WP Manifestindependent plugin directory
manifest / developer / my-secure-plugin

My Secure Plugin

A minimal, secure WordPress plugin skeleton with settings page and shortcode.

by Abdul Hameed · github.com/abdulhameed-developer/my-secure-plugin · website

2stars
2forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/abdulhameed-developer/my-secure-plugin/archive/refs/heads/main.zip

A minimal, secure WordPress plugin demonstrating:

  • Options page via Settings API
  • Safe shortcode [msp_message]
  • Sanitization + Escaping best practices

Usage

  1. Go to Settings → MSP Settings
  2. Add your message.
  3. Use [msp_message] in any post or page.

Security

  • No direct access (if !defined('ABSPATH') exit;)
  • Sanitized input (sanitize_text_field)
  • Escaped output (esc_html)
  • Capability checks (manage_options)
  • Nonces via settings_fields()

License

GPL-2.0-or-later