Protect WordPress from brute-force XML-RPC attacks
How to protect your WordPress from brute-force XML-RPC attacks, because the WordPress XML-RPC API has been under attack for many years now.
Search Results for: security
How to disable SMBv1 in Windows 10 and Windows Server
It is urged you disable SMBv1 in your Windows variant (Windows 10, 8.1, Server 2016, 2012 R2), and here is how if you haven’t done so yet.
Enable NTFS long paths through GPO in Windows Server
Windows Server 2016 was released last week, meaning we can finally lift the idiotic 260 characters limitation for NTFS paths. For this, you use a GPO or Group Policy Object in Windows Server.
Akal Premium WordPress theme XSS vulnerability
This post describes the Akal premium WordPress theme Cross Site Scripting (XSS) vulnerability. If you use this theme, delete it immediately!
Free up disk space in Windows Server – 5 extra methods
In this post I provide you with 5 ways to cleanup files and free up disk space in Windows Server 2016 (and older / newer Windows Server version), without using the Disk Cleanup Utility. Reclaim lots of lost gigabytes easy. Disk space usage is still an issue in Windows Server.
Optimize(d) WordPress hosting (9+ practical tips)
9+ Practical tips to optimize WordPress hosting – or for any other PHP web application for that matter. Learn optimizing your WordPress hosting
SSL in WordPress: how to move WordPress to HTTPS? The definitive guide
Move WordPress to HTTPS correctly. Learn the Site Health switch, database search and replace, IIS/Apache redirects, HSTS hardening, and OpenSSL verification.
KMS Migration from 2008 R2 to Windows Server 2012 R2 and KMS Activation Known Issues
Learn to migrate KMS from Windows Server 2008 R2 to Windows Server 2012 R2 and KMS Activation Known Issues.
HackRepair.com’s Bad Bots .htaccess in web.config for IIS
Learn to protect your WordPress website with this web.config file on Windows Server IIS. Block IP addresses, bad bots, query string sequences
Install Elasticsearch on CentOS 6.7
How to install Elasticsearch on CentOS 6.7. Elasticsearch is a highly scalable open-source full-text search and analytics engine. It allows you to store, search, and analyze big volumes of data quickly and in near real time.
Important Windows Maintenance – 7+ Tips
Regular maintenance of a Windows computer significantly improves performance and reliability. Manual execution of maintenance tasks complements the automatic maintenance already scheduled by Windows, giving users greater control over how system resources are managed and how repairs are conducted. This article explains how to use tools such as SFC, DISM, CHKDSK, and disk defragmentation.
Optimize PHP OPcache configuration
Optimize PHP OPcache configuration and make it perform even better. After realpath_cache_size, the OPcache cache mechanism is the next important step to fine-tune. With just a few tweaks you tune OPcache to perform much better
My WordPress web.config
A web.config file for WordPress on Windows Server IIS. Are you having trouble with your web.config? Here is mine 🙂
Use authenticated SMTP over TLS encrypted connections, in PHP, ASP and ASP.NET
Send mail over authenticated SMTP using TLS, in PHP, ASP and ASP.NET. Send email securely from your website. Ready to use examples!
Monit monitoring on Ubuntu 14.04 VM on Hyper-V
Easily setting up a monitoring service for websites and services using Monit on Ubuntu/Hyper-V, following these steps.
Disable WordPress comments (how-to)
With thousands spam reactions, disabling (and removing) WordPress comments is often the only way to go. Here is how to disable WordPress comments in both the WordPress Dashboard interface and in your MySQL / MariaDB database.
Disk Cleanup in Windows Server
Utilize your cmd.exe or PowerShell command-line and use Deployment Image Servicing and Management (DISM) to clean up the Windows Component Store (WinSxS) in Windows Server.
Conditionally start Application Pools on remote IIS web servers
In this article you’ll learn how to start all stopped application pools that have the ApplicationPool.AutoStart property set to $True using AppCmd.exe or PowerShell. This is something you often or occasionally have to perform on various servers, for example when an application pool hangs.
Exploit PHP’s mail() to get remote code execution
Exploit PHP’s mail() function for remote code execution. Apparently, if you are able to control the 5th parameter of the mail() function ($options), you have the opportunity to execute arbitrary commands.
Send authenticated SMTP email over TLS from WordPress
Learn how to override wp-mail() and send secure email using authenticated SMTP and StartTLS from WordPress.