← Integrations

Static Shield + WPCode

WPCode is architecturally different from every other integration here: there's no single "WPCode is compatible" answer, because a code-snippet manager's entire job is running whatever PHP, JS, HTML, or CSS a site owner has actually pasted into it. Instead of guessing from the plugin's presence, Static Shield scans this specific site's own active WPCode snippets and reports on each one individually — so a site with three harmless CSS tweaks and one snippet checking $_GET or is_user_logged_in() gets a mixed, per-snippet answer rather than one verdict dragged down by the outlier.

Recommended mode

No single mode applies — WPCode doesn't influence which serving mode a site should use; see the notes below for what it actually does.

Static behavior

Snippets where the scan finds no obvious request-dependent pattern — plain CSS, static markup, JS with no server calls, and similar — are treated as candidates for static serving, snippet by snippet.

Dynamic behavior

Any snippet where the scan finds a request- or session-dependent signal — superglobals like $_GET/$_POST/$_COOKIE, is_user_logged_in(), current_user_can(), WooCommerce cart-state checks, nonces, and similar — is flagged as needing a real WordPress request, not a static build.

Bridges & routes

None needed by WPCode itself — it declares no public routes of its own. A snippet flagged dynamic stays dynamic outright rather than being routed through a bridge, since arbitrary code isn't something a generic bridge can safely wrap.

Setup

No special setup — WPCode is detected automatically, and its active snippets are rescanned as they're added, edited, or removed.

Limitations

This is not a fixed classification — it's a live, best-effort keyword scan run against whatever snippets are actually active on this site, re-evaluated as those snippets change. The scan checks for a fixed list of request/session-dependent signals; it can miss dynamic logic written in an unexpected way, and it can flag a snippet as potentially dynamic when a matching keyword only appears in a comment or an unreachable code path. Every snippet flagged dynamic — and, periodically, the ones with no clear signal either way — is worth a manual read before trusting this site's overall profile; this is a starting point for review, not a guarantee.