Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
×
Your browser does not support the video tag.
Skip to next slide
Ad
×
Share SlideShare
Facebook
Twitter
LinkedIn
Embed
Size (px)
Show related SlideShares at end
WordPress Shortcode
Link
Share
Email
WordCamp Europe 2013 Git & WordPres...
by KirstenSchelper
3225 views
Writing Secure Code for WordPress
by Shawn Hooper
2015 views
Top clipped slide
1
of
58
Ad
1
of
58
Ad
Top clipped slide
![SQL INJECTION - SQLI
Brad Williams
@williamsba
SQL
InjecLon
Example
global $wpdb;
$ID = $_GET['ID'];
$sql =...](https://image.slidesharecdn.com/writing-secure-wordpress-code-131007113127-phpapp02/75/Writing-Secure-WordPress-Code-8-2048.jpg?cb=1667394949)
![CROSS-SITE SCRIPTING - XSS
Brad Williams
@williamsba
$ID = absint( $_GET['ID'] );
absint()
Coverts
a
value
to
...](https://image.slidesharecdn.com/writing-secure-wordpress-code-131007113127-phpapp02/75/Writing-Secure-WordPress-Code-36-2048.jpg?cb=1667394949)
![CROSS-SITE SCRIPTING - XSS
Brad Williams
@williamsba
$ID = intval( $_GET['ID'] );
intval()
Returns
the
integer
va...](https://image.slidesharecdn.com/writing-secure-wordpress-code-131007113127-phpapp02/75/Writing-Secure-WordPress-Code-37-2048.jpg?cb=1667394949)
![CROSS-SITE REQUEST FORGERY - CSRF
Brad Williams
@williamsba
<?php
if ( isset( $_POST['email'] ) ) {
//process form data
}
...](https://image.slidesharecdn.com/writing-secure-wordpress-code-131007113127-phpapp02/75/Writing-Secure-WordPress-Code-48-2048.jpg?cb=1667394949)
![CROSS-SITE REQUEST FORGERY - CSRF
Brad Williams
@williamsba
if ( isset( $_POST['email'] ) ) {
check_admin_referer( 'bw_pro...](https://image.slidesharecdn.com/writing-secure-wordpress-code-131007113127-phpapp02/75/Writing-Secure-WordPress-Code-50-2048.jpg?cb=1667394949)
![CROSS-SITE REQUEST FORGERY - CSRF
Brad Williams
@williamsba
<?php
if ( isset( $_POST['email'] ) ) {
check_admin_referer( '...](https://image.slidesharecdn.com/writing-secure-wordpress-code-131007113127-phpapp02/75/Writing-Secure-WordPress-Code-51-2048.jpg?cb=1667394949)
![CROSS-SITE REQUEST FORGERY - CSRF
Brad Williams
@williamsba
if ( isset( $_GET[ID'] ) ) {
check_admin_referer( 'bw_process_...](https://image.slidesharecdn.com/writing-secure-wordpress-code-131007113127-phpapp02/75/Writing-Secure-WordPress-Code-53-2048.jpg?cb=1667394949)
