Last.FM Recently Played for WordPress

FAQ

Do I need my own API key?

No! The plugin works immediately with a default shared API key. However, getting your own free API key is recommended for:
* Better performance
* Higher rate limits
* Avoiding potential throttling from shared key usage

Visit https://www.last.fm/api/account/create to create a free API account. You’ll receive an API key immediately after registration.

How often does the widget update?

The widget caches user data for 1 hour and track data for 5 minutes to improve performance and respect Last.FM’s API rate limits. When a track is currently playing, it will show « Now playing… » in real-time.

How do I use the shortcode?

Add this to any post or page:
[lastfm_tracks user= »your_username »]

Optional parameters:
* count – Number of tracks (default: 5, max: 50)
* showuser – Show user info (default: true)

Examples:
* [lastfm_tracks user="johndoe" count="10"]
* [lastfm_tracks user="johndoe" count="3" showuser="false"]

How do I use the template function?

Add this to your theme files (header.php, sidebar.php, etc.):

<?php if ( function_exists( 'lastfm_display_tracks' ) ) {
    lastfm_display_tracks( 'your_username', 5, true );
} ?>

Parameters:
1. Username (required)
2. Number of tracks (optional, default: 5)
3. Show user info (optional, default: false)

Can I hide the user profile information?

Yes! In the widget settings, simply uncheck « Show user profile information » to display only the track list without the user’s profile picture, name, and play count.

For shortcode: Use showuser="false"
For template function: Set third parameter to false

Can I customize the styling?

Yes! The plugin uses standard CSS classes that you can override in your theme’s CSS:
* .lastfm-row – Container for rows
* .lastfm-user – User info section
* .lastfm-tracklist – Track list items
* .lastfm-col-* – Column classes

Is this plugin secure?

Yes! Version 1.0.0 includes major security improvements:
* API keys stored securely in WordPress options (not hardcoded)
* All output properly escaped to prevent XSS
* Input validation and sanitization
* Uses wp_remote_get() instead of insecure file functions
* HTTPS-only API calls
* Nonce verification for settings

Does this work with PHP 8.x?

Yes! The plugin is fully compatible with PHP 8.0+ and uses modern PHP features like strict types and type hints.

How do I report bugs or request features?

Please use the GitHub issue tracker:
https://github.com/kommers-io/LastFM-Played-for-Wordpress/issues