For years WooCommerce was showing the Serbian currency as дин. but this was recently changed to рсд. and now Serbian currency is available in WooCommerce only in Cyrillic script (РСД). You’ll see more details here. But because the Serbian language can be written both in Cyrillic as well as in Latin script, and almost 100%, of … Read full article →
Here are five different methods to create a new WordPress Admin user. In all of the examples below I will use the following username/password combination, so make sure to change it before running any of the commands: username123 change username123 with your username password123 change password123 with your password [email protected] change [email protected] with your email … Read full article →
Cross-Site Request Forgery (CSRF) is an attack that forces logged-in users to submit a request to a WordPress website where they are currently authenticated. CSRF attacks exploit the trust a WordPress website has in an authenticated user. CSRF attacks are aimed at your WordPress website users to make them do various actions on your website: … Read full article →
After a plugin is deinstalled from a WordPress website it will either remove all its data from the database or leave it in case the plugin is installed again. Upon deactivation, if the plugin’s data isn’t removed from the database you should manually remove it in order to optimize the database and get rid of … Read full article →
PHP versions prior to PHP 7.4 are end-of-life (EOL), meaning they no longer receive updates. Because of this, your site may be exposed to security vulnerabilities. It’s not just the security implications though of running an older PHP version, it’s the performance impact as well. According to PHPBenchmarks, PHP 5.6 is at least 48% slower than … Read full article →
In most cases, the cache can be “tricked” by adding a random variable to the URL during testing, for example https://wpxss.com/application/wp-includes/how-to-bypass-cache-and-always-view-uncached-content-in-wordpress/?a=123 In this case, a new cache page is generated and does not load cached content that already exists.
Here is an example of a simple WordPress plugin that uses a shortcode to display a list of files from the WordPress repository on GitHub: <?php /* Plugin Name: List WordPress Core Files Description: Displays a list of files from the WordPress repository on GitHub. */ function wpfl_shortcode_handler( $atts ) { // Parse shortcode attributes … Read full article →
File inclusion vulnerabilities allow an attacker to read (and sometimes execute) files on the WordPress website, gain unauthorized access to sensitive information and inject malicious files through the “include” functionality. This can be very dangerous because if the webserver is misconfigured the attacker may gain access to sensitive user information and even execute arbitrary commands. There … Read full article →
Here are some useful commands to clear cache from the terminal with wpcli: cdn_purge purge URLs from CDN and Varnish flush all flushes all cache related to W3TC (Page Cache, OC, DB Cache, Minify, etc.) flush page flushes pages cache only flush posts flushes both pages & posts cache flush database flushes DB cache flush … Read full article →
This is another neat feature that I needed but didn’t really want to use another plugin to accomplish it. To display user roles inside WordPress comments like on the image above ? use the following code snippet: