xCRUD Nova in WordPress
This whole page is a real WordPress site. The grid below is a genuine xCRUD Nova widget, embedded with one shortcode — no login required to view it.
How this was added to WordPress
- Copy the
xcrud-novaplugin folder intowp-content/plugins/and activate it — nothing else to install. - Point one file,
src/Config.php, at your database — independent of WordPress’s own, can be the same DB or a separate one. - Write a normal PHP page under
pages/, exactly like a standalone xCRUD Nova deployment. - Add one entry to
includes/route-capabilities.phpsaying who can see it. - Drop
into any post or page.
Why this grid is safe to show the public: it’s built with Xcrud::query(), a genuinely read-only request path — no table name ever reaches the browser, so there’s nothing for a stranger to write to, even in principle.
An ordinary widget instead requires a real WordPress capability, enforced both when the page renders and on every data request the widget makes — not just a cosmetic show/hide.
No eval() anywhere in this plugin. Every widget is a real, version-controlled PHP file — never raw code typed into a post.