@mytechtoday/augment-extensions 0.1.1 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (79) hide show
  1. package/augment-extensions/domain-rules/wordpress/README.md +163 -0
  2. package/augment-extensions/domain-rules/wordpress/module.json +32 -0
  3. package/augment-extensions/domain-rules/wordpress/rules/coding-standards.md +617 -0
  4. package/augment-extensions/domain-rules/wordpress/rules/directory-structure.md +270 -0
  5. package/augment-extensions/domain-rules/wordpress/rules/file-patterns.md +423 -0
  6. package/augment-extensions/domain-rules/wordpress/rules/gutenberg-blocks.md +493 -0
  7. package/augment-extensions/domain-rules/wordpress/rules/performance.md +568 -0
  8. package/augment-extensions/domain-rules/wordpress/rules/plugin-development.md +510 -0
  9. package/augment-extensions/domain-rules/wordpress/rules/project-detection.md +251 -0
  10. package/augment-extensions/domain-rules/wordpress/rules/rest-api.md +501 -0
  11. package/augment-extensions/domain-rules/wordpress/rules/security.md +564 -0
  12. package/augment-extensions/domain-rules/wordpress/rules/theme-development.md +388 -0
  13. package/augment-extensions/domain-rules/wordpress/rules/woocommerce.md +441 -0
  14. package/augment-extensions/domain-rules/wordpress-plugin/README.md +139 -0
  15. package/augment-extensions/domain-rules/wordpress-plugin/examples/ajax-plugin.md +1599 -0
  16. package/augment-extensions/domain-rules/wordpress-plugin/examples/custom-post-type-plugin.md +1727 -0
  17. package/augment-extensions/domain-rules/wordpress-plugin/examples/gutenberg-block-plugin.md +428 -0
  18. package/augment-extensions/domain-rules/wordpress-plugin/examples/gutenberg-block.md +422 -0
  19. package/augment-extensions/domain-rules/wordpress-plugin/examples/mvc-plugin.md +1623 -0
  20. package/augment-extensions/domain-rules/wordpress-plugin/examples/object-oriented-plugin.md +1343 -0
  21. package/augment-extensions/domain-rules/wordpress-plugin/examples/rest-endpoint.md +734 -0
  22. package/augment-extensions/domain-rules/wordpress-plugin/examples/settings-page-plugin.md +1350 -0
  23. package/augment-extensions/domain-rules/wordpress-plugin/examples/simple-procedural-plugin.md +503 -0
  24. package/augment-extensions/domain-rules/wordpress-plugin/examples/singleton-plugin.md +971 -0
  25. package/augment-extensions/domain-rules/wordpress-plugin/module.json +53 -0
  26. package/augment-extensions/domain-rules/wordpress-plugin/rules/activation-hooks.md +770 -0
  27. package/augment-extensions/domain-rules/wordpress-plugin/rules/admin-interface.md +874 -0
  28. package/augment-extensions/domain-rules/wordpress-plugin/rules/ajax-handlers.md +629 -0
  29. package/augment-extensions/domain-rules/wordpress-plugin/rules/asset-management.md +559 -0
  30. package/augment-extensions/domain-rules/wordpress-plugin/rules/context-providers.md +709 -0
  31. package/augment-extensions/domain-rules/wordpress-plugin/rules/cron-jobs.md +736 -0
  32. package/augment-extensions/domain-rules/wordpress-plugin/rules/database-management.md +1057 -0
  33. package/augment-extensions/domain-rules/wordpress-plugin/rules/documentation-standards.md +463 -0
  34. package/augment-extensions/domain-rules/wordpress-plugin/rules/frontend-functionality.md +478 -0
  35. package/augment-extensions/domain-rules/wordpress-plugin/rules/gutenberg-blocks.md +818 -0
  36. package/augment-extensions/domain-rules/wordpress-plugin/rules/internationalization.md +416 -0
  37. package/augment-extensions/domain-rules/wordpress-plugin/rules/migration.md +667 -0
  38. package/augment-extensions/domain-rules/wordpress-plugin/rules/performance-optimization.md +878 -0
  39. package/augment-extensions/domain-rules/wordpress-plugin/rules/plugin-architecture.md +693 -0
