Generate a tiny, safe WordPress plugin
Plugins are just PHP files with a header. You will generate a tiny one with the three security habits every plugin needs — the ABSPATH guard, escaped output and prefixed functions — and test it safely in WordPress Playground in your browser.
You will practise
- Plugin header and file structure
- Escaping output with esc_html
- Testing safely in WordPress Playground
1Brief
Answer a few questions. The generator writes the code; you will read and change it.
2Make
Generate the project, then open every file. Comments explain each part. You can edit files right here.
3Check
Automatic checks for the mistakes that break real projects: invalid config, leaked keys, missing security steps.
4Improve
- Run the check first.
Your change: Add a setting: change the notice colour by editing the inline style, upload the new version and confirm it changed.5Ship
Upload the ZIP in WordPress → Plugins → Add New → Upload. Test first in WordPress Playground (free, in-browser). Step-by-step instructions are inside
README.md.✓ Added to your tool record on this device. See all 39 tools →
Questions people ask
Do I need a server to test?
No — WordPress Playground runs WordPress inside your browser for free.
Why escape output?
esc_html() stops text from being interpreted as code, preventing a common type of website attack.
Do I need an AI key to use this?
No. The guided template teaches the same skill with no AI at all. If you add your own free key (Groq, Google Gemini, OpenRouter, Mistral or Cerebras), the tool can also draft and revise. The key stays in your browser and requests go straight to that provider.
Where is my work saved?
In this browser only (local storage), until you copy or download it. Nothing you type is sent to Open Practice.