My security knowledge of WordPress is not that deep, but I believe this might help you a bit: – First find the vulnerabilities, once you know which one exists, research and find out how to fix it specifically. To find: – The WordFence Plugin is very good for this. – https://forum.fsocietybrasil.org/topic/992-wordpress-scan-vulnerabilities-and-malwares/ Here is a list … Read more
The in-famous Unable to locate WordPress Content directory (wp-content) and the Direct Method
Add the following to your functions.php file. function my_custom_error_messages() { global $errors; $err_codes = $errors->get_error_codes(); // Invalid username. if ( in_array( ‘invalid_username’, $err_codes ) ) { $error=”<strong>ERROR</strong>: Custom Message Here”; } // Incorrect password. if ( in_array( ‘incorrect_password’, $err_codes ) ) { $error=”<strong>ERROR</strong>: Another Custom Message Here”; } return $error; } add_filter( ‘login_errors’, ‘my_custom_error_messages’); You … Read more
Alright, I just found out. I needed to define https:domain.ext// in the general settings of the wordpress site. Now All in One Security use the https to rename the url.
Upload files at anywhere ( normally create your own folder inside wp-content/uploads folder ), you can create .htaccess file and index.html files inside the folder to restrict the files from direct access. Keep index.html blank and add deny from all text in .htaccess file.
This is a multi prong question. It sounds like you are asking what to do if your site gets hacked in the future, but it is vague enough that you might be implying it has already been hacked. If you have not been hacked yet, download a backup of your site as soon as possible … Read more
I downloaded Really Simple SSL and activate it. Now all the dashboard link leading to the site is now secured. Thanks!
Robots.txt file not updating
Only checking if the cookie exists, is not much of a strict protection. To get a stronger protection, you can pass or “proxy” all requests to the uploaded folder (exemplary uploads in the following example) through a php script: RewriteCond %{REQUEST_FILENAME} -s RewriteRule ^wp-content/uploads/(.*)$ dl-file.php?file=$1 [QSA,L] All requests to uploaded files (which includes images in … Read more
Links to root domain from search engines don’t work, but direct links and links from other referrers do