|

WordCamp US 2019 – Securing WordPress in the age of 0-Day Vulnerabilities – Rahul Nagare

ByTim Nolte Updated on
SlidesDownload

scaledynamix.com/WCUS

0-Day Vulnerabilities

  • Recently discovered
  • No current fix
  • Already being attacked

Reference – wpvulndb.com

Why My Site?

  • They want to send your traffic somewhere else to boost SEO rank
  • They want to use your site as a “bot” to attack a targeted site.

How Do You Protect Your Site?

Protection Against Redirects

  • Hardcode your site/home URL
  • Protect your wp-config.php

Protect Against Automated Plugin Updates

  • Limit access to wp-admin, white-list admin IPs

Protect Against Code Injections

  • Block all POST requests without a valid referrer
  • Set Content-Security-Policy header

You still need to follow the standard security best practices

Technical Architect

A Christ-follower, husband, father, and WordPress Developer with Forum One.

Similar Posts

  • Contributing to WordPress: Moving From User to Contributor – WordCamp Grand Rapids 2019 Lightening

    ByTim Nolte Updated on
    1. Introduction WordPress History 2005 – First Blog 2006 – First Podcast 2008 – First Custom Theme/Plugin 2013 – First WordCamp 2014 – First Time WordCamp Volunteer 2018 – First WooCommerce Site 2018 – First Time WordCamp Speaker 2018 – Full Co-Maintainer to WordPress.org Plugin 2. What Does It Mean To Be A Contributor All you need is a desire to help. Give Your Time Share Your Knowledge & Experience Use Your Talents 3. Give Your Time Help Organize A Local Meetup Volunteer at a WordCamp 4. Share Your Knowledge & Experience Share your favorite Themes & Plugins on your blog, social media, at a local meetup Help others in the WordPress.org Support Forums 5. Use Your Talents Non-Developers Help maintain the website content for…
  • /

    WordPress US 2019 – Design Systems: Crafting For Crafters – Jon Quach

    ByTim Nolte Updated on
    Jon Quach – https://jonquach.com/ Design Systems are important but can be complicated and hard to understand. What Are Design Systems? They are about process. They make up the interfaces and designs of a product. They help answer many design and development questions. What Are The Challenges of Design? There can be a breakdown of handoff between design and development. Things don’t always end up the way they were intended. No documentation. Nobody knows how developer created things. It’s not because people are bad at their jobs or don’t care. Lacking the understanding of how user interfaces and experience should work together. How Do You Create A Design System? You create a Design System to empower the team building the product. End users don’t care about…
  • /

    WordCamp GR 2017 – Computers <3 Structured Data – Steve Grunwell

    ByTim Nolte
    Steve Grunwell – https://stevegrunwell.com/ https://github.com/stevegrunwell/structured-data/blob/master/README.md What is Structured Data? Standards to help computers to understand our content. Content is for humans. Structured data is for machines. Structured Data Structured data is all about providing context itemtype/itemprop/content HTML/XML HyperText and eXtensible Markup Language Meant to convey information in a meaningful way Generic layout RSS An extension of XML for content sydication Introduced structure: post titles, content, dates Standardized and can be validated Microformats & Dublin Core Competing standards for rich data Dublin Core is a specific set of standards, but designed to be limited in scope Uses meta tags Microformats – uses class names Resource Description Framework (RDF) A specification for modeling metadata New attributes Opengraph Facebook’s social graph Used to create rich media when sharing content…
  • / / / /

    Talking WPRig and Theming in the Gutenberg Era with Morten Rand-Hendricksen

    ByTim Nolte
    This month we’re taking a look at the WPRig WordPress framework from its developer Morten Rand-Hendricksen. This will be a live remote presentation with Q&A as time allows. If you want to learn more ahead of the meetup, follow this link https://wprig.io/ “Pave the cowpath” – WordPress could be the thing that paves the cowpath for the modern web, but it isn’t. Underscores used to be the starting theme do build off of, but there was no real standard, and modern, build process. Build Process Modern JavaScript Modern CSS (customer properties, etc) WordPress Coding Standards Code Linting for PHP, JS, CSS Automatic internationalization Code and asset optimization Starter Theme Accessible Modern best-practices Styled out of the box Minimum required files Optional templates Progressive features Gutenberg New…
  • / /

    WordPress Development On A Chromebook, Termux, & Neovim

    ByTim Nolte Updated on
    So about 6 months ago I decided to make some changes to my personal development environment. I’ve been using a Chromebook as my primary machine since about 2013. I first purchased an Acer C710 for my wife to use but compared to our Macbook Pro it was a frustrating and subpar experience for her, not to mention she was a heavy Adobe Suite user. Since sharing the Macbook Pro was challenging I set out to use the Chromebook as me development machine. Originally I went with the crouton option. It was pretty sweet to have a full Linux environment alongside Chrome OS. I was then running a full LAMP environment with PhpStorm as my IDE. This worked OK, I had performance and stability issues at…

  • WordCamp US 2019 – How the WordPress Community Can Embrace the Next Generation (Talk + Panel)

    ByTim Nolte Updated on
    Talk – Olivia Bisset lemonadecode.com/WCUS If WordPress doesn’t become attractive to the next generation it will become a relic. WordCamps Don’t use the word kids, use words like teens and students Make regular tracks attractive to to young people Market to young people, don’t make it all about old people Meetups Don’t use foul language, make it family friendly Parents Take your kids to events Support your kids to see talks that are relevant for them Teachers WordPress is a good publishing tool for kids Writing content helps students develop their writing skills Have an “Hour of Code” Block Editor Students liked the Block Editor Panel Dina Butcher, Ema DeRosia, Emily Lema, Sophie DeRosia, Olivia Bisset, Natalie Bourn Kids are using the WordPress platform to…

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)