  40. package/augment-extensions/domain-rules/wordpress-plugin/rules/plugin-structure.md +352 -0
  41. package/augment-extensions/domain-rules/wordpress-plugin/rules/rest-api.md +818 -0
  42. package/augment-extensions/domain-rules/wordpress-plugin/rules/scaffolding-workflow.md +624 -0
  43. package/augment-extensions/domain-rules/wordpress-plugin/rules/security-best-practices.md +866 -0
  44. package/augment-extensions/domain-rules/wordpress-plugin/rules/testing-patterns.md +1165 -0
  45. package/augment-extensions/domain-rules/wordpress-plugin/rules/testing.md +414 -0
  46. package/augment-extensions/domain-rules/wordpress-plugin/rules/vscode-integration.md +751 -0
  47. package/augment-extensions/domain-rules/wordpress-plugin/rules/woocommerce-integration.md +949 -0
  48. package/augment-extensions/domain-rules/wordpress-plugin/rules/wordpress-org-submission.md +458 -0
  49. package/augment-extensions/examples/gutenberg-block-plugin/README.md +101 -0
  50. package/augment-extensions/examples/gutenberg-block-plugin/examples/testimonial-block.md +428 -0
  51. package/augment-extensions/examples/gutenberg-block-plugin/module.json +40 -0
  52. package/augment-extensions/examples/rest-api-plugin/README.md +98 -0
  53. package/augment-extensions/examples/rest-api-plugin/examples/task-manager-api.md +1299 -0
  54. package/augment-extensions/examples/rest-api-plugin/module.json +40 -0
  55. package/augment-extensions/examples/woocommerce-extension/README.md +98 -0
  56. package/augment-extensions/examples/woocommerce-extension/examples/product-customizer.md +763 -0
  57. package/augment-extensions/examples/woocommerce-extension/module.json +40 -0
  58. package/augment-extensions/workflows/wordpress-plugin/README.md +232 -0
  59. package/augment-extensions/workflows/wordpress-plugin/ai-prompts.md +839 -0
  60. package/augment-extensions/workflows/wordpress-plugin/bead-decomposition-patterns.md +854 -0
  61. package/augment-extensions/workflows/wordpress-plugin/examples/complete-plugin-example.md +540 -0
  62. package/augment-extensions/workflows/wordpress-plugin/examples/custom-post-type-example.md +1083 -0
  63. package/augment-extensions/workflows/wordpress-plugin/examples/feature-addition-workflow.md +669 -0
  64. package/augment-extensions/workflows/wordpress-plugin/examples/plugin-creation-workflow.md +597 -0
  65. package/augment-extensions/workflows/wordpress-plugin/examples/secure-form-handler-example.md +925 -0
  66. package/augment-extensions/workflows/wordpress-plugin/examples/security-audit-workflow.md +752 -0
  67. package/augment-extensions/workflows/wordpress-plugin/examples/wordpress-org-submission-workflow.md +773 -0
  68. package/augment-extensions/workflows/wordpress-plugin/module.json +49 -0
  69. package/augment-extensions/workflows/wordpress-plugin/rules/best-practices.md +942 -0
  70. package/augment-extensions/workflows/wordpress-plugin/rules/development-workflow.md +702 -0
  71. package/augment-extensions/workflows/wordpress-plugin/rules/submission-workflow.md +728 -0
  72. package/augment-extensions/workflows/wordpress-plugin/rules/testing-workflow.md +775 -0
  73. package/cli/dist/cli.js +5 -1
  74. package/cli/dist/cli.js.map +1 -1
  75. package/cli/dist/commands/show.d.ts.map +1 -1
  76. package/cli/dist/commands/show.js +41 -0
  77. package/cli/dist/commands/show.js.map +1 -1
  78. package/modules.md +52 -0
  79. package/package.json +1 -1
@@ -0,0 +1,478 @@
1
+ # Frontend Functionality
2
+
3
+ ## Overview
4
+
5
+ This guide covers WordPress plugin frontend features: custom post types, custom taxonomies, shortcodes, and widgets. These are the primary ways plugins extend WordPress content and display functionality.
