Posted inWordPress
Count and display number of WordPress users in your Dashboard
WordPress widget plugin to display the number of registered users in your Dashboard.
Posted inWordPress
Delete spam comments after three (3) days
Here is how to change Akismet interval to three (3) days instead of 15 days for deleting spam comments, using the akismet_delete_comment_interval filter in your WordPress functions.php
Posted inCode base
Fatal error: Uncaught Error: [] operator not supported for strings – PHP 7.1
With PHP 7.1, some PHP web applications fail because of deprecated code usage. This may result in an error message like [] operator not supported for strings for various Joomla, WordPress and Drupal components. Here's how to fix this code for PHP 7.1+.
Posted inWordPress
Increase WordPress’ memory limit WP_MEMORY_LIMIT properly in wp-config.php
How to increase the memory limit for your WordPress website, the right way. The WordPress memory limit can be increased by the WP_MEMORY_LIMIT variable in wp-config.php. However, I see this done wrong over and over again in WordPress plugins and themes. In a worst case scenario this may even decrease the available amount of memory for WordPress! So be careful with the advice you follow. In this post I show you a correct way of setting WordPress WP_MEMORY_LIMIT and PHP memory_limit settings.
Posted inWordPress
Remove Jetpack email sharing service
Recently the WordPress Jetpack email sharing service is often abused by spammers. They use the Send to Email Address for sending spam. All these kind of "Tell a Friend" scripts are abused a lot. Here is how to disable email share service in Jetpack.
Posted inWordPress
How to make Twenty Seventeen theme full width in WordPress
The default WordPress theme Twenty Seventeen's content width can be easily changed to full width. All you need is this bit of CSS.
Posted inWeb application security WordPress
Check WordPress Core files integrity
Learn the importance of checking and verifying WordPress Core PHP files md5 checksums against WordPress' checksums API, using this standalone PHP file.
Posted inWordPress
Clear PHP opcode caches before WordPress Updates: ease the updating process
If stale or cached content is still an issue with OPcache then here is how to add a must-use plugin that will clear it before you upgrade. This little WordPress Must Use Plugin tries to flush opcode caches, making your live a bit easier when updating WordPress Core, Plugins and Themes.
Posted inWordPress
The WinCache effect: Save with object caching
WinCache, or Windows Cache Extension for PHP, is a PHP accelerator that is used to significantly increase the speed of PHP applications running on Windows Server IIS. Besides increasing the speed of PHP applications, WinCache decreases CPU usage making it a win win situation extension.
Posted inWordPress
Benchmarking WordPress, simple load & speed testing with ApacheBench
Load test and benchmark WordPress loading speed with ApacheBench. The ab command is a small benchmark utility that comes with Apache. It's a really simple HTTP load generating tool, ideal for a simple WordPress load & speed test.
Posted inWordPress
Measure WordPress loading time and queries
How to measure WordPress' loading time and executed database queries? During an HTTP request, WordPress executes a lot of queries on your MySQL database. Not just the database queries take time, also loading and executing PHP takes time.
Posted inWordPress
Optimized WordPress hosting (9+ practical tips)
WordPress optimized hosting is a subject on which a lot is written about. And therefore, this post is not about where to host your WordPress blog, or who offers the best WordPress hosting. This post is for you developers, what you can do to optimize your WordPress hosting. This post is not about setting up high-availability, fail-over, clustering, IIS versus Nginx versus Apache, RAID 1, 5, 6, 10, different types of storage, and so on. It’s about solving performance issues.
Posted inWeb application security
“How we broke PHP, hacked Pornhub and earned $20,000”
This is a very interesting read on how Dario Weißer (@haxonaut), cutz and Ruslan Habalov (@evonide) were able to find a PHP unserialize bug to exploit and gain remote code execution on Pornhub. Pornhub’s bug bounty program is at Hackerone. Instead of actively attacking Pornhub, they took another road and attacked what Pornhub is built upon: PHP.
Posted inWeb application security
Binary webshell through OPcache in PHP 7
GoSecure wrote up a new PHP exploitation technique using the default OPcache engine from PHP 7. Using this attack vector, it's possible to bypass certain hardening techniques that disallow the file write access in the web directory.
Posted inWindows Server
How to install Microsoft’s SQL Server Driver for PHP
In this article I'll show you how to install the Microsoft SQL Server Driver for PHP 7+. This makes the use of an SQL Server database back-end for your PHP website easy. This post walks you through the steps necessary to install the SQL Server driver and SQLSRV extension for PHP 7+, on Windows Server IIS of course.