Why am I sometimes getting a 404 error when I try to update a page with Elementor?
I resolve this disabling “Modsecurity” in Cpanel.
security
Can I write ‘RewriteCond’ using ‘functions.php’?
use this https://wordpress.org/plugins/wp-htaccess-editor/, if you are not willing to use any plugin, understand the code and implement in functions.php or your own custom plugin. cheers.
What is the relationship between cURL, WordPress and cacert.pem?
HTTPS isn’t all about encryption alone. SSL also uses a process known as certificate verification to prevent host forgery. This is a multi-layered process, but here’s the quick overview: There exist in the world a number of Certificate Authorities (CAs). When you get a certificate for your domain name to allow it to do SSL, … Read more
How to change “wp-admin” to something else without search-replacing the core?
You can try the Redirection plugin, it’s great for exactly that. EDIT You could also for example setup a subdomain that makes a transparent redirect, as in : http://admin.mywebsite.com/ which you would redirect to your wp-admin/ folder. But then I think people would still see the wp-admin/ in all the links (on hover for ex).
Disabled plugins are security holes – rumor or reality?
A plugin that has security holes is a problem, whether or not it is activated. So here are some reasons why it is often recommended to remove plugins that you aren’t using. If you have plugins that you aren’t using, you often don’t care about keeping them updated. As a result, they won’t get any … Read more
How can I tell who changed the password?
You could log all attempts to get the lost password email: add_action( ‘retrieve_password’, ‘log_password_requests’ ); function log_password_requests( $user_name_or_email ) { // save the user name or email plus the IP address in an option }
Make wordpress admin failed login attempt return 401
WordPress handles login failed in two ways: If it is a bad credential, and both username and password have a value, then this action can be captured by wp_login_failed If both, or one, of the options are empty, then WordPress generates the error object as the first parameter in the authenticate filter; it does not … Read more
Websites defaced by uploading script using theme editor
Now what baffles me is according to logs they all them seem to have logged-in directly to WordPress as if they know the password (since it’s only one login attempt in line 16 above). This is true even for sites only up one day ago and the passwords are not simple ABCs. It is also … Read more
Protecting HTML5 video [closed]
First: You will need a plugin that acts as an intermediary for your cloud storage. Cloud storage innately (if setup properly) will protect your files. I have used the CDN Vault plugin and it works great. It’s a premium plugin that depends on Amazon S3 storage. It does some really great obfuscation and encryption so … Read more
Remove tinyMCE from admin and replace with textarea
No need to reinvent the wheel – put your editor support back and tweak the settings: function wpse_199918_wp_editor_settings( $settings, $editor_id ) { if ( $editor_id === ‘content’ && get_current_screen()->post_type === ‘custom_post_type’ ) { $settings[‘tinymce’] = false; $settings[‘quicktags’] = false; $settings[‘media_buttons’] = false; } return $settings; } add_filter( ‘wp_editor_settings’, ‘wpse_199918_wp_editor_settings’, 10, 2 );