6
+
7
+ ---
8
+
9
+ ## Custom Post Types
10
+
11
+ ### Basic Registration
12
+
13
+ ```php
14
+ <?php
15
+ /**
16
+ * Register custom post type
17
+ */
18
+ function my_plugin_register_post_type() {
19
+ $labels = array(
20
+ 'name' => __( 'Books', 'my-plugin' ),
21
+ 'singular_name' => __( 'Book', 'my-plugin' ),
22
+ 'add_new' => __( 'Add New', 'my-plugin' ),
23
+ 'add_new_item' => __( 'Add New Book', 'my-plugin' ),
24
+ 'edit_item' => __( 'Edit Book', 'my-plugin' ),
25
+ 'new_item' => __( 'New Book', 'my-plugin' ),
26
+ 'view_item' => __( 'View Book', 'my-plugin' ),
27
+ 'view_items' => __( 'View Books', 'my-plugin' ),
28
+ 'search_items' => __( 'Search Books', 'my-plugin' ),
29
+ 'not_found' => __( 'No books found', 'my-plugin' ),
30
+ 'not_found_in_trash' => __( 'No books found in Trash', 'my-plugin' ),
31
+ 'all_items' => __( 'All Books', 'my-plugin' ),
32
+ 'archives' => __( 'Book Archives', 'my-plugin' ),
33
+ 'attributes' => __( 'Book Attributes', 'my-plugin' ),
34
+ 'insert_into_item' => __( 'Insert into book', 'my-plugin' ),
35
+ 'uploaded_to_this_item' => __( 'Uploaded to this book', 'my-plugin' ),
36
+ 'menu_name' => __( 'Books', 'my-plugin' ),
37
+ );
38
+
39
+ $args = array(
40
+ 'labels' => $labels,
41
+ 'public' => true,
42
+ 'publicly_queryable' => true,
43
+ 'show_ui' => true,
44
+ 'show_in_menu' => true,
45
+ 'show_in_nav_menus' => true,
46
+ 'show_in_admin_bar' => true,
47
+ 'query_var' => true,
48
+ 'rewrite' => array( 'slug' => 'book', 'with_front' => false ),
49
+ 'capability_type' => 'post',
50
+ 'has_archive' => true,
51
+ 'hierarchical' => false,
52
+ 'menu_position' => 20,
53
+ 'menu_icon' => 'dashicons-book',
54
+ 'supports' => array( 'title', 'editor', 'thumbnail', 'excerpt', 'custom-fields' ),
55
+ 'show_in_rest' => true, // Enable Gutenberg + REST API
56
+ 'rest_base' => 'books',
57
+ 'rest_controller_class' => 'WP_REST_Posts_Controller',
58
+ );
59
+
60
+ register_post_type( 'book', $args );
61
+ }
62
+ add_action( 'init', 'my_plugin_register_post_type' );
63
+ ```
64
+
65
+ ### Advanced Post Type with Custom Capabilities
66
+
67
+ ```php
68
+ <?php
69
+ /**
70
+ * Register post type with custom capabilities
71
+ */
72
+ function my_plugin_register_advanced_post_type() {
73
+ $args = array(
74
+ 'labels' => array( /* labels array */ ),
75
+ 'public' => true,
76
+ 'capability_type' => array( 'book', 'books' ),
77
+ 'map_meta_cap' => true,
78
+ 'supports' => array( 'title', 'editor', 'thumbnail', 'revisions' ),
79
+ 'show_in_rest' => true,
80
+ 'taxonomies' => array( 'category', 'post_tag' ), // Support default taxonomies
81
+ 'has_archive' => 'books-archive',
82
+ 'rewrite' => array(
83
+ 'slug' => 'library/%book_category%',
84
+ 'with_front' => false,
85
+ 'feeds' => true,
86
+ 'pages' => true,
87
+ ),
88
+ );
89
+
90
+ register_post_type( 'book', $args );
91
+ }
92
