Custom meta boxes in Wordpress - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a custom meta box in WordPress?

A custom meta box is a section added to the WordPress post editor screen where you can add extra fields or controls to collect additional information about a post.

beginner

Which WordPress hook is used to add custom meta boxes?

The add_meta_boxes hook is used to register and add custom meta boxes to the post editor screen.

intermediate

What function is used to create the content inside a custom meta box?

You create a callback function that outputs the HTML for the meta box content. This function is passed as a parameter to add_meta_box().

intermediate

How do you save data entered in a custom meta box?

You hook into save_post action and use update_post_meta() to save the meta box data securely when the post is saved.

intermediate

Why should you use wp_nonce_field() in custom meta boxes?

Using wp_nonce_field() adds a security token to your meta box form to protect against unauthorized form submissions (CSRF attacks).

Which function registers a custom meta box in WordPress?

A create_meta_box()

B register_meta_box()

C new_meta_box()

D add_meta_box()

add_meta_box() is the correct function to register a custom meta box.

Where do custom meta boxes appear in WordPress?

A On the WordPress dashboard

B On the post editor screen

C In the theme customizer

D On the plugins page

Custom meta boxes appear on the post editor screen to add extra fields.

Which hook should you use to save meta box data?

A wp_head

B init

C save_post

D admin_menu

The save_post hook runs when a post is saved, perfect for saving meta box data.

What is the purpose of wp_nonce_field() in meta boxes?

A To add a security token to the form

B To style the meta box

C To load JavaScript files

D To create a new post

wp_nonce_field() adds a security token to protect against unauthorized submissions.

Which parameter of add_meta_box() defines the callback function for the meta box content?

A The third parameter

B The first parameter

C The last parameter

D The second parameter

The third parameter of add_meta_box() is the callback function that outputs the meta box HTML.

Explain how to add a custom meta box to a WordPress post editor screen and save its data.

Think about the steps from showing the box to saving the input.

Why is it important to use nonces when working with custom meta boxes in WordPress?

Consider what could happen if anyone could submit the form.

Practice

1. What is the main purpose of adding a custom meta box in WordPress?

easy

A. To change the theme colors automatically

B. To create new user roles

C. To add extra input fields on the post edit screen

D. To optimize the website speed

Solution

1. Step 1: Understand what meta boxes do

   Meta boxes provide extra areas on the post edit screen for input.

2. Step 2: Identify the purpose of custom meta boxes

   They allow adding custom fields to collect extra data for posts or pages.

3. Final Answer:

   To add extra input fields on the post edit screen -> Option C

4. Quick Check:

   Custom meta boxes = extra input fields [OK]

Hint: Meta boxes add fields on edit screens [OK]

Common Mistakes:

• Confusing meta boxes with theme or user settings
• Thinking meta boxes change site speed
• Assuming meta boxes create user roles

2. Which function is used to add a custom meta box in WordPress?

easy

A. add_meta_box()

B. register_meta_box()

C. add_custom_box()

D. create_meta_box()

Solution

1. Step 1: Recall WordPress function for meta boxes

   The official function to add meta boxes is add_meta_box().

2. Step 2: Verify other options

   Other options are not valid WordPress functions for meta boxes.

3. Final Answer:

   add_meta_box() -> Option A

4. Quick Check:

   Use add_meta_box() to add meta boxes [OK]

Hint: Remember exact function name: add_meta_box() [OK]

Common Mistakes:

• Using incorrect function names like add_custom_box()
• Confusing with register_meta_box() which doesn't exist
• Trying to create meta boxes without this function

3. Given this code snippet, what will be the output on the post edit screen?

add_action('add_meta_boxes', function() {
  add_meta_box('my_box', 'My Box', function() {
    echo '<input type="text" name="my_field" value="Hello" />';
  }, 'post');
});

medium

A. A checkbox labeled 'My Box' with 'Hello' inside

B. A text input box labeled 'My Box' with 'Hello' inside

C. No meta box will appear because 'post' is invalid

D. An error because the callback function is missing parameters

Solution

1. Step 1: Analyze add_meta_box parameters

   The ID is 'my_box', title is 'My Box', callback outputs a text input with value 'Hello', and screen is 'post'.

2. Step 2: Understand the callback output

   The callback prints an input box of type text with name 'my_field' and value 'Hello'.

3. Final Answer:

   A text input box labeled 'My Box' with 'Hello' inside -> Option B

4. Quick Check:

   Callback outputs text input with value 'Hello' [OK]

Hint: Callback echoes input field HTML inside meta box [OK]

Common Mistakes:

• Thinking callback needs parameters to work
• Assuming 'post' is invalid screen
• Confusing input types (text vs checkbox)

4. What is wrong with this code snippet for saving meta box data?

add_action('save_post', function($post_id) {
  update_post_meta($post_id, 'my_field', $_POST['my_field']);
});

medium

A. It should echo the data instead of updating

B. It uses the wrong hook; should be 'add_meta_box'

C. It updates meta with wrong function; should use add_post_meta

D. It lacks a nonce check for security

Solution

1. Step 1: Check security best practices

   Saving meta box data requires verifying a nonce to prevent unauthorized saves.

2. Step 2: Identify missing nonce check

   The code updates post meta directly without checking nonce or user permissions.

3. Final Answer:

   It lacks a nonce check for security -> Option D

4. Quick Check:

   Always verify nonce before saving meta data [OK]

Hint: Always check nonce before saving meta data [OK]

Common Mistakes:

• Skipping nonce verification
• Using wrong hook for saving data
• Confusing update_post_meta with add_post_meta

5. You want to add a custom meta box that only appears on pages (not posts) and saves a checkbox value safely. Which steps are correct to implement this?

hard

A. Use add_meta_box with 'page' screen, output checkbox in callback, save with save_post hook including nonce and permission checks

B. Use add_meta_box with 'post' screen, output checkbox, save without nonce check

C. Use add_meta_box with 'page' screen, output text input, save with save_post hook but no permission check

D. Use add_meta_box with 'post' screen, output checkbox, save with add_post_meta function

Solution

1. Step 1: Choose correct screen and output

   To show on pages only, use 'page' as screen in add_meta_box and output a checkbox input in the callback.

2. Step 2: Save data securely

   Use the 'save_post' hook to save data, but include nonce verification and user permission checks to ensure security.

3. Final Answer:

   Use add_meta_box with 'page' screen, output checkbox in callback, save with save_post hook including nonce and permission checks -> Option A

4. Quick Check:

   Screen='page', checkbox output, secure save with nonce [OK]

Hint: Match screen type and add nonce checks when saving [OK]

Common Mistakes:

• Using wrong screen type ('post' instead of 'page')
• Skipping nonce or permission checks
• Saving checkbox as text input