Complete Solution for Passing Extra Variables in WordPress URLs

Problem Background and Challenges

In WordPress development, there is often a need to pass additional query parameters in URLs. Many developers initially attempt to use PHP's $_GET superglobal to handle these parameters, but this approach often encounters issues on non-root WordPress pages. For example, when the URL is www.example.com/news?c=123, $_GET['c'] may fail to retrieve the value correctly, while it works fine with the root URL www.example.com?c=123.

WordPress Standard Solution

To adhere to WordPress development standards, it is recommended to use the following three core functions for URL parameter passing and retrieval:

Creating URLs with Parameters

The add_query_arg() function safely constructs URLs containing query parameters. This function automatically handles URL encoding and parameter concatenation, avoiding errors that may occur with manual URL construction.

<?php
// Create link to current page
$url = add_query_arg('c', $value);

// Create link to specific page
$url = add_query_arg('c', $value, site_url('/target-page/'));
?>

Registering Custom Query Variables

WordPress only recognizes a limited set of query variables by default. Custom variables must be registered using the query_vars filter:

<?php
function register_custom_query_vars($vars) {
    $vars[] = 'c';
    $vars[] = 'other_param'; // Multiple variables can be registered
    return $vars;
}
add_filter('query_vars', 'register_custom_query_vars');
?>

Retrieving Query Variable Values

After registering variables, use the get_query_var() function to safely retrieve their values:

<?php
$c_value = get_query_var('c');
if (!empty($c_value)) {
    // Process the retrieved value
    echo 'Parameter c value: ' . esc_html($c_value);
}
?>

Special Handling for Admin Area

In the wp-admin area, WordPress does not execute the main query, so the query_vars filter does not run. In this case, it's necessary to fall back to traditional $_GET handling methods:

<?php
// Recommended approach using filter_input for security
$c_value = filter_input(INPUT_GET, 'c', FILTER_SANITIZE_STRING);

// Or use traditional isset check
$c_value = isset($_GET['c']) ? sanitize_text_field($_GET['c']) : '';
?>

Complete Implementation Example

The following is a complete implementation example demonstrating how to integrate all necessary code in the theme's functions.php file:

<?php
// Register custom query variables
function my_custom_query_vars($vars) {
    $vars[] = 'c';
    return $vars;
}
add_filter('query_vars', 'my_custom_query_vars');

// Usage in template files
function display_custom_parameter() {
    $c_value = get_query_var('c');
    if ($c_value) {
        echo '<div class="custom-param">Parameter c: ' . esc_html($c_value) . '</div>';
    }
}

// Example of creating parameterized links
function create_custom_link($value) {
    return add_query_arg('c', $value, get_permalink());
}
?>

Security Considerations

Security is crucial when handling URL parameters:

• Always escape output using functions like esc_html(), esc_url()
• Validate and sanitize input data
• Avoid using user input directly in database queries
• Use WordPress-provided security functions instead of native PHP functions

Alternative Solutions and Plugins

For developers who prefer not to code manually, consider using specialized plugins like Custom Query String Plugin. These plugins provide user-friendly interfaces for managing custom query parameters, suitable for non-technical users or rapid prototyping.

Performance Optimization Recommendations

When extensively using custom query variables, pay attention to performance impact:

• Register query variables only on needed pages
• Avoid registering unnecessary variables
• Use caching mechanisms to reduce repetitive processing
• Regularly review and clean up unused query parameters

By following WordPress standard practices, developers can create more secure, stable, and maintainable URL parameter handling systems. This approach not only solves current technical issues but also establishes a solid foundation for future feature expansion.