Tag
Keeping a WordPress site from getting hacked.
Plugins
BuddyPress adds profiles, activity streams, groups and private messaging to WordPress. The plugin is the easy part; the moderation, the performance and the theme work are the actual project.
Plugins
CleanTalk filters spam without showing visitors a challenge, which is its whole appeal. It does that by sending every submission to a hosted service, which is the fact that should decide whether you use it.
Plugins
WPScan checks what you are running against a database of known WordPress vulnerabilities. It answers one narrow question extremely well, and mistaking it for general security tooling is the usual error.
Plugins
UpdraftPlus is the most widely installed WordPress backup plugin, and the free version does the essential job. The part that matters is not which plugin you use — it is whether you have ever restored one.
Plugins
Akismet is effective, nearly effortless, and works by sending every comment to a third party for judgement. That last fact is the one that should decide whether you use it.
Plugins
2FA is the single highest-value security change on most WordPress sites, because it defeats the attack that actually succeeds: a correct password someone else has.
Troubleshooting
Mixed content means an HTTPS page is pulling something over HTTP. The padlock disappears, scripts get blocked outright, and the fix is to correct the stored URLs rather than to rewrite them on every request.
WordPress Tutorials
Multisite runs many sites from one codebase and one user table. It is excellent for a network you control end to end, and a poor fit for unrelated client sites — the decision is mostly about who administers what.
WordPress Tutorials
Losing the admin password does not lock you out of your own site — hosting access does everything wp-admin would have done, and usually does it more reliably.
WordPress Tutorials
The REST API is not an optional add-on you can switch off — the block editor and much of the admin depend on it. The real work is choosing an authentication model and deciding what anonymous callers are allowed to read.
WordPress Tutorials
The mobile app is a writing and moderation tool, not a pocket-sized wp-admin. Most of the frustration around it comes from one thing: the difference between a WordPress.com account and a self-hosted site.
Plugins
A donation is not a purchase, and treating it like one costs you money at the form. The categories differ mainly in how they handle recurring giving, receipts and donor records.