+ add_action( 'init', 'my_plugin_register_advanced_post_type' );
93
+ ```
94
+
95
+ ---
96
+
97
+ ## Custom Taxonomies
98
+
99
+ ### Hierarchical Taxonomy (Like Categories)
100
+
101
+ ```php
102
+ <?php
103
+ /**
104
+ * Register hierarchical taxonomy
105
+ */
106
+ function my_plugin_register_taxonomy() {
107
+ $labels = array(
108
+ 'name' => __( 'Genres', 'my-plugin' ),
109
+ 'singular_name' => __( 'Genre', 'my-plugin' ),
110
+ 'search_items' => __( 'Search Genres', 'my-plugin' ),
111
+ 'all_items' => __( 'All Genres', 'my-plugin' ),
112
+ 'parent_item' => __( 'Parent Genre', 'my-plugin' ),
113
+ 'parent_item_colon' => __( 'Parent Genre:', 'my-plugin' ),
114
+ 'edit_item' => __( 'Edit Genre', 'my-plugin' ),
115
+ 'update_item' => __( 'Update Genre', 'my-plugin' ),
116
+ 'add_new_item' => __( 'Add New Genre', 'my-plugin' ),
117
+ 'new_item_name' => __( 'New Genre Name', 'my-plugin' ),
118
+ 'menu_name' => __( 'Genres', 'my-plugin' ),
119
+ );
120
+
121
+ $args = array(
122
+ 'labels' => $labels,
123
+ 'hierarchical' => true,
124
+ 'public' => true,
125
+ 'show_ui' => true,
126
+ 'show_admin_column' => true,
127
+ 'show_in_nav_menus' => true,
128
+ 'show_tagcloud' => true,
129
+ 'query_var' => true,
130
+ 'rewrite' => array( 'slug' => 'genre', 'with_front' => false ),
131
+ 'show_in_rest' => true,
132
+ 'rest_base' => 'genres',
133
+ 'rest_controller_class' => 'WP_REST_Terms_Controller',
134
+ );
135
+
136
+ register_taxonomy( 'genre', array( 'book' ), $args );
137
+ }
138
+ add_action( 'init', 'my_plugin_register_taxonomy' );
139
+ ```
140
+
141
+ ### Non-Hierarchical Taxonomy (Like Tags)
142
+
143
+ ```php
144
+ <?php
145
+ /**
146
+ * Register non-hierarchical taxonomy
147
+ */
148
+ function my_plugin_register_tag_taxonomy() {
149
+ $args = array(
150
+ 'labels' => array( /* labels array */ ),
151
+ 'hierarchical' => false,
152
+ 'public' => true,
153
+ 'show_ui' => true,
154
+ 'show_admin_column' => true,
155
+ 'show_in_rest' => true,
156
+ 'rewrite' => array( 'slug' => 'book-tag' ),
157
+ );
158
+
159
+ register_taxonomy( 'book_tag', array( 'book' ), $args );
160
+ }
161
+ add_action( 'init', 'my_plugin_register_tag_taxonomy' );
162
+
163
+ ---
164
+
165
+ ## Shortcodes
166
+
167
+ ### Basic Shortcode
168
+
169
+ ```php
170
+ <?php
171
+ /**
172
+ * Register shortcode
173
+ * Usage: [my_books]
174
+ */
175
+ function my_plugin_books_shortcode( $atts ) {
176
+ // Parse attributes with defaults
177
+ $atts = shortcode_atts( array(
178
+ 'limit' => 5,
179
+ 'category' => '',
180
+ 'orderby' => 'date',
181
+ 'order' => 'DESC',
182
+ ), $atts, 'my_books' );
183
+
184
+ // Query books
185
+ $args = array(
186
+ 'post_type' => 'book',
187
+ 'posts_per_page' => intval( $atts['limit'] ),
188
+ 'orderby' => sanitize_text_field( $atts['orderby'] ),
189
+ 'order' => sanitize_text_field( $atts['order'] ),
190
+ );
191
+
192
+ if ( ! empty( $atts['category'] ) ) {
