ChaiPuter

Wordpress is a very comfortable framework to create a site on. You automatically inherit a slew of amazing plugins which enable you to create many sorts of dynamic sites with statistics, admin site and many other benefits. But unfortunately, you also inherit many problems which come with the Wordpress installation. Just to name a few Wordpress is a heavy framework, instead of having a lean HTML/PHP site, you now have this monster you need to reign in. - I am talking optimization/speed wise Wordpress is very popular (it powers more than 30% of the internet sites as of today), so it is a target to many a hacker. Wordpress has lots of security issues as each plugin is created by a different developer and you won't know where the security breach came from. Wordpress is slow as it does lots of tasks behind the scenes (as it has lots of not-so-needed functionalities). So what are the initial steps one should do when creating a fresh wordpress site ? General Guidelines Make sure you have ...

Shit happens, thus you want a good wordpress backup plugin for these bad situations. What are the requirements from a backup plugin? Automatic on schedule Automatic before any update to the site (Optional) Can save the backup to a remote location (S3 Amazon server) Easy to use restore (Instead of just unzipping the files and importing the DB) Standalone restore option (Optional) - So if the site got destroyed, you can still restore Well maintained Multisite support (Option to backup every mini site independently) Comfortable price So, after going over the candidates, I have removed non-relevant plugins which don't give me my minimal requirements, and it seems that the difference between plugins will actually be the following watered down requirements: Automatic before site update (Called "Real time backup" in some places) Standalone restore app Good multisite support (to backup/restore specific site) Price My final candidates are: BackWpUp UpDraftPlus Wp Vivid backup JetP...

You have a site, or want to create one. You want your site to uphold all best practices and standards so all search engines will love it, thus grant it a high location in their results. You want your site to be speedy (for your user's sake and for the search engines'). Before putting down my 2 cents, let me point you to a prior article of mine in which I have recommendations for your site upgrade Here are a list of suggestions accumulated over time. Please note that many will view these suggestions as premature optimizations thus should be implemented only after you have many users etc or else it isn't worth it - they may be right... Hosting Web Environment Don't use Shared hosting ! (Not even a reseller account) - they suck and from time to time there are shameless downtimes !!!, You should at least go for a VPS if not something better, and nowdays they aren't that expensive, several educated recommendations Vultr KnownHost Digital...

You have a site, or want to create one. You want your site to uphold all best practices and standards so all search engines will love it, thus grant it a high location in their results. You want your site to be speedy (for your user's sake and for the search engines'). Before putting down my 2 cents, let me point you to a prior article of mine in which I have recommendations for your site upgrade Here are a list of suggestions accumulated over time. Please note that many will view these suggestions as premature optimizations thus should be implemented only after you have many users etc or else it isn't worth it - they may be right... Hosting Web Environment Don't use Shared hosting ! (Not even a reseller account) - they suck and from time to time there are shameless downtimes !!!, You should at least go for a VPS if not something better, and nowdays they aren't that expensive, several educated recommendations Vultr KnownHost Digital...

Just as an example - how would one go to hack a wordpress site. You go to the site you want to hack, use a siffer to find the framework the site was built with, I use a chrome plugin for this task ( Wappalyzer ). Now that we know we stand before a wordpress site, we need to find the login page, for that we will begin with a google search to find the " default wordpress login url " (http://example.com/wp-admin or http://example.com/wp-login.php) If the site owner was clever (be clever!) and changed the default url for the login, we will use a tool like DirBuster (unix only?) to crawl the site in order to find all urls (from them you will recognize the login url) Now that we have the login page we will want to attempt to brute force our way in, but a bruteforce where we try to guess the username AND the password is hopeless as the number of tries is HUGE, so we will try to find the username. In wordpress there is a "feature" called author enumeration where ...