes that show up again and again in technical reviews.
- Security
- WordPress
./archive
Category: WordPress
Connecting blocks to post meta with the Block Bindings API
Instead of building a custom block to show one field, connect a core paragraph or button straight to post meta.
- WordPress
Interactive blocks with the Interactivity API, no extra framework
WordPress's Interactivity API is built for light interactions inside blocks. A real example from server to client.
- Architecture
- WordPress
Autoloaded options: the hidden cost in every WordPress request
Every WordPress request loads all autoloaded options. If that set has grown to megabytes, the whole site is slow.
- Performance
- WordPress