Updated WordPress Plugin Security Testing Cheat Sheet (markdown)

Ryan Dewhurst
2021-01-04 10:19:47 +01:00
parent 3f2b5f6218
commit d90fb63a97

@@ -30,7 +30,20 @@ When doing dynamic testing for XSS the following setting in the wp-config.php fi
```
define( 'DISALLOW_UNFILTERED_HTML', true );
```
```
### Enable error logging
Add the following to your wp-config.php file:
```
define( 'WP_DEBUG', true );
define( 'WP_DEBUG_LOG', true );
```
The PHP errors will be saved to the `/wp-content/debug.log` file.
To do some logging yourself, you can use the `error_log( 'This is a log' );` function.
## Cross-Site Scripting (XSS)