Adding custom code to WordPress (safely)