Title: D11 Random Quote Loader Author: briz_dad Published: May 28, 2026 Last modified: August 20, 2026 --- Search plugins ![](https://ps.w.org/d11-random-quote-loader/assets/banner-772x250.png?rev=3552976) ![](https://ps.w.org/d11-random-quote-loader/assets/icon-256x256.png?rev=3552976) # D11 Random Quote Loader By [briz_dad](https://profiles.wordpress.org/briz_dad/) [Download](https://downloads.wordpress.org/plugin/d11-random-quote-loader.2.3.2.zip) * [Details](https://twd.wordpress.org/plugins/d11-random-quote-loader/#description) * [Reviews](https://twd.wordpress.org/plugins/d11-random-quote-loader/#reviews) * [Installation](https://twd.wordpress.org/plugins/d11-random-quote-loader/#installation) * [Development](https://twd.wordpress.org/plugins/d11-random-quote-loader/#developers) [Support](https://wordpress.org/support/plugin/d11-random-quote-loader/) ## Description **D11 Random Quote Loader** adds a classic WordPress widget that pulls a random quote from a custom database table each time a page loads. Quotes are managed entirely from within your WordPress dashboard, and the plugin ships with three sample quotes so it works immediately after activation. **Features:** * Displays a random quote on every page load using an efficient COUNT + OFFSET strategy (not ORDER BY RAND()) * Full admin panel — add, edit, and delete quotes without touching code * CSV Export — download all your quotes as a spreadsheet-compatible .csv file * CSV Import — bulk-upload quotes with automatic encoding detection (UTF-8 and Windows-1252 / Excel), BOM stripping, per-row validation, and a 5,000-row safety limit * Clean, semantic HTML output using blockquote, p, and cite elements — easy to style with your theme’s CSS * Fully internationalised — every string is ready for translation via the d11-random- quote-loader text domain * Safe uninstall — drops the custom table only when the plugin’s own signature column is detected * Security hardened — nonces on every form, current_user_can() capability checks, full output escaping, and wp_rand() throughout * [d11rql_random_quote] shortcode — insert a random quote into any post, page, or text widget * Quote categories — tag quotes and display different sets on different pages or sidebars ## Screenshots [⌊A random quote displayed live on the front end of a WordPress site⌉⌊A random quote displayed live on the front end of a WordPress site⌉[ A random quote displayed live on the front end of a WordPress site [⌊The Manage Quotes admin page — add, edit, delete, export, and import quotes⌉⌊The Manage Quotes admin page — add, edit, delete, export, and import quotes⌉[ The Manage Quotes admin page — add, edit, delete, export, and import quotes [⌊Configuring the D11 Random Quote Loader widget in the WordPress Widgets screen⌉⌊ Configuring the D11 Random Quote Loader widget in the WordPress Widgets screen⌉[ Configuring the D11 Random Quote Loader widget in the WordPress Widgets screen ## Installation 1. Upload the d11-random-quote-loader folder to /wp-content/plugins/, or install directly through the WordPress plugin screen. 2. Activate the plugin through the Plugins screen in WordPress. 3. Go to Appearance > Widgets and drag the D11 Random Quote Loader into your desired sidebar. 4. Optionally set a widget title and click Save. 5. Visit Quotes in your admin menu to add, edit, or delete quotes, or to import/export via CSV. ## FAQ ### How do I add quotes? Navigate to Quotes in your WordPress admin sidebar. Use the form at the top of the page to add a new quote and an optional author name. ### Can I import quotes in bulk? Yes. Prepare a .csv file with two column headers: quote and author. Use the Import CSV section at the bottom of the Quotes admin page. By default, imported quotes are appended to your existing library and exact quote+author duplicates are skipped; you can optionally choose Replace to delete existing quotes first. Import supports up to 5,000 rows. Files saved from Excel (Windows-1252 encoding) are converted automatically. ### How do I export my quotes? Click Export to CSV on the Quotes admin page. The file downloads immediately. ### Can I style the widget output? The widget currently outputs the quote and author as plain, unstyled paragraph elements with no CSS classes attached, so there’s nothing to target directly — style it via your theme’s general paragraph rules, or wrap the widget area in a custom container. The shortcode (below) uses semantic markup with CSS classes and is the better option if you want more granular styling control. ### Will my quotes be deleted if I deactivate the plugin? No. Deactivating the plugin leaves the database table intact. Quotes are only deleted when you choose Delete on the Plugins screen, which triggers the uninstall routine. ### Is the plugin translation-ready? Yes. All user-facing strings use the d11-random-quote-loader text domain and are ready for translation via .po/.mo files in the /languages/ folder, or via translate. wordpress.org. ### What PHP version is required? PHP 7.4 or higher. PHP 8.0+ is fully supported and recommended. ### How do I use the shortcode? Place [d11rql_random_quote] anywhere in a post or page. Available parameters: [d11rql_random_quote] [d11rql_random_quote title=”Daily Quote”] [d11rql_random_quote category=”inspiration”] [d11rql_random_quote title=”Food for Thought” category=” philosophy”] The shortcode outputs a div.rqw-shortcode wrapper containing a blockquote.rqw-shortcode- quote element, and an h3.rqw-shortcode-title when a title is provided. ### How do categories work? Assign a category name to any quote when adding or editing it in the Quotes admin page. Then use [d11rql_random_quote category=”your-category”] in a shortcode, or set a category in the widget settings. Quotes with no category assigned are treated as uncategorized and will appear in all category queries as a fallback. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “D11 Random Quote Loader” is open source software. The following people have contributed to this plugin. Contributors * [ briz_dad ](https://profiles.wordpress.org/briz_dad/) [Translate “D11 Random Quote Loader” into your language.](https://translate.wordpress.org/projects/wp-plugins/d11-random-quote-loader) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/d11-random-quote-loader/), check out the [SVN repository](https://plugins.svn.wordpress.org/d11-random-quote-loader/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/d11-random-quote-loader/) by [RSS](https://plugins.trac.wordpress.org/log/d11-random-quote-loader/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 2.3.2 * Compatibility: confirmed compatibility with WordPress 7.1 and updated “Tested up to” accordingly. No functional changes. #### 2.3.1 * Compatibility: added explicit escape parameter (empty string) to all fgetcsv() and fputcsv() calls, resolving PHP 8.4 deprecation notices that could corrupt exported CSV files. * Security: CSV import now validates the PHP upload error code (UPLOAD_ERR_OK), enforces a 10 MB file size limit, and verifies the upload via is_uploaded_file() before processing. * Fix: corrected the third argument of shortcode_atts() from ‘random_quote’ to ‘ d11rql_random_quote’, preventing potential filter conflicts with other plugins. * Reliability: database version is now saved only after confirming the table exists, ensuring a failed installation retries correctly on the next page load. * Reliability: CSV import in replace mode now rolls back and preserves existing quotes when zero valid records are found in the uploaded file. * Fix: removed wp_unslash() from values returned by fgetcsv() — backslashes in imported quotes and author names are now preserved correctly. * Fix: added $wpdb->esc_like() to all SHOW TABLES LIKE queries, preventing false matches on table names containing SQL wildcard characters. * Feature: CSV import now offers two modes — Append (default, adds imported quotes alongside existing ones, skipping exact duplicates) and Replace (deletes all existing quotes before importing). #### 2.3 * Security: renamed database table from {prefix}quotes to {prefix}d11rql_quotes, eliminating collision risk with other plugins. Existing installs are migrated automatically. * Security: replaced TRUNCATE TABLE with DELETE FROM inside the CSV import transaction. TRUNCATE causes an implicit commit in MySQL, meaning a failed import could not be rolled back. DELETE FROM is fully transactional. * Security: replaced explode()/str_getcsv() CSV parser with a php://memory stream + fgetcsv(). The previous approach broke on quoted multi-line fields. The memory stream approach has no filesystem writes and correctly handles all RFC 4180 CSV edge cases. * Synced D11RQL_MIN_WP_VERSION constant and plugin header to 6.9 to match readme. txt. #### 2.2 * Renamed all internal function, constant, option, and transient prefixes from rqw_ (3 chars, too short) to d11rql_ to comply with WordPress.org prefix length requirements (minimum 4 characters). * Updated plugin_signature value in database from rqw_v1 to d11rql_v1. * No database schema changes — existing installs upgrade cleanly on next page load. #### 2.1 * Changed shortcode tag from [random_quote] to [d11rql_random_quote] to comply with WordPress.org prefix requirements. * Rewrote CSV import to use in-memory str_getcsv() parsing — no temporary filesystem writes. * Removed load_plugin_textdomain() call, which is no longer needed for WordPress. org hosted plugins since WordPress 4.6. * Fixed Contributors field in readme.txt to use correct WordPress.org username ( briz_dad). #### 2.0.6 * Compatibility: updated “Tested up to” to WordPress 7.0. * Updated “Requires at least” to WordPress 6.9. * No code or database changes. #### 2.0.5 * Admin: added pagination to the Manage Quotes page. Defaults to 10 quotes per page with numbered page links and Previous/Next controls. * Admin: added a per-page dropdown (10, 25, 50, 75, 100) that persists across page navigation and category filtering. * Admin: quote count display shows current range and total (e.g. “Showing 1–10 of 74 quotes”). * Admin: category filter links now reset to page 1 and preserve the current per- page setting. * Admin: export description clarified to confirm all quotes are exported regardless of current page or filter. #### 2.0.4 * Database: added an index on the category column for faster category-filtered queries on larger quote libraries. Applied automatically via dbDelta on next page load — no manual steps required. #### 2.0.3 * Fix: Added DONOTCACHEPAGE constant to both the shortcode and widget output functions. This tells WP Super Cache, W3 Total Cache, WP Rocket, and other major caching plugins not to serve a static cached copy of pages containing a random