Disallow direct access to PHP files in wp-content/uploads/

2020-03-16

Securing the WordPress uploads folder is important. In many hacked WordPress sites, a PHP backdoor is found within the WP_CONTENT_DIR/uploads directory. Often because this is the location where uploads are placed automatically. From the backdoor within wp-content/uploads other backdoors are uploaded to various locations, and scripts are injected with malware.

virt-manager - virtual machine manager logo

Managing KVM VMs with virt-manager on Windows

2020-02-26

In this post, I will show you how to connect to your KVM VMs (virtual machines) in Windows 10 via SSH using virt-manager (Virtual Machine Manager) and qemu+ssh://. This allows you to manage your virtual machines from Windows.

scrabble tiles spelling out the word data on a wooden surface

Converting an Access 2003 database to 2007 and higher online

2019-01-04

Learn how to programmatically convert legacy Microsoft Access 2003 (.mdb) databases to the modern .accdb format using Classic ASP and the ACE engine. This guide provides essential scripts for performing online conversions and database maintenance directly on your IIS web server. It is an ideal solution for sysadmins managing legacy environments who need to upgrade data storage without local access to Microsoft Office.

11+ Tips to optimize Umbraco 7 CMS

2018-11-07

Umbraco 7 is a popular, ASP.NET powered, content management system (CMS). Out of the box Umbraco performs pretty well, but there are still some areas you need to tweak and tune for a more performant Umbraco website. Here are 11+ tips.

Lego security officer keeping your sites secure

.htaccess security best practices in Apache 2.4.6+

2018-11-05

Since Apache 2.4.6, a new module is used to configure and set up access control for websites: mod_authz_core. This means you have to use a different syntax for allowing or blocking hosts and IP addresses to your website. Apache Access Controle done right in WordPress .htaccess.