soderlind

Local (localwp.com) + direnv + VS Code

This guide wires up Local (localwp.com) with direnv so your terminal & VS Code always use the correct WordPress environment for each Local site. It includes:

• Installing the Local direnv add‑on from the 1.0.0 release tarball.
• Shell hook instructions for macOS, Windows, and Linux.

---

1) Prereqs

soderlind

Plausible roll-up for WordPress

Also available, Plausible Stats Aggregator

If you have multiple sites and need a roll-up view, you can use the plugin below.

Prerequiste

• Plausible Analytics for WordPress activated on each site.
• A roll-up domain

soderlind

prompt

I want to create a script that retrives all stats from all site at my plausible account:

APIs:
   https://plausible.io/docs/sites-api
   https://plausible.io/docs/stats-api

1. Find all sites in my plausible account using the site api

soderlind

Enable WordPress Customizer Preview on Mapped Domain

If you are using the WordPress MU Domain Mapping plugin to map domains on your WordPress Multisite, the preview feature in the WordPress Customizer will not function. To resolve this issue, save enable-customizer-preview-mapped-domain.php, as must-use plugin, in wp-content/mu-plugins.

soderlind

Sticky WP Table Header

This plugin will make the table header sticky when you scroll down.

Save file in wp-content/mu-plugins

position: sticky is supported by most browsers.

soderlind

Create a WordPress custom search

This is not a complete plugin, but a how-to. Want more, take a look at my WP Loop plugin. Search is in class-wp-loupe-search.php

Code below:

• expects that you've created your own search() function, which returns an array with post id. (eg.: Eg.: [ [ 'id' => 1 ], [ 'id' => 2 ] ])
• includes pagination
• tested (using WP Loop plugin) with Twenty Twenty-Four and Twenty Twenty-Five

soderlind

Delete failed and cancelled GitHub Actions workflow runs

The script will remove failed and cancelled workflow runs from your GitHub Action workflow history log.

Prerequisite

• GitHub CLI installed.

soderlind

Semgrep SAST (Static Application Security Testing) for WordPress

I use this GitHub Action to security test our WordPress themes

So what does the GitHub Action do?

It;

• get the code (i.e. themes) required by composer
• scan the code using semgrep
• upload the security errors to GitHub Code Security (i.e. the scan creates a sarif file which is uploaded)

soderlind

Favorite keybindings in Visual Studio Code

First, disable multible tabs: Set Workbench > Editor: Show Tabs to single

Included in VS Code:

• Control+Tab: Next File
• Shift+Control+Tab: Previous File

Custom, add the code in keybindings.json to VS Code (Shift+Command+P, select Preferences: Open Keybord Shortcuts (JSON))

• Option+Tab: Next Workspace (file picker)

soderlind

WordPress WAF Custom rules for Azure Front Door (AFD)

What the Bicep File Does

This Bicep file (waf-wordpress-exclusions.bicep) defines an Azure WAF policy specifically configured with rule exclusions for WordPress sites, based on the OWASP Core Rule Set - WordPress Rule Exclusions Plugin

Key Features