193
+ $args['tax_query'] = array(
194
+ array(
195
+ 'taxonomy' => 'genre',
196
+ 'field' => 'slug',
197
+ 'terms' => sanitize_text_field( $atts['category'] ),
198
+ ),
199
+ );
200
+ }
201
+
202
+ $query = new WP_Query( $args );
203
+
204
+ // Build output
205
+ ob_start();
206
+
207
+ if ( $query->have_posts() ) {
208
+ echo '<div class="my-plugin-books">';
209
+ while ( $query->have_posts() ) {
210
+ $query->the_post();
211
+ ?>
212
+ <div class="book-item">
213
+ <h3><?php the_title(); ?></h3>
214
+ <?php if ( has_post_thumbnail() ) : ?>
215
+ <?php the_post_thumbnail( 'thumbnail' ); ?>
216
+ <?php endif; ?>
217
+ <div class="book-excerpt">
218
+ <?php the_excerpt(); ?>
219
+ </div>
220
+ <a href="<?php the_permalink(); ?>"><?php esc_html_e( 'Read More', 'my-plugin' ); ?></a>
221
+ </div>
222
+ <?php
223
+ }
224
+ echo '</div>';
225
+ } else {
226
+ echo '<p>' . esc_html__( 'No books found.', 'my-plugin' ) . '</p>';
227
+ }
228
+
229
+ wp_reset_postdata();
230
+
231
+ return ob_get_clean();
232
+ }
233
+ add_shortcode( 'my_books', 'my_plugin_books_shortcode' );
234
+ ```
235
+
236
+ ### Shortcode with Enclosed Content
237
+
238
+ ```php
239
+ <?php
240
+ /**
241
+ * Shortcode with enclosed content
242
+ * Usage: [book_highlight id="123"]Custom text here[/book_highlight]
243
+ */
244
+ function my_plugin_book_highlight_shortcode( $atts, $content = null ) {
245
+ $atts = shortcode_atts( array(
246
+ 'id' => 0,
247
+ 'class' => 'book-highlight',
248
+ ), $atts, 'book_highlight' );
249
+
250
+ $book_id = intval( $atts['id'] );
251
+
252
+ if ( ! $book_id || get_post_type( $book_id ) !== 'book' ) {
253
+ return '';
254
+ }
255
+
256
+ $book_title = get_the_title( $book_id );
257
+ $book_url = get_permalink( $book_id );
258
+
259
+ $output = sprintf(
260
+ '<div class="%s"><p>%s</p><p><a href="%s">%s</a></p></div>',
261
+ esc_attr( $atts['class'] ),
262
+ wp_kses_post( $content ),
263
+ esc_url( $book_url ),
264
+ esc_html( $book_title )
265
+ );
266
+
267
+ return $output;
268
+ }
269
+ add_shortcode( 'book_highlight', 'my_plugin_book_highlight_shortcode' );
270
+ ```
271
+
272
+ ---
273
+
274
+ ## Widgets
275
+
276
+ ### Modern Widget (WP_Widget Class)
277
+
278
+ ```php
279
+ <?php
280
+ /**
281
+ * Recent Books Widget
282
+ */
283
+ class My_Plugin_Recent_Books_Widget extends WP_Widget {
284
+
285
+ /**
286
+ * Constructor
287
+ */
288
+ public function __construct() {
289
+ parent::__construct(
290
+ 'my_plugin_recent_books',
291
+ __( 'Recent Books', 'my-plugin' ),
292
+ array(
293
+ 'description' => __( 'Display recent books from your library', 'my-plugin' ),
294
+ 'classname' => 'my-plugin-recent-books-widget',
295
+ )
296
+ );
297
+ }
298
+
299
+ /**
300
+ * Front-end display
301
+ */
302
+ public function widget( $args, $instance ) {
303
+ $title = ! empty( $instance['title'] ) ? $instance['title'] : __( 'Recent Books', 'my-plugin' );
