|

WordCamp US 2019 – Securing WordPress in the age of 0-Day Vulnerabilities – Rahul Nagare

ByTim Nolte Updated on
SlidesDownload

scaledynamix.com/WCUS

0-Day Vulnerabilities

  • Recently discovered
  • No current fix
  • Already being attacked

Reference – wpvulndb.com

Why My Site?

  • They want to send your traffic somewhere else to boost SEO rank
  • They want to use your site as a “bot” to attack a targeted site.

How Do You Protect Your Site?

Protection Against Redirects

  • Hardcode your site/home URL
  • Protect your wp-config.php

Protect Against Automated Plugin Updates

  • Limit access to wp-admin, white-list admin IPs

Protect Against Code Injections

  • Block all POST requests without a valid referrer
  • Set Content-Security-Policy header

You still need to follow the standard security best practices

Technical Architect

A Christ-follower, husband, father, and WordPress Developer with Forum One.

Similar Posts

  • / / / /

    Looking Back on 2017, the Year of Firsts

    ByTim Nolte
    I don’t recall if I’ve ever written any sort of year-in-review blog post or even social media post, but this year I have had so many firsts that I wanted to reflect on and share my thanks for. Health In the health department I not only reached my initial target goal weight but actually surpassed it, and my second target. I think this year I’ve weighed the least that I have in 26 years. I have always struggled with my weight and living a more healthy lifestyle. I attribute my success primarily to my wife, and also to the encouragement of many friends and family. I also had to have a lot of self-determination as well, but that was only had by seeing the impact my…
  • /

    WordPress Grand Rapids – September 2018: Show And Tell

    ByTim Nolte Updated on
    Nicole – BoldGrid Post & Page Builder Free & Premium Versions Not Compatible With Editing on Mobile Not Yet Compatible With Gutenberg Premium Designer Blocks & Sliders BoldGrid Central Free cloud-based WordPress instances for testing things out. Crio WordPress Theme Available on ThemeForest Topher – BigCommerce Provides a plugin that pushes your BigCommerce store content to WordPress. All-one SaaS platform. Uses an iframe for checkout so all transactions are at BigCommerce for PCI compliance Can connect BigCommerce to Amazon as a channel. WordPress is just like a channel in BigCommerce and you can push specific products or product categories to different WordPress sites. Request WordPress Beta Access and get free Dev BigCommerce access for life. General Tips Plugins Imsanity

  • A Little Bit Of #WCGR With Me Camping

    ByTim Nolte Updated on
    As I headed off camping with the family this weekend I was choosing what to bring to keep my phone charged. When you are a tent camping family you only have so much room. The charging pack I received for speaking at last year’s #WordCamp Grand Rapids, and the USB conversation dongle from this year made a great compact charging setup.

  • WordCamp GR 2017 – Plugins: The WP Box of Chocolates – Stacy Vanden Heuvel

    ByTim Nolte
    Stacy Vanden Heuvel – http://www.mtnwebs.net/ (blog) http://mtnwebs.com/ What are they? Premanufactured code that adds function and features. 51,000+ plugins available today. Dropped into a site. There is a plugin or everything. Why does anyone care? Makes website building easier. How do you choose? How many active installs? Does it have reputable developers? When was it last updated? What are the ratings? – need to take these with a grain of salt Is it compatible with the current release? Does it fit with exactly what you need it to do? Plugin Examples WP-Polls Auto Terms of Service and Privacy Policy – doesn’t support translations WPFront Scroll – scroll-to-top button Hummingbird – page speed optimization, gives you an optimization report WP Smush – image optimization, optimizes as you upload,…
  • /

    WordCamp US 2019 – Technical SEO Checklist: How to Optimize a WordPress Site for Search Engine Crawlers – Pam Aungst

    ByTim Nolte Updated on
    Why SEO is Important For search engines Why Technical SEO is Super Important Search Engines: Crawl / Index / Rank If technical SEO isn’t working search engines can’t crawl/index/rank. Visitors wont’ find your site. The Ultimate SEO Checklist Basic/Traditional Items Domain & CMS Run by a well designed platform Meta Robots Search Engine Visibility checkbox Cross-Check Plugin Robots.txt Exclude Irrelevant Content – Yoast SEO Implement Cross-Check’s Search Engine Visibility Monitoring XML Sitemap Dynamic XML Sitemap from Yoast SEO Submit XML index to Google Search Console and check for errors Search Console monitors for crawling errors Should be dynamically generated and updated Design Do not use “one page” designs, they don’t work well for SEO Breadcrumbs Schema markup can be added for search crawlers to follow…
  • /

    WordCamp US 2019 – Just Enough React for WordPress – Shannon Smith

    ByTim Nolte Updated on
    New Block Editor Discover the Possibilities Block templates Blocks instead of custom fields, shortcodes, etc How Does the New Block Editor Work? Uses React, JavaScript/JSX Blocks are like plugins There is a Core Layer & Editorial Layer React abstraction is built-in Cool Stuff Blocks can be reusable Backend Workflow-only blocks Block level locking – you can remove blocks that are not needed. React Uses JSON literals It’s in the HTML but doesn’t negatively affect the HTML Templates You can create block templates Can be assigned to existing post types You can have nested templates Compatibility Shortcodes Will continue to work as before but contained within a block Custom Post Types Metaboxes Can be converted to blocks Can be used in the block editor Themes You…

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)