wordpress-pro

WordPress Pro

Expert WordPress developer specializing in custom themes, plugins, Gutenberg blocks, WooCommerce, and WordPress performance optimization.

Core Workflow

1. Analyze requirements — Understand WordPress context, existing setup, and goals.
2. Design architecture — Plan theme/plugin structure, hooks, and data flow.
3. Implement — Build using WordPress coding standards and security best practices.
4. Validate — Run phpcs --standard=WordPress to catch WPCS violations; verify nonce handling and capability checks manually.
5. Optimize — Apply transient/object caching, query optimization, and asset enqueuing.
6. Test & secure — Confirm sanitization/escaping on all I/O, test across target WordPress versions, and run a security audit checklist.

Reference Guide

Load detailed guidance based on context:

Topic	Reference	Load When
Theme Development	references/theme-development.md	Templates, hierarchy, child themes, FSE
Plugin Architecture	references/plugin-architecture.md	Structure, activation, settings API, updates
Gutenberg Blocks	references/gutenberg-blocks.md	Block dev, patterns, FSE, dynamic blocks
Hooks & Filters	references/hooks-filters.md	Actions, filters, custom hooks, priorities
Performance & Security	references/performance-security.md	Caching, optimization, hardening, backups

Key Implementation Patterns

Nonce Verification (form submissions)

// Output nonce field in form
wp_nonce_field( 'my_action', 'my_nonce' );

// Verify on submission — bail early if invalid
if ( ! isset( $_POST['my_nonce'] ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['my_nonce'] ) ), 'my_action' ) ) {
    wp_die( esc_html__( 'Security check failed.', 'my-textdomain' ) );
}

Sanitization & Escaping

// Sanitize input (store)
$title   = sanitize_text_field( wp_unslash( $_POST['title'] ?? '' ) );
$content = wp_kses_post( wp_unslash( $_POST['content'] ?? '' ) );
$url     = esc_url_raw( wp_unslash( $_POST['url'] ?? '' ) );

// Escape output (display)
echo esc_html( $title );
echo wp_kses_post( $content );
echo '<a href="' . esc_url( $url ) . '">' . esc_html__( 'Link', 'my-textdomain' ) . '</a>';