Tag
Keeping a WordPress site from getting hacked.
WordPress Tutorials
Roles are named bundles of capabilities, stored per user in the database. Understand the six defaults, then add or restrict capabilities without handing out administrator access.
WordPress Tutorials
Locked out with only database access? Insert a row into wp_users, then two rows into wp_usermeta that grant the administrator role. Both halves are required.
WordPress Tutorials
Five ways in, ordered by how little access they need: the reset email, WP-CLI, phpMyAdmin, a functions.php snippet and a temporary must-use plugin.
Troubleshooting
The warning means the browser did not get a valid certificate, or the page loaded insecure assets. Fix the certificate first, then the mixed content, then force HTTPS everywhere.
Troubleshooting
Cleaning malware is only half the job. Contain the site, replace core and extensions with clean copies, close the entry point, and rotate every credential before going public again.
Website Tools
Inspect response and request headers with browser developer tools or curl to diagnose redirects, caching, content types and common security settings.
Plugins
Use backups, changelog review, staging and focused post-update tests to update WordPress plugins without turning routine maintenance into an outage.
Plugins
Install a WordPress plugin from the official directory, upload a ZIP, use WP-CLI or SFTP, then verify it without creating security or compatibility problems.
Troubleshooting
Log WordPress PHP errors without showing them to visitors, reproduce the problem once, read the relevant entries and disable or secure logging afterward.
Troubleshooting
Fix wp-admin returning to the login form by clearing site cookies, matching WordPress URLs and HTTPS, bypassing cache, and isolating authentication plugins.
Website Building
The best WordPress host depends on the site. Learn to read a hosting plan past its marketing numbers, then compare support, backups, staging, performance and renewal cost before committing.
Themes
A premium theme is worth paying for only when updates, support and saved implementation time outweigh the lock-in and performance costs. Use this checklist before buying.