Home » Avoid Hacking
Category Archives: Avoid Hacking
Vetting form input using PHP
Forms provide a really good way for a hacker to try and fiddle with the internal ‘gubbings’ of your PHP code both in a normal PHP software development situation and customising WordPress with PHP. The following functions allow a PHP developer to clean up the form’s data before they start to process it with their PHP […]
WordPress Health Warning
Plugins can degrade the performance of your site and some may have security implications. Delete any plugin you no longer use. It is suggested you keep plugins to a minimum and make sure you always update them when they have been updated. Remember that little red circle next to word Plugins in the Dashboard menu […]
Gasp… Chinese characters on my WordPress Website!
You’ve been hacked my friend… The above, Gwent-based, WordPress site was probably Chinese hacked because the developer did not have the latest version of WordPress. The html code on this site reported Version 4.2.6, when the latest copy of WordPress was 4.4.1. <meta name="generator" content="WordPress 4.2.6" How you can check if your WordPress is […]
What is the best way to avoid my WordPress website being hacked?
Number one has to be…. Make sure you have the latest version of WordPress installed. You must also use a good password, upper and lower case letters, numbers and punctuation characters. Do no use any dictionary words unless they are Klingon (The 1st Dynasty Dialect) Avoid plugins if possible, they slow your site down and […]
How do I stop so many hits for wp-login.php?
Why are there so many hits forWordPress file wp-login.php when I rarely log in? Because bots are trying to hack you. Simply use FTP or your hosting file manager to rename this file to something you can remember later. When you need to login to your website simply change it back. You can of course […]
WordPress’ xmlrpc.php high number of hits in the log
This file allows remote posting to your blog using an XML-RPC client. If you only post on your WordPress site then the chances are you do not need to have this file active. Rather than delete it, simply rename it to something you can find again. If a large number of hits are recorded in […]