304
+ $title = apply_filters( 'widget_title', $title, $instance, $this->id_base );
305
+ $limit = ! empty( $instance['limit'] ) ? absint( $instance['limit'] ) : 5;
306
+
307
+ echo $args['before_widget'];
308
+
309
+ if ( $title ) {
310
+ echo $args['before_title'] . esc_html( $title ) . $args['after_title'];
311
+ }
312
+
313
+ $query = new WP_Query( array(
314
+ 'post_type' => 'book',
315
+ 'posts_per_page' => $limit,
316
+ 'orderby' => 'date',
317
+ 'order' => 'DESC',
318
+ ) );
319
+
320
+ if ( $query->have_posts() ) {
321
+ echo '<ul class="recent-books-list">';
322
+ while ( $query->have_posts() ) {
323
+ $query->the_post();
324
+ ?>
325
+ <li>
326
+ <?php if ( has_post_thumbnail() ) : ?>
327
+ <a href="<?php the_permalink(); ?>">
328
+ <?php the_post_thumbnail( 'thumbnail' ); ?>
329
+ </a>
330
+ <?php endif; ?>
331
+ <a href="<?php the_permalink(); ?>"><?php the_title(); ?></a>
332
+ </li>
333
+ <?php
334
+ }
335
+ echo '</ul>';
336
+ wp_reset_postdata();
337
+ } else {
338
+ echo '<p>' . esc_html__( 'No books found.', 'my-plugin' ) . '</p>';
339
+ }
340
+
341
+ echo $args['after_widget'];
342
+ }
343
+
344
+ /**
345
+ * Back-end widget form
346
+ */
347
+ public function form( $instance ) {
348
+ $title = ! empty( $instance['title'] ) ? $instance['title'] : __( 'Recent Books', 'my-plugin' );
349
+ $limit = ! empty( $instance['limit'] ) ? absint( $instance['limit'] ) : 5;
350
+ ?>
351
+ <p>
352
+ <label for="<?php echo esc_attr( $this->get_field_id( 'title' ) ); ?>">
353
+ <?php esc_html_e( 'Title:', 'my-plugin' ); ?>
354
+ </label>
355
+ <input class="widefat"
356
+ id="<?php echo esc_attr( $this->get_field_id( 'title' ) ); ?>"
357
+ name="<?php echo esc_attr( $this->get_field_name( 'title' ) ); ?>"
358
+ type="text"
359
+ value="<?php echo esc_attr( $title ); ?>">
360
+ </p>
361
+ <p>
362
+ <label for="<?php echo esc_attr( $this->get_field_id( 'limit' ) ); ?>">
363
+ <?php esc_html_e( 'Number of books:', 'my-plugin' ); ?>
364
+ </label>
365
+ <input class="tiny-text"
366
+ id="<?php echo esc_attr( $this->get_field_id( 'limit' ) ); ?>"
367
+ name="<?php echo esc_attr( $this->get_field_name( 'limit' ) ); ?>"
368
+ type="number"
369
+ step="1"
370
+ min="1"
371
+ value="<?php echo esc_attr( $limit ); ?>"
372
+ size="3">
373
+ </p>
374
+ <?php
375
+ }
376
+
377
+ /**
378
+ * Sanitize widget form values
379
+ */
380
+ public function update( $new_instance, $old_instance ) {
381
+ $instance = array();
382
+ $instance['title'] = ! empty( $new_instance['title'] ) ? sanitize_text_field( $new_instance['title'] ) : '';
383
+ $instance['limit'] = ! empty( $new_instance['limit'] ) ? absint( $new_instance['limit'] ) : 5;
384
+
385
+ return $instance;
386
+ }
387
+ }
388
+
389
+ /**
390
+ * Register widget
391
+ */
392
+ function my_plugin_register_widgets() {
393
+ register_widget( 'My_Plugin_Recent_Books_Widget' );
