AI WordPress code snippet generator (opens in new tab)

Neat.

post_with_file() in api.php makes me squinty. There's a lot of dead code in there; unless I'm missing something, that function is only called from infer_faceshape(), and that function is passing a harcoded empty array for the second parameter, which means the foreach(...) loop in it never fires. Ditto for the $filename parameter and the conditional that handles it. I'd also raise some concern about passing $file_path directly to your post data; WP core does some upload filename sanitation, I think, but I don't recall how much or how good it is (or isn't), and anyone that can reach your post_with_file() function might be able to post arbitrary data to your API endpoint (but maybe your API is robust enough that that's not a big deal). WP core has some functions for handling file uploads and filename sanitation that might be helpful here, e.g.: https://developer.wordpress.org/reference/functions/media_ha...

If your plugin is only storing an API key and another setting or two, the best practice is to use WP's options API instead of creating your own table: https://codex.wordpress.org/Options_API

Overall though, Copilot produced some code that's pretty darn standard for the WP community, and knocking it out in 2 hours starting from scratch is way more efficient than I could (or would want to) knucklebust it myself. Cool!

Brian is very glad to see this. I am not your broker, but this contains three vulnerabilities that I can see. Seriously my dude/dudette, have you vetted this at all? I am no longer a pentester, but you have at least 2 ways to do RCE. Please don't post this again.

$8/mo for something that is just a snippet tool is outrageous for how limited it is at the moment. As I said most WP development is simple loops, and for advanced development you aren't going to use an AI tool like this (especially given its bad coding example snippets.) A plugin like Advanced Custom Fields is worth the price because it's very high quality, so of course that's worth it. This is also not overly unique, GenerateWP for example already has some of this for free. https://generatewp.com/

And for more advanced stuff, you already have co-pilot, if you wanted something similar.

There are no two ways around it: the people who wrote that copy are fucking clueless about what they’re selling and why. It better be a misguided agency or freelancer who wrote it because if it was the founders, it’d reveal a massive lack of product vision.

What I meant is: it is true you will still have to know how to read, integrate (and edit) the generated code, but you will {no[t] code} it yourself (see that no-code there).

I'm not very familiar with current AI “copilots” performance, and I'm more thinking in term of the "ideal" code generator (= good output)

It may seem like a stretch, but I’m one of those who dislike coding everything A-Z while still acquiescing to editing (good) code and enjoing integrating it.