WordPress Complete - Sixth Edition

Testing your plugins

Just a minute ago, we've tried out our new plugin, so it's probably a good moment to say a word or two about testing your plugins and making sure that they don't cause any problems for regular users in general.

Our particular plugin is a very simple one; the only thing it does is process each link it finds inside any post's or page's content and adds a custom icon next to it. However, even such a simple plugin can be a possible security breach point. For example, the only place where the user can input anything is the plugins section in wp-admin (the field handling the supported file types). Now, there is a possibility that someone might use this field to input a piece of specific PHP code instead of a standard file type, ...