Where the escaping should go
Moving every escape next to its echo made the whole file easier to trust.
Author
Contact
Daniel Reyes
8 posts, newest first.
Posts here
8
Categories
4
Avg read
4m
Authors
1
Posts from Daniel Reyes
Page 1 of 1
Tab through it before you ship it
Put the mouse away and find the bugs your users already know about.
A contact form with no plugin
REST, a honeypot and a rate limit, in about a hundred lines.
Contrast is not a matter of taste
Measure it, fix it and stop debating shades of grey in meetings.
Nonces are not a permission check
A common mistake that keeps turning up in otherwise careful code.
Reviewing a contact form like an attacker
Header injection, rate limits and what a honeypot really buys you.
Filters over forks
Why we leave a seam in the code instead of a note in the readme.
Archive pages that earn their place
Date archives can be useful if you give them a reason to exist.