5 safety steps before you let an AI coding agent touch WordPress

Описание и применение

Пошаговый процесс безопасного использования AI‑кодировщиков в WordPress: локальная работа, ограничение каталога, резервное копирование базы, небольшие запросы и проверка diff перед публикацией.

Задача

AI coding agents can unintentionally modify critical WordPress files or database entries, risking site integrity.

Результат

Adopting staged environments, directory restrictions, database backups, incremental AI requests, and pre-deployment checks significantly mitigates accidental site damage when using AI coding agents.

Рабочий процесс

• 1. Work locally or on staging, never on production
• 2. Limit the working directory to the theme folder
• 3. Back up the database with wp db export before each session
• 4. Keep each request small and review after each step
• 5. Read the diff and check plugin list and siteurl before deployment

Доказательства

Claude Code, Codex and similar agents can now do a surprising amount of work on a WordPress theme or a set of pages.

Источник

Work locally or on staging, never on production

Источник

If you hand the agent the whole repo or the WordPress root, it will read wp-config.php and core files too.

Источник

So export with WP-CLI before every session: # before wp db export backups/before-ai-$(date +%Y%m%d-%H%M).sql # roll back if needed

Источник

Before anything goes live, I check at least this: git diff --stat # which files changed wp plugin list --status=active # any plugins you don't recognise? wp option get siteurl # did the URL get rewritten?

Источник