Ramit Joshi

My name is Robert. I have more than 6 years of experience as a work history record, Here, I have created a custom plugin in custom for the videos, extensions. And, also, I have, uh, customized the WooCommerce shipping, WooCommerce invoice section. And apart from this, I have, uh, more than a, uh, 6 year experience in 2 other flavor like Caramel, ODiagnator, uh, Millen 2, uh, version 1 and version 2. And I have also the knowledge of North AS and Direct AS as well. And apart from this, I am I am also handling the team and also conducting with that team.

For this, we need to firstly see that there should not be a CEO artist Gross origin, uh, issue in this because if we if we have a gross, uh, origin issue, then the 3rd party API will not work. Then secondly, um, about the security. Uh, I think, uh, so when we use a 3rd party API, so we should have that primary, uh, of the secret key. So that secret key should be used and will be go into the header section as well, uh, by, uh, into the header section to ensure that the correct request has been made.

Okay. So we can do this in the 2 forms, uh, from the server end and, uh, and from that, our own plugins, uh, and extension as well. From the server end, for example, if we have, uh, WP engine, which is a default hosting engine for the WordPress site, so that WP Engine automatically give you option that your database and your files, uh, will be automatically back up after, uh, on the daily basis or on for on a specific date and time. This is the first. And secondly and, uh, we have that, uh, backup plugin soft extension where we can manually, uh, backup. We will, uh, manually download the files and database files as well on the daily basis manually.

In the WordPress, uh, we are not allowed I mean, in second form, we can say that we should not do the direct query, uh, to interact with the database. Like, for example, there is a, uh, uh, so there is a I mean, we can add for example, if we, uh, want to fetch any data from the WP post table. So we don't have to enter that select star from the WP post. Okay? And, uh, rather than this, we have a default w p query, uh, objects we have. So in that w p query object, so we need to pass the arguments which are already available and which are allowed from WordPress by default. So from by using that, uh, that parameters, like, which type of post we want to show, how much, uh, listing I want to show, And, uh, you if either we want to, uh, to search any criteria, whether it is any means, uh, whether it is equal field, greater than, less than, not equal to. And we can also implement the relationship and or between, uh, more than one metadata of the post section.

Not just plugged in to protect against escalated. Nice question. Okay. So, uh, uh, there are several form several ways. So we can do first phase, the input which I've received should be a proper validated. 2nd ways, uh, even on the server end, we should validate that, uh, we should validate an input, which we are passing on a SQL query. Thirdly, that variable should not be passed to the query directly. Before that, that variable should be validation at server end and plus this, uh, and plus the sector and plus the client end as well. 4th step. 4th step is we can use by default, uh, that, uh, uh, by default, uh, function, we can use, uh, against the SQL inductions. Uh, there is a, uh, by default, functions are available in the PHP. Uh, means for that, uh, error, for example, URL injection URL. And if you are going to that, uh, encoding functions are there, uh, URL encoding and there is a serialized formats over there. So we can use that function, uh, to ensure that there should be not any SQL intention between, uh, in our WPU or purpose.

How do you optimize database interactions? Okay. So for that, if we have a multisite for that, if we have multisite of 2 of that 3, uh, 3 websites are are implemented in the multisight section. So to, uh, by using the cache, we can use that, uh, by implementing the w p, uh, w p clash w p cache plugin, w p rocket plugins out there. So, uh, if we have any more than it on more than 1, uh, URL or or the website, so we don't have to be get the data again and again from the database. Rather than we we need to implement the cache. Uh, it will be rocket is there to be cache as I already mentioned to optimize the database, uh, interaction between user and our site.

Observe this brief CSS link that is supposed to style a warning message. Background, color white. Perfect. What is wrong with it and how would you protect it? Okay. There is 1, uh, dot warning message. So we can't directly target the message, uh, or we have to be, uh, targeted a specific, uh, class, which is just under or just, uh, with that warning, dot warning class. So the correct answer should be dot warning, dot message. The rest background color should be red, white color, or or text color. Uh, color white is also, uh, there is no issue, and the font will hold. That's already, uh, it will work then. So all the correction is dot warning dot dot message.

Given this, like, PHP function, identify what it does and point out any potential security flow. Connection Okay. Firstly, we are trying to match the username and the password, uh, which is stored in our database. This is the main point for this query. And the potential security flaw is, uh, there should be I can add the SQL injection in this for username and the password for the phone. So as I mentioned before, we need to firstly validate the username. There should be only characters in the username, and password should be only that characters. There should be not any special especially use of name or any type of script, uh, any type of, uh, which is not suitable, uh, as per the password or the username in that detail. So firstly, we have to be firstly, uh, checked by username and the rest, uh, rest is fine.

Upgrading legacy code for plug in. They are the latest PHP word for standard. Okay. So suppose if I want to suppose if our WordPress has been upgraded, okay, from 5.4 to 66.3. But our plug in is also as for the 5.4. Then there is a 2 days. If it is, uh, uh, if that we have, uh, just to use a third party plugin. So firstly, we should update that plug in firstly before update at work, uh, before update the the the, uh, the WordPress version. Secondly, if we have that custom plug in or the extension, which we have created by all, firstly, we need to, uh, then firstly, uh, upgrade the wordpress And there should be and, of course, there will be issues, and we are sure that we need to debug that where we need to change, uh, the specific syntax as per the new WordPress standard or the PHP standard as well.

So in the WordPress, so we can uh, add us in Kronos codes. For example, if we have some JavaScript code, which which we don't need to be run on the page code, this should be run, uh, asynchronous asynchronously. So, uh, so firstly, we have to be in queue, uh, and register. First, we have registered and then include that asynchronous. So while we are registering that, yes, we have a parameter that we need to, uh, assign on us or synchronize file. So there is a hook also for this, and we can also create our custom hook that this is a specific ID of that specific script or specific into and whether to so we can target that specific ID at us or synchronous JavaScript. Uh, file or or synchronous JavaScript code anyways. So what will be happen? So, uh, so whenever, uh, JavaScript will be run and whenever that our site will be, uh, will be loaded, So that code will not order that that time. It will be loaded once that request has been completed from that code. That's why it is a asynchronous.

How do you propose to manage real time notification in our ecommerce site using WordPress and ecommerce? How do you propose a manager to when I click your time notification? Okay. So we can go for the see, notification, we can do in the 2 form. Either we can send an email to that client. Let's suppose if that client is having card. Some some item in the card, but the user is not go to the checkout. So in that time of case, we can send by email, and, uh, we can create that plugin for ecommerce, uh, for that, uh, ecommerce plugin. So here, we can check that which, uh, which user have the card, but not go to the checkout. So accordingly, we can send that email to the users. Secondly, we can create our own custom endpoints. So, uh, so that endpoint need to hit of that, uh, endpoints need to hit by the front end, uh, by the front end applications. So whenever so there is a a notification or there is a notification hook in the BSP code. So we need to use that notification hook by, uh, so through, uh, that API hook we can do. We can either we can send an email or we can also send the note, uh, API API accordingly. Yeah.