quote — ensuring the quote is genuinely random on every page load for logged-out visitors. * Data: encoding fix for smart quotes, em dashes, and emoji in imported CSV data( Mojibake caused by Windows-1252 bytes being mis-interpreted as UTF-8 during export). #### 2.0.2 * Database: replaced all SELECT * queries with explicit column lists (id, quote, author, category) across all files. * Database: CSV import now runs inside a MySQL transaction — if any insert fails mid-import, a ROLLBACK fully restores the original quotes rather than leaving a partial data set. * Database: admin quote listing queries now use explicit column selection. * No database schema changes — safe drop-in replacement for 2.0.1. #### 2.0.1 * Security: capability check in admin form handler now fires before any superglobal access, closing a trivial bypass via spoofed $_GET[‘page’]. * Security: admin success notices (added/updated/deleted) now use per-user transients instead of URL parameters, preventing anyone from flashing misleading notices via crafted URLs. * Security: uninstall.php now verifies the table exists before running SHOW COLUMNS, preventing a DB error on edge-case removal. * Reliability: rqw_maybe_upgrade_db() now uses a static guard to prevent repeated dbDelta calls if update_option() fails transiently. * Reliability: rqw_get_random_quote() now handles the COUNT/OFFSET race condition— if a quote is deleted between the two queries, it falls back to the first available quote instead of silently returning nothing. * Version bump to 2.0.1 (no database changes). #### 2.0 * Added quote categories — assign a category to each quote and filter by category in the widget, shortcode, and admin page. * Shortcode now accepts a category parameter: [d11rql_random_quote category=”inspiration”]. * Widget settings now include an optional Category field. * Admin page: Category column added to the quotes table, category field in Add/ Edit forms, filter bar to view quotes by category, category autocomplete using HTML datalist. * CSV export now includes the category column. CSV import supports an optional category column (backwards compatible with old files). * Database: added category column (varchar 100) via dbDelta — safe, non-destructive upgrade for existing installations. * Uncategorized quotes (empty category) appear in all category-filtered queries as a fallback. #### 1.9 * Added [d11rql_random_quote] shortcode for displaying a random quote in any post or page. * Shortcode supports an optional title parameter: [d11rql_random_quote title=”Daily Quote”]. * Shortcode output uses semantic blockquote/cite markup with CSS class hooks (rqw- shortcode, rqw-shortcode-quote, rqw-shortcode-title). #### 1.8 * WordPress.org submission release. * Added Requires PHP: 7.4 header and runtime PHP/WP version checks on activation. * Added RQW_VERSION constant. * Full WordPress Coding Standards pass: tabs for indentation, absint() replacing intval(), wp_rand() replacing rand(), gmdate() replacing date(). * All user-facing strings now use the d11-random-quote-loader text domain (previously some used the bare text_domain placeholder). * Widget output updated to use semantic blockquote/cite markup with CSS class hooks. * Widget now renders before_title/after_title when a title is set. * Admin page function renamed to rqw_render_admin_page for consistent rqw_ namespacing. * All $wpdb insert/update/delete calls now pass explicit format arrays. * Added GPL-2.0-or-later SPDX licence identifier and @package docblock to every file. #### 1.7 * CSV import: added per-row UTF-8 validation with skip-and-report for unreadable characters. * CSV import: 5,000-row limit with count of skipped rows reported to the user. #### 1.6 * CSV import: added BOM stripping and Windows-1252 to UTF-8 encoding conversion. * CSV import: server-side MIME type and file-extension validation. #### 1.5 * CSV export moved to admin-post.php for a proper browser file-download response. #### 1.4 * Added CSV import and export functionality. #### 1.3 * Added inline edit functionality for existing quotes. #### 1.2 * Security pass: nonces added to all forms, current_user_can() checks on all admin actions. #### 1.1 * Replaced ORDER BY RAND() with COUNT + OFFSET strategy for better database performance. #### 1.0 * Initial release. ## Meta * Version **2.3.2** * Last updated **2 weeks ago** * Active installations **Fewer than 10** * WordPress version ** 6.9 or higher ** * Tested up to **7.1** * PHP version ** 7.4 or higher ** * Language * [English (US)](https://wordpress.org/plugins/d11-random-quote-loader/) * Tags * [inspirational](https://twd.wordpress.org/plugins/tags/inspirational/)[quote](https://twd.wordpress.org/plugins/tags/quote/) [random](https://twd.wordpress.org/plugins/tags/random/)[sidebar](https://twd.wordpress.org/plugins/tags/sidebar/) [widget](https://twd.wordpress.org/plugins/tags/widget/) * [Advanced View](https://twd.wordpress.org/plugins/d11-random-quote-loader/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/d11-random-quote-loader/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/d11-random-quote-loader/reviews/) ## Contributors * [ briz_dad ](https://profiles.wordpress.org/briz_dad/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/d11-random-quote-loader/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://www.paypal.com/paypalme/gregorywilker)