Plugin Constants
FUNCTIONALITIES_VERSION— Current plugin versionFUNCTIONALITIES_FILE— Main plugin file pathFUNCTIONALITIES_DIR— Plugin directory pathFUNCTIONALITIES_URL— Plugin directory URL
File Structure
functionalities/
├── assets/
│ ├── css/ # Stylesheets
│ └── js/ # Scripts
├── includes/
│ ├── admin/
│ │ ├── class-admin.php # Admin interface
│ │ ├── class-admin-ui.php # Reusable UI helpers
│ │ └── class-module-docs.php
│ ├── features/ # Module classes
│ └── class-functionalities-loader.php
├── languages/
└── functionalities.php # Main plugin file
Database Options
functionalities_misc— Performance & Cleanupfunctionalities_snippets— Header & Footerfunctionalities_link_management— Link Managementfunctionalities_schema— Schema Settingsfunctionalities_block_cleanup— Block Cleanupfunctionalities_content_regression— Content Integrityfunctionalities_assumption_detection— Assumption Detectionfunctionalities_login_security— Login Securityfunctionalities_svg_icons— SVG Icons
Security Best Practices
The plugin adheres to established WordPress security standards including:
- Nonce verification on all AJAX requests
- Capability checks (
manage_optionsrequired) - Input sanitization with appropriate functions
- Output escaping with
esc_html(),esc_attr(),esc_url() - Direct file access prevention