PHP

PHP Skill

Modern PHP development with a focus on WordPress plugin development, OOP patterns, and security.

RULE: Always show generated class/function signatures before writing full implementation. Wait for GO.

🚧 Status: Stub — implementation pending

This reference skill has the structure but the snippet content is still being filled in (you'll see <!-- TODO --> placeholders below). It activates and tells Claude the topic exists, but won't yield deep snippets yet.

Want to help? Pick any TODO, write the snippet, open a PR. See CONTRIBUTING.md. Each contribution moves the skill closer to "Ready" status.

Capabilities

OOP PHP Patterns

Laravel Basics

Custom Plugin Development

REST API Endpoints

Database Queries (wpdb)

Security (Sanitization, Nonces)

Patterns Reference

Secure wpdb query

global $wpdb;
$results = $wpdb->get_results(
    $wpdb->prepare(
        "SELECT * FROM {$wpdb->prefix}my_table WHERE user_id = %d AND status = %s",
        $user_id,
        $status
    )
);

REST API endpoint

add_action( 'rest_api_init', function() {
    register_rest_route( 'myplugin/v1', '/data/(?P<id>\d+)', [
        'methods'             => 'GET',
        'callback'            => 'myplugin_get_data',
        'permission_callback' => function() {
            return current_user_can( 'read' );
        },
        'args' => [
            'id' => [ 'required' => true, 'validate_callback' => 'is_numeric' ]
        ],
    ]);
});

function myplugin_get_data( WP_REST_Request $request ): WP_REST_Response {
    $id   = absint( $request->get_param( 'id' ) );
    $data = get_post_meta( $id, '_my_meta', true );
    return new WP_REST_Response( [ 'data' => $data ], 200 );
}

Nonce verification

// In form
wp_nonce_field( 'myplugin_action', 'myplugin_nonce' );

// On save
if ( ! isset( $_POST['myplugin_nonce'] ) ||
     ! wp_verify_nonce( $_POST['myplugin_nonce'], 'myplugin_action' ) ) {
    wp_die( 'Security check failed' );
}