Security of your WP site is more than that (admin user, database password), although that is a good start. I’d create admin-level user that is not named ‘admin’, with a strong password. You could even change the user id so that it’s not #2 (it’s easy enough to enumerate users by id). create a strong … Read more
Securing WordPress running on Azure platform
The one I use a lot is Defender Pro by WPMUDEV but its not a cheap solution. https://premium.wpmudev.org/project/wp-defender/
indeed from your question is not entirely clear what are you trying to achieve. However wordpress gives you the option to create custom roles and capabilities. If you follow that native wordpress path, you should not be concerned about security. check if the role exists IFF not add the role and capibilities Make sure to … Read more
HSTS header not being added correctly
After limiting the access to my wp-login.php by IP through .htaccess, all my password-protected posts stopped working. What’s the best solution now?
Monitor wordpress all external calls
Uploading attachment (pdf) and prevent download for anonymous user
i moved wp-config.php outside of public html and this broke my website
Yes and no, it depends. When a security issue is fixed, it’s usually backported, so officially the answer is no, you don’t have to update to the latest major release. However Backporting only goes back so far though, and you’ll eventually be left in the dark given enough time. This would take many years currently, … Read more