Tag
Keeping a WordPress site from getting hacked.
WordPress Tutorials
The constant governs core and only core. Setting it to false stops security releases arriving on their own, which is a decision worth making deliberately rather than inheriting from a snippet.
WordPress Tutorials
One line removes the built-in code editor from the dashboard. It does not stop an administrator installing a plugin that edits the same files, which is why it is a hardening step rather than a lock.
WordPress Tutorials
Adding a type to this array is half the job. WordPress checks the real contents of the file separately, and a file whose innards do not match its extension is rejected even after the type is allowed.
WordPress Tutorials
WordPress does this without a plugin, in about fifteen seconds. What matters is knowing exactly what that protection covers, because it does not cover the images on the page.
WordPress Tutorials
Two separate jobs get conflated here: putting a certificate on the server, and telling WordPress to use it. The second one is where sites break, and a plugin only papers over it.
Troubleshooting
Removing malware is the easy half. The half people skip is proving it is gone, and every scanner type is blind to something the others catch.
Website Tools
Automation platforms let a form submission become a CRM record, an invoice and a calendar event without a developer. They also put business logic somewhere nobody documents and everybody forgets.
Plugins
MainWP is a self-hosted dashboard that updates, backs up and monitors your other WordPress sites. Owning the dashboard is the point, and it is also the risk you take on.
Plugins
Forminator gives away features that competing form plugins charge for — payments, calculations, quizzes and polls — and stores every submission in your database, which is a benefit and an obligation.
Plugins
BuddyPress adds profiles, activity streams, groups and private messaging to WordPress. The plugin is the easy part; the moderation, the performance and the theme work are the actual project.
Plugins
CleanTalk filters spam without showing visitors a challenge, which is its whole appeal. It does that by sending every submission to a hosted service, which is the fact that should decide whether you use it.
Plugins
WPScan checks what you are running against a database of known WordPress vulnerabilities. It answers one narrow question extremely well, and mistaking it for general security tooling is the usual error.