There are many plugins that display the history of changes made by site’s users. Personally, I have used Simple History plugin. It is easy to use, have a clear interface and useful log searching capabilities. For the list of similar plugins, you can read this recently updated article on wplift.
It basically depends on who is doing the translation and how trusted can he be as if you will not filter things out the translator can add JS code, still cookies and whatever. In most of the places translation is done you will have in any case a call to esc_html or esc_attr which will … Read more
I agree that the Better Search and Replace plugin is great for search/replace of the WP database. But be aware that there are many other things you need to do to recover a hacked site. There are many places to get that info, but when I do it, I change all credentials/passwords: database, FTP, hosting, … Read more
I am not sure why you would like to obfusicate your wp-config.php file. It is not accessible from the outside world and WordPress needs to be able to read the file. If you are going to obfusicate it’s quite easy to get it de-obfusicated. Since you need to alter the WordPress core (not recommended) to … Read more
If the requesting IPs are more or less random it’s not possible to block them. If they all have a pattern reoccuring you could do that. In your example urls all requests start with the same (not existing) slug (c3e) – you could redirect requests starting with that slug using a htaccess rewrite rule to … Read more
Safe against/for what? Is “a legitimate user can input any HTML” a safety issue? If you might handle data from kind-of-but-not-really trusted users, how about giving admins the possibility to define which tags/attributes to strip out (optionally: per user group / role) and your plugin does the rest, or run the content through a filter … Read more
Update 2015-02-27: This is now possible, see the answer below. Old reply: Amazon’s FAQ says it’s not possible to define a security group anywhere but at launch time.
Drilling a hole in the drive enclosure which passes through all the platters will make it impossible to run the drive. Most modern HDDs don’t have air inside the enclosure, and you’ve let what was in there escape. You’ve filled the cavity with tiny pieces of drill swarf, which will be on everything including the … Read more
to answer your question yes without the user table no one will be able to login because the database holds no login information. you may of been better off securing your /wp-login from brute fore attacks in a different way https://wordpress.org/support/article/brute-force-attacks/ i.e limiting the ip access to the login area
David’s answer is a good baseline of the general principles of server hardening. As David indicated, this is a huge question. The specific techniques you take could depend highly on your environment and how your server will be used. Warning, this can take a lot of work in a test environment to build out and … Read more