Custom WordPress Plugin vs functions.php: Where Should the Code Go?

Decide where business logic, integrations, checkout behavior, admin tools, shortcodes, and theme presentation changes belong.

Start with the request that actually fails

Complex WordPress sites rarely have one isolated layer. A single interaction can involve PHP hooks, JavaScript events, cached data, user/session state, third-party plugins, background jobs, and external APIs. The first useful question is not “which plugin should we disable?” It is “which request or state transition produced the wrong result?”

Find the extension point that owns the behavior instead of patching the rendered result.

The likely root-cause pattern

Keep business functionality in a plugin when it should survive theme changes.

On staging, we would compare the expected state with the values WordPress actually sees at the relevant hook or request. Temporary logs should capture IDs, statuses, hook decisions, timing, and response codes, but not payment secrets, passwords, or unnecessary personal data.

A safer implementation approach

1. Reproduce one concrete example and record the current result.
2. Identify the source of truth for the value or state that is wrong.
3. Locate the official hook, filter, API, or extension point closest to that source.
4. Implement the smallest change that produces the intended state.
5. Retest the original case plus nearby edge cases before live deployment.

Use staging, targeted logging, and a small diff so the fix is easy to verify and roll back.

What we verify before calling it fixed

• The exact original failure is resolved with the same user/cart/data state that exposed it.
• The change does not create a refresh loop, duplicate event, duplicate remote record, or conflicting source of truth.
• Guest and authenticated paths are checked when both exist.
• Relevant cache, cron, webhook, payment, enrollment, or API behavior is tested only where the change touches it.
• The fix survives a normal page reload and does not depend on manually clearing data every time.

When custom development is the better answer

If the issue crosses multiple plugins, depends on business-specific rules, or appears only under a particular checkout, membership, hosting, or integration state, adding another generic plugin can make the system harder to reason about. AbdelSpark works inside existing WordPress installations, so we can inspect the current stack first and keep working functionality intact.