Per Søderlind soderlind

Create a WordPress custom search

This is not a complete plugin, but a how-to. Want more, take a look at my WP Loop plugin. Search is in class-wp-loupe-search.php

Code below:

expects that you've created your own search() function, which returns an array with post id. (eg.: Eg.: [ [ 'id' => 1 ], [ 'id' => 2 ] ])
includes pagination
tested (using WP Loop plugin) with Twenty Twenty-Four and Twenty Twenty-Five

The script will remove failed and cancelled workflow runs from your GitHub Action workflow history log.

I use this GitHub Action to security test our WordPress themes

So what does the GitHub Action do?

It;

get the code (i.e. themes) required by composer
scan the code using semgrep
upload the security errors to GitHub Code Security (i.e. the scan creates a sarif file which is uploaded)

First, disable multible tabs: Set Workbench > Editor: Show Tabs to single

Included in VS Code:

Custom, add the code in keybindings.json to VS Code (Shift+Command+P, select Preferences: Open Keybord Shortcuts (JSON))

This Bicep file (waf-wordpress-exclusions.bicep) defines an Azure WAF policy specifically configured with rule exclusions for WordPress sites, based on the OWASP Core Rule Set - WordPress Rule Exclusions Plugin

I did this to show how easy it is to create your own media inserter. In production I would create a a server that returns the json.

Create a block
- in wp-content/plugins run npx @wordpress/create-block@latest my-image-inserter
- cd my-image-inserter
Copy index.js to my-image-inserter/src/index.js
Delete my-image-inserter/my-image-inserter.php
Copy plugin.php to my-image-inserter/plugin.php

On wordpress.org, there are two things required for a plugin preview button to appear to all users:

A valid blueprint.json file must be provided in the plugins assets/blueprints sub-directory.
The plugin preview must be set to “public” from the plugin’s Advanced view by a committer.

Read the blueprint documentation for more information.

	resource wafPolicy 'Microsoft.Network/FrontDoorWebApplicationFirewallPolicies@2022-05-01' = {
	name: wafPolicyName
	location: 'global'
	sku: {
	name: frontDoorSkuName
	}
	tags: tags
	properties: {
	policySettings: {
	enabledState: 'Enabled'

	# GitHub CLI aliases
	eval "$(gh copilot alias -- zsh)" # or bash
	# Old school aliases
	alias '??'='ghcs'
	alias 'git?'='ghcs -t git'
	alias 'gh?'='ghcs -t gh'
	alias 'explain'='ghce'

	services:
	buggregator:
	image: ghcr.io/buggregator/server:latest
	depends_on:
	buggregator-database:
	condition: service_healthy
	ports:
	- 127.0.0.1:8000:8000 # Sentry, Ray
	- 127.0.0.1:1025:1025 # SMTP
	environment: