zanagb

Well, i want to thank you two for the responses. I’ll definitely be looking into removing direct file access through an .htaccess file. It’ll make our lives a lot easier, management wise, so we can just focus on registered users looking at content through the site.

As for using hooks for the file. This absolutely shows my lack of knowledge, but, i already have a plugin i’ve been in the process of applying fixes to.

Since it does not have any functions involved on the non-admin usage of the site, could i use the existing plugin, say, in the main file through an include/require to keep the script loaded and execute it with the init hook? ( which seems to be the earliest point on which users are authenticated ), or would i need to turn the script, which only contains the manipulation logic, into it’s own plugin? I understand it might be a silly question, but it would be great to keep all the bespoke things bundled together if the hooks don’t cause any conflict.