Sysadmins of the North logo, generated by Gