Deny php execution in /wp-includes – using .htaccess in /wp-includes VS root folder
Deny php execution in /wp-includes – using .htaccess in /wp-includes VS root folder
security
How can I have more confidence that WP plugins aren’t getting and storing user data?
GDPR is about data collection, if a theme, plugin or any other software for that matter is not collecting any data especially personal data aka data and/or information that could potentially refer to a natural person than you don’t need to worry about GDPR. If you or the plugin and/or theme aren’t collecting anything than … Read more
Can I rename the wp-admin folder?
Unfortunately it’s not currently possible nor does there appear to be will to consider it as a modification as you can see by this recent thread on the wp-hackers list and this ticket on trac. If you’d really like to see this be revisited I’d suggest: Present your case on wp-hackers but be forewarned your … Read more
permalinks constantly needs re-saving
When you visit the Permalinks page, the permalinks rules are being flushed. It also forces WordPress to reload them. For this reason, you see the issue go away after saving permalink settings. But after some time, it comes back once again . Try following these steps: Deactivate all the plugins. Then activate one by one. … Read more
Cannot access wp admin of WordPress website (security plugin issue) [closed]
You can reinstall WordPress manually, don’t delete your wp-content folder and unzip the file from https://wordpress.org/latest.zip. Check this Article https://codex.wordpress.org/Upgrading_WordPress#Manual_Update Thanks !!!
Security: AWS (shared hosting) claims template file malicious
I found out enough information as to where these files came from, which for the moment is enough to satisfy me: These were templates added by an update to a plugin (called Thrive) that handles janky website building atop WordPress. After going through numerous sites I found that the templates were all slightly different with … Read more
Security: Critical backend outside of wordpress
My security knowledge of WordPress is not that deep, but I believe this might help you a bit: – First find the vulnerabilities, once you know which one exists, research and find out how to fix it specifically. To find: – The WordFence Plugin is very good for this. – https://forum.fsocietybrasil.org/topic/992-wordpress-scan-vulnerabilities-and-malwares/ Here is a list … Read more
The in-famous Unable to locate WordPress Content directory (wp-content) and the Direct Method
The in-famous Unable to locate WordPress Content directory (wp-content) and the Direct Method
Security question – Display a General Custom Login Error Message
Add the following to your functions.php file. function my_custom_error_messages() { global $errors; $err_codes = $errors->get_error_codes(); // Invalid username. if ( in_array( ‘invalid_username’, $err_codes ) ) { $error=”<strong>ERROR</strong>: Custom Message Here”; } // Incorrect password. if ( in_array( ‘incorrect_password’, $err_codes ) ) { $error=”<strong>ERROR</strong>: Another Custom Message Here”; } return $error; } add_filter( ‘login_errors’, ‘my_custom_error_messages’); You … Read more
https rewrite not working for All in one security Brute force > rename login url
Alright, I just found out. I needed to define https:domain.ext// in the general settings of the wordpress site. Now All in One Security use the https to rename the url.