394
+ }
395
+ add_action( 'widgets_init', 'my_plugin_register_widgets' );
396
+ ```
397
+
398
+ ---
399
+
400
+ ## Best Practices
401
+
402
+ ### Custom Post Types
403
+
404
+ 1. **Use proper labels**: Provide all label variations for better UX
405
+ 2. **Enable REST API**: Set `show_in_rest => true` for Gutenberg support
406
+ 3. **Set proper capabilities**: Use `capability_type` and `map_meta_cap`
407
+ 4. **Flush rewrite rules**: Only on activation/deactivation, never on every page load
408
+ 5. **Use proper supports**: Only enable features you need
409
+
410
+ ### Custom Taxonomies
411
+
412
+ 1. **Choose hierarchy wisely**: Hierarchical for categories, non-hierarchical for tags
413
+ 2. **Enable REST API**: Required for Gutenberg block editor
414
+ 3. **Show in admin column**: Makes content management easier
415
+ 4. **Use proper rewrite rules**: Avoid conflicts with existing slugs
416
+
417
+ ### Shortcodes
418
+
419
+ 1. **Use shortcode_atts()**: Always provide defaults and sanitize
420
+ 2. **Return, don't echo**: Shortcodes should return content, not echo it
421
+ 3. **Use output buffering**: For complex HTML output
422
+ 4. **Sanitize and escape**: All user input and output
423
+ 5. **Support enclosed content**: When it makes sense for your shortcode
424
+
425
+ ### Widgets
426
+
427
+ 1. **Extend WP_Widget**: Use the standard WordPress widget class
428
+ 2. **Sanitize in update()**: Always sanitize user input
429
+ 3. **Escape in widget()**: Escape all output
430
+ 4. **Use widget_title filter**: Allow theme/plugin filtering of titles
431
+ 5. **Reset post data**: Always call wp_reset_postdata() after custom queries
432
+
433
+ ---
434
+
435
+ ## Common Pitfalls
436
+
437
+ ### ❌ DON'T
438
+
439
+ ```php
440
+ // Don't flush rewrite rules on every page load
441
+ add_action( 'init', 'my_plugin_register_post_type' );
442
+ add_action( 'init', 'flush_rewrite_rules' ); // BAD!
443
+
444
+ // Don't echo in shortcodes
445
+ function bad_shortcode() {
446
+ echo '<p>Content</p>'; // BAD!
447
+ }
448
+
449
+ // Don't forget to sanitize widget input
450
+ public function update( $new_instance, $old_instance ) {
451
+ return $new_instance; // BAD!
452
+ }
453
+ ```
454
+
455
+ ### ✅ DO
456
+
457
+ ```php
458
+ // Flush rewrite rules only on activation
459
+ register_activation_hook( __FILE__, 'my_plugin_activate' );
460
+ function my_plugin_activate() {
461
+ my_plugin_register_post_type();
462
+ flush_rewrite_rules();
463
+ }
464
+
465
+ // Return content from shortcodes
466
+ function good_shortcode() {
467
+ return '<p>Content</p>'; // GOOD!
468
+ }
469
+
470
+ // Always sanitize widget input
471
+ public function update( $new_instance, $old_instance ) {
472
+ $instance = array();
473
+ $instance['title'] = sanitize_text_field( $new_instance['title'] );
474
+ return $instance; // GOOD!
475
+ }
476
+ ```
477
+ ```
478
+