Secure WordPress Code: Sanitizing, Escaping, Nonces and Capability Checks
Most plugin vulnerabilities come from a handful of mistakes: unsanitized input, unescaped output, missing capability checks and unprotected forms. Here's…
Topic
Most plugin vulnerabilities come from a handful of mistakes: unsanitized input, unescaped output, missing capability checks and unprotected forms. Here's…
When I take over a WordPress site, the first thing I do is a security audit. Here's the full checklist,…
Too many WordPress sites hand out Administrator accounts like keys to the office. Here's how roles and capabilities really work,…
A web application firewall blocks attacks before they reach your site, but where it runs makes a big difference. Here's…
Most infections change files on the server. File integrity monitoring watches for those changes and alerts you within minutes. Here's…
Thousands of Japanese or pharmacy pages appearing under your domain in Google is one of the most common WordPress hacks.…
A Google hacked warning can wipe out your traffic overnight. Here's how to clean the site properly, request a review…
Most hacked sites don't announce themselves with a skull on the homepage. The signs are usually quiet and easy to…