Since the General Data Protection Regulation (GDPR) was applicable back in 2018, website owners have been scrambling to get their websites up to standard and avoid huge fines. Years later, GDPR fines continue, and small businesses are certainly not immune. Although you may receive a warning before being fined, there is no reason to take the risk. If you … Read full article →
Full path disclosure (FPD) is a software bug that results in the full path to the webroot directory of the server being exposed. This is not necessarily a security risk, but can be used in combination with other vulnerabilities to create a real issue. In this guide We will explain the importance of Full Path … Read full article →
PHP has a built-in function get_defined_constants that returns an array with the names of all the constants and their values. Because WordPress is built in PHP, We can use this function to get all WordPress constants. ⚠️ Use this snippet with caution, as the code will display sensitive information including your database username and password … Read full article →
To enable HSTS Preload on a WordPress website (https://hstspreload.org/?domain=wpxss.com) you need to add the following code snippet in the .htaccess file: If you have access to the server settings *(You are using a VPS or DEDICATED server) then you can enable it server-wide for all domains by adding the snippet to the /etc/apache2/conf.d/includes/pre_main_global.conf file TIP: … Read full article →
There are several ways to disable comments in WordPress: From the WordPress administration panel This will disable comments on all new posts and pages. If you want to disable comments on existing posts and pages, you can do so by editing each post or page and unchecking the “Allow comments” option. Using a plugin There … Read full article →
In this blog, I am going to show youtwo built-in methods to easily add text to any image on your WordPress website. 1. Add text over image using Cover Block Click the plus button to add new block and search for “Cover” Then add your image and you can add text over it. the result? … Read full article →
SVN, or Subversion, is a version control system similar to Git that can be used via the command line, or one of numerous GUI applications, such as Tortoise SVN or SmartSVN. In this guide, I will use TortoiseSVN software to checkout a WordPress plugin. Step 1. First, download and install TortoiseSVN software: https://tortoisesvn.net/downloads.html Step 2. After installation, you … Read full article →
MySQL Process List is used to display currently active MySQL connections. It can be useful to view current queries, detect sleep connections, and if some connection limits are reached. If on your hosting server, you have access to the terminal, you can u list MySQL processes using the command: Here is a simple WordPress plugin … Read full article →
Here are some examples of security configurations that can be added to your WordPress website’s wp-config.php file: Disable file editing define( ‘DISALLOW_FILE_EDIT’, true ); This configuration will disable the built-in WordPress file editor, which can prevent users from accidentally or intentionally making changes to the core WordPress files. Change the default database table prefix $table_prefix … Read full article →
The principle of WPCLI is to add install it on the server, add it to path so that it can be accessed from any folder and then enter the installation folder of the website for which you want to run commands. The basic use of WP-CLI is: wp [COMMAND], e.g. wp config list will show … Read full article →