Full path disclosure (FPD) is a software bug that results in the full path to the webroot directory of the server being exposed. This is not necessarily a security risk, but can be used in combination with other vulnerabilities to create a real issue. In this guide We will explain the importance of Full Path … Read full article →
Magic Quotes is a PHP function where strings are automatically escaped (special characters are prefixed with a backslash) before being passed. This is considered a bad practice and as of PHP 7.4, they are deprecated. This article by Sebastian Bergmann explains in detail Why Magic Quotes are gone in PHP 7 WordPress doesn’t use magic … Read full article →
Here is a short snippet that you can use to programmatically display messages, for example, coupon codes to random (or targeted) users. We can either set the ID ourselves and store it in the $random_user_id variable Or for example, get random user IDs from the database: 💡 Note that if there are no users in … Read full article →
For years WooCommerce was showing the Serbian currency as дин. but this was recently changed to рсд. and now Serbian currency is available in WooCommerce only in Cyrillic script (РСД). You’ll see more details here. But because the Serbian language can be written both in Cyrillic as well as in Latin script, and almost 100%, of … Read full article →
The Really Simple Security plugin (formerly Really Simple SSL) is a useful tool, but it tends to overcomplicate SSL configuration. When running WordPress behind multiple proxies—especially those handling SSL termination like Varnish—the following configuration is usually sufficient to eliminate mixed content errors and prevent infinite redirect loops: FORCE_SSL_ADMIN Add FORCE_SSL_ADMIN true in wp-config.php to tell … Read full article →
wp_postmeta table should be the biggest table in your database, if not, there is a problem. Read wp_actionscheduler_actions & wp_actionscheduler_logs tables When you install WordPress for the first time, tables are created in the database, for example for the wp_postmeta table: the problem? solution: On an existing tables, We can add high-performance keys that match … Read full article →
SVN, or Subversion, is a version control system similar to Git that can be used via the command line, or one of numerous GUI applications, such as Tortoise SVN or SmartSVN. In this guide, I will use TortoiseSVN software to checkout a WordPress plugin. Step 1. First, download and install TortoiseSVN software: https://tortoisesvn.net/downloads.html Step 2. After installation, you … Read full article →
Instruction: Parameter PARAMETER TYPE DESCRIPTION DEFAULT REQUIRED $format string Output can be PHP date format or Unix timestamp. no yes $date string mysql2date() only recognizes “Ymd H:i:s” format, so the original timestamp string needs to be converted to this format. no yes $translate boolean If true, the specified date and format string will be passed … Read full article →
Back in 2010 when I was starting my web development journey, having a website was expensive, especially on a high-school student budget. I had plenty of dumb ideas, and no money to realize all of them (thank God 🙏). So I was looking for shortcuts to save on a domain name and hosting. I will … Read full article →
Here is a snippet that allows you to set a custom image on the WordPress login page and set a custom link: Replace https://your-domain.com/wp-content/uploads/2023/custom-logo.png with your logo https://your-domain.com with your link