soderlind

Enable WordPress Customizer Preview on Mapped Domain

If you are using the WordPress MU Domain Mapping plugin to map domains on your WordPress Multisite, the preview feature in the WordPress Customizer will not function. To resolve this issue, save enable-customizer-preview-mapped-domain.php, as must-use plugin, in wp-content/mu-plugins.

soderlind

Sticky WP Table Header

This plugin will make the table header sticky when you scroll down.

Save file in wp-content/mu-plugins

position: sticky is supported by most browsers.

soderlind

Create a WordPress custom search

This is not a complete plugin, but a how-to. Want more, take a look at my WP Loop plugin. Search is in class-wp-loupe-search.php

Sample below:

• expects that you've created your own search() function, which returns an array with post id. (eg.: Eg.: [ [ 'id' => 1 ], [ 'id' => 2 ] ])
• includes pagination
• tested (using WP Loop plugin) with Twenty Twenty-Four and Twenty Twenty-Five

soderlind

Delete failed and cancelled GitHub Actions workflow runs

The script will remove failed and cancelled workflow runs from your GitHub Action workflow history log.

Prerequisite

• GitHub CLI installed.

soderlind

Semgrep SAST (Static Application Security Testing) for WordPress

I use this GitHub Action to security test our WordPress themes

So what does the GitHub Action do?

It;

• get the code (i.e. themes) required by composer
• scan the code using semgrep
• upload the security errors to GitHub Code Security (i.e. the scan creates a sarif file which is uploaded)

soderlind

Favorite keybindings in Visual Studio Code

First, disable multible tabs: Set Workbench > Editor: Show Tabs to single

Included in VS Code:

• Control+Tab: Next File
• Shift+Control+Tab: Previous File

Custom, add the code in keybindings.json to VS Code (Shift+Command+P, select Preferences: Open Keybord Shortcuts (JSON))

• Option+Tab: Next Workspace (file picker)

soderlind

WordPress WAF Custom rules for Azure Front Door (AFD)

What the Bicep File Does

This Bicep file (waf-wordpress-exclusions.bicep) defines an Azure WAF policy specifically configured with rule exclusions for WordPress sites, based on the OWASP Core Rule Set - WordPress Rule Exclusions Plugin

Key Features

soderlind

resource wafPolicy 'Microsoft.Network/FrontDoorWebApplicationFirewallPolicies@2022-05-01' = {
  name: wafPolicyName
  location: 'global'
  sku: {
    name: frontDoorSkuName
  }
  tags: tags
  properties: {
    policySettings: {
      enabledState: 'Enabled'

soderlind

I did this to show how easy it is to create your own media inserter. In production I would create a a server that returns the json.

Install

1. Create a block
   • in wp-content/plugins run npx @wordpress/create-block@latest my-image-inserter
   • cd my-image-inserter
2. Copy index.js to my-image-inserter/src/index.js
3. Delete my-image-inserter/my-image-inserter.php
4. Copy plugin.php to my-image-inserter/plugin.php

soderlind

# GitHub CLI aliases
eval "$(gh copilot alias -- zsh)" # or bash
# Old school aliases
alias '??'='ghcs'
alias 'git?'='ghcs -t git'
alias 'gh?'='ghcs -t gh'
alias 'explain'='ghce'