Last.FM Recently Played for WordPress

FAQ

Do I need my own API key?

No! The plugin works immediately with a default shared API key. However, getting your own free API key is recommended for:
* Better performance
* Higher rate limits
* Avoiding potential throttling from shared key usage

Visit https://www.last.fm/api/account/create to create a free API account. You’ll receive an API key immediately after registration.

How often does the widget update?

The widget caches user data for 1 hour and track data for 5 minutes to improve performance and respect Last.FM’s API rate limits. When a track is currently playing, it will show “Now playing…” in real-time.

How do I use the shortcode?

Add this to any post or page:
[lastfm_tracks user=”your_username”]

Optional parameters:
* count – Number of tracks (default: 5, max: 50)
* showuser – Show user info (default: true)

Examples:
* [lastfm_tracks user="johndoe" count="10"]
* [lastfm_tracks user="johndoe" count="3" showuser="false"]

How do I use the template function?

Add this to your theme files (header.php, sidebar.php, etc.):

<?php if ( function_exists( 'lastfm_display_tracks' ) ) {
    lastfm_display_tracks( 'your_username', 5, true );
} ?>

Parameters:
1. Username (required)
2. Number of tracks (optional, default: 5)
3. Show user info (optional, default: false)

Can I hide the user profile information?

Yes! In the widget settings, simply uncheck “Show user profile information” to display only the track list without the user’s profile picture, name, and play count.

For shortcode: Use showuser="false"
For template function: Set third parameter to false

Can I customize the styling?

Yes! The plugin uses standard CSS classes that you can override in your theme’s CSS:
* .lastfm-row – Container for rows
* .lastfm-user – User info section
* .lastfm-tracklist – Track list items
* .lastfm-col-* – Column classes

Is this plugin secure?

Yes! Version 1.0.0 includes major security improvements:
* API keys stored securely in WordPress options (not hardcoded)
* All output properly escaped to prevent XSS
* Input validation and sanitization
* Uses wp_remote_get() instead of insecure file functions
* HTTPS-only API calls
* Nonce verification for settings

Does this work with PHP 8.x?

Yes! The plugin is fully compatible with PHP 8.0+ and uses modern PHP features like strict types and type hints.

How do I report bugs or request features?

Please use the GitHub issue tracker:
https://github.com/kommers-io/LastFM-Played-for-Wordpress/issues