Cross-Site Request Forgery (CSRF) is an attack that forces logged-in users to submit a request to a WordPress website where they are currently authenticated. CSRF attacks exploit the trust a WordPress website has in an authenticated user. CSRF attacks are aimed at your WordPress website users to make them do various actions on your website: … Read full article →
After a plugin is deinstalled from a WordPress website it will either remove all its data from the database or leave it in case the plugin is installed again. Upon deactivation, if the plugin’s data isn’t removed from the database you should manually remove it in order to optimize the database and get rid of … Read full article →
PHP versions prior to PHP 7.4 are end-of-life (EOL), meaning they no longer receive updates. Because of this, your site may be exposed to security vulnerabilities. It’s not just the security implications though of running an older PHP version, it’s the performance impact as well. According to PHPBenchmarks, PHP 5.6 is at least 48% slower than … Read full article →
In most cases, the cache can be “tricked” by adding a random variable to the URL during testing, for example https://wpxss.com/application/wp-includes/how-to-bypass-cache-and-always-view-uncached-content-in-wordpress/?a=123 In this case, a new cache page is generated and does not load cached content that already exists.
Here is an example of a simple WordPress plugin that uses a shortcode to display a list of files from the WordPress repository on GitHub: <?php /* Plugin Name: List WordPress Core Files Description: Displays a list of files from the WordPress repository on GitHub. */ function wpfl_shortcode_handler( $atts ) { // Parse shortcode attributes … Read full article →
File inclusion vulnerabilities allow an attacker to read (and sometimes execute) files on the WordPress website, gain unauthorized access to sensitive information and inject malicious files through the “include” functionality. This can be very dangerous because if the webserver is misconfigured the attacker may gain access to sensitive user information and even execute arbitrary commands. There … Read full article →
Here are some useful commands to clear cache from the terminal with wpcli: cdn_purge purge URLs from CDN and Varnish flush all flushes all cache related to W3TC (Page Cache, OC, DB Cache, Minify, etc.) flush page flushes pages cache only flush posts flushes both pages & posts cache flush database flushes DB cache flush … Read full article →
This is another neat feature that I needed but didn’t really want to use another plugin to accomplish it. To display user roles inside WordPress comments like on the image above ? use the following code snippet:
In this post I discussed an example where wp_options table had 900k rows of plugin-based data in it, causing the wp-admin dashboard to load slowly. As noted there, good coding practice is for each plugin to create its own database tables and use those instead of default WP tables. While the WordPress community actively improves … Read full article →
Welcome to the world of Blogging. 🎉🎉🎉 Blogging is a great way to express yourself, build a business, or share experiences. There are endless reasons that drive people to start blogs. No matter what your reason for beginning is, you can get your WordPress blog set up and running in five easy steps. 1. What’s … Read full article →