|

WordCamp US 2019 – Securing WordPress in the age of 0-Day Vulnerabilities – Rahul Nagare

ByTim Nolte Updated on
SlidesDownload

scaledynamix.com/WCUS

0-Day Vulnerabilities

  • Recently discovered
  • No current fix
  • Already being attacked

Reference – wpvulndb.com

Why My Site?

  • They want to send your traffic somewhere else to boost SEO rank
  • They want to use your site as a “bot” to attack a targeted site.

How Do You Protect Your Site?

Protection Against Redirects

  • Hardcode your site/home URL
  • Protect your wp-config.php

Protect Against Automated Plugin Updates

  • Limit access to wp-admin, white-list admin IPs

Protect Against Code Injections

  • Block all POST requests without a valid referrer
  • Set Content-Security-Policy header

You still need to follow the standard security best practices

Technical Architect

A Christ-follower, husband, father, and WordPress Developer with Forum One.

Similar Posts

  • /

    WordCamp US 2019 – Technical SEO Checklist: How to Optimize a WordPress Site for Search Engine Crawlers – Pam Aungst

    ByTim Nolte Updated on
    Why SEO is Important For search engines Why Technical SEO is Super Important Search Engines: Crawl / Index / Rank If technical SEO isn’t working search engines can’t crawl/index/rank. Visitors wont’ find your site. The Ultimate SEO Checklist Basic/Traditional Items Domain & CMS Run by a well designed platform Meta Robots Search Engine Visibility checkbox Cross-Check Plugin Robots.txt Exclude Irrelevant Content – Yoast SEO Implement Cross-Check’s Search Engine Visibility Monitoring XML Sitemap Dynamic XML Sitemap from Yoast SEO Submit XML index to Google Search Console and check for errors Search Console monitors for crawling errors Should be dynamically generated and updated Design Do not use “one page” designs, they don’t work well for SEO Breadcrumbs Schema markup can be added for search crawlers to follow…
  • / / / /

    WordPress Meetup 3/21/19

    ByTim Nolte
    Show & Tell WPRig – Morten Rand-Hendrickson (to be next guest speaker) Bold Grid Cloud WordPress Repo Testing – WordPress Theme/Plugin Tester Poopy.Life – Temporary WordPress Installs BrowserStack – Website/Browser Testing Service Grav – Static Site CMS Statamic – Static Site Generator Hugo – Static Site Generator Strattic – Static Site Generator for WordPress Caldera Forms – WordPress Form Generator https://www.simplystatic.co/ https://www.hardypress.com/ WordPress Related Job Market Job Options Non-Technical WordPress Website Work Content – articles, documentation Editing Strategy Auditing SEO – implementing, auditing, specialization Services Marketing Social media management community engagement Help Others Administration Business Management Project Management Support Non-WordPress Businesses Looking to start something new in WordPress Finding A Job Continue Where You Started Examine Your Experiences Get Out There Have Conversations Getting Hired…
  • /

    WordCamp GR 2017 – Underscores & Me – Frederick Polk

    ByTim Nolte
    Frederick Polk – http://oneblackcrayon.com/ Generate your Underscores Theme: Use a custom build, with the Advanced Options, in order to tailor to your project needs. – https://underscores.me/ Underscores is Pre-built With: Sidebars Custom Logo Comments Featured Images Custom Headers Standard Core Theme Templates (404, comments, archives, header, footer) phpcs Sample Sites: amplifygr.com – Underscores, Visual Composer (Page Builder) bigdataignite.com – Visual Composer, Paid Theme oxx.com – Layer Slider, Visual Composer, Underscores   Grand Valley State University, Pew Campus, Grand Rapids, MI
  • / / / /

    Talking WPRig and Theming in the Gutenberg Era with Morten Rand-Hendricksen

    ByTim Nolte
    This month we’re taking a look at the WPRig WordPress framework from its developer Morten Rand-Hendricksen. This will be a live remote presentation with Q&A as time allows. If you want to learn more ahead of the meetup, follow this link https://wprig.io/ “Pave the cowpath” – WordPress could be the thing that paves the cowpath for the modern web, but it isn’t. Underscores used to be the starting theme do build off of, but there was no real standard, and modern, build process. Build Process Modern JavaScript Modern CSS (customer properties, etc) WordPress Coding Standards Code Linting for PHP, JS, CSS Automatic internationalization Code and asset optimization Starter Theme Accessible Modern best-practices Styled out of the box Minimum required files Optional templates Progressive features Gutenberg New…
  • /

    WordCamp US 2019 – Just Enough React for WordPress – Shannon Smith

    ByTim Nolte Updated on
    New Block Editor Discover the Possibilities Block templates Blocks instead of custom fields, shortcodes, etc How Does the New Block Editor Work? Uses React, JavaScript/JSX Blocks are like plugins There is a Core Layer & Editorial Layer React abstraction is built-in Cool Stuff Blocks can be reusable Backend Workflow-only blocks Block level locking – you can remove blocks that are not needed. React Uses JSON literals It’s in the HTML but doesn’t negatively affect the HTML Templates You can create block templates Can be assigned to existing post types You can have nested templates Compatibility Shortcodes Will continue to work as before but contained within a block Custom Post Types Metaboxes Can be converted to blocks Can be used in the block editor Themes You…

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)