[wp-hackers] Developer portal

[Oliver Schlöbe]

Though it's not exactly a security checklist, there's a great resource 
in the Codex, covering Data Validation, User input handling etc: 
http://codex.wordpress.org/Data_Validation

-- 
Regards,
Oliver Schlöbe

http://wpseek.com/
http://wpworldmap.net/



On 12.12.2009 17:07, Simon Blackbourn wrote:
> A whole section on plugin security (using wp_nonce, avoiding xss, things to
> be aware of when handling user input, etc.).
>
> A lot of this is not specific to WordPress of course, but I think a lot of
> self-taught coders (myself included) really first got to grips with PHP
> through writing WordPress plugins and themes.
>
> An easy to follow security checklist, plus other WordPress-specific info,
> plus links to existing security resources online would have been very
> welcome.
>
> Simon
> _______________________________________________
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-hackers
>