WordPress is only as secure as you make it. Open registrations should not be a problem if you: Use CAPTCHA for registrations. Use double opt-in: have users verify their email after they register. By default, registered users must be subscribers and after they are verified, you can set them as authors. WordPress users cannot by … Read more
In your screenshot I can see at least 3 menu items that were added by a plugin. Standard practice when WP breaks after an update is to: Disable all plugins (You can rename the /wp-content/plugins directory to turn them all off at once). Revert to the default (TwentyEleven) theme Then you can re-enable your plugins … Read more
I think the problem is that by just appending ?deleteUser=XX you get an ‘illegal’ url, for example: http://localhost/wordpress/wp-admin/edit.php?post_type=type&page=mypage?deleteUser=xxx Instead, use WordPress’ add_query_arg: $url = $_SERVER[‘REQUEST_URI’]; $url = add_query_arg(‘test’,’val’,$url); which gives: http://localhost/wordpress/wp-admin/edit.php?post_type=type&page=mypage&deleteUser=xxx Personally, I wouldn’t use $_SERVER[‘REQUEST_URI’]; and instead hard-code the url of the page using admin_url. Also, see @Joshua comments on using the WordPress in-built … Read more
You could try that with the gettext filter in the following manner. function rename_header_to_logo( $translated, $original, $domain ) { $strings = array( ‘Header’ => ‘Logo’, ‘Custom Header’ => ‘Custom Logo’, ‘You can upload a custom header image to be shown at the top of your site instead of the default one. On the next screen … Read more
There’s the check_theme_switched() function. Checks if a theme has been changed and runs ‘after_switch_theme’ hook on the next WP load Note: The action has one argument, named $old_theme that you can access. After running the filter, the option theme_switched gets set to true.
You have to use a redirect not just a rewrite: ^dashboard(.*) wp-admin$1 [L,R=301] WordPress is using a hard coded search for wp-admin in the request URI.
In FileZilla you use SFTP connection to access your server and it works (because it was setup on server). But in wp-admin you use FTPS connection, which is probably doesn’t setup on server. Pay attention that SFTP != FTPS. A solution could be to change File System method in your wp-config.php file by adding FS_METHOD … Read more
The debug mode is on on your site. Go into wp-config.php and look for: define( ‘WP_DEBUG’, TRUE ); Change TRUE to FALSE. See Debugging in WordPress for more information. If this doesn’t help the error_reporting level is set somewhere else. .htaccess: Look for … php_value error_reporting integer … where integer matches one of the error … Read more
I think your best bet is to hook save_post and save the count for each post to a meta field. It’s not feasible to do the calculation when the back end is loaded, every post will have to be queried and sorted in memory. Likewise, doing it all in MySQL will require some significant query … Read more
NOTE This code will load those scripts on all admin pages. Better you go through the Codex examples to get an idea how you can load the scripts on pages of specific plugins Here’s the code to load the custom scripts on admin pages function wpse60745_loadto_admin() { // to load styles wp_register_style( ‘my_plugin_css’, plugins_url(‘plugin-style.css’, __FILE__) … Read more