This template outlines system boundaries, module layout, data flow, and a high level threat model for Starisian WordPress plugins.
- PHP 8.2+ and WordPress 6.8+.
- Optional Node toolchain for asset builds.
plugin-entry.phpbootstrap.src/for PSR-4 classes underStarisian\src\.assets/,schemas/, anddata/for optional resources.
Requests enter through WordPress hooks, are routed through the core singleton, and fan out to feature modules. External API calls must be sanitized and escaped.
- Input validation at every boundary.
- Nonces for form and AJAX submissions.
- Escaped output to prevent XSS.
- Load assets only when required.
- Keep front-end bundles small for low bandwidth environments.