WordPress Security Codes

Sanitizing User Input:

$input_data = sanitize_text_field($_POST['user_input']);

Validating and Sanitizing Email Input:

$user_email = sanitize_email($_POST['user_email']);

Preventing Cross-Site Scripting (XSS):

$output = esc_html($unsafe_input);

Securing AJAX Calls with Nonces:

wp_nonce_field('my_ajax_nonce', 'security');

Limiting Login Attempts:

define('WP_LOGIN_RETRIES', 3); define('WP_LOGIN_LOCKOUT', 5 * 60); // 5 minutes

Escaping SQL Queries:

$user_input = esc_sql($_POST['user_input']);

Blocking Access to PHP Files in wp-content:

<Files *.php> Deny from all </Files>

Hiding WordPress Version Number in HTML Source:

remove_action('wp_head', 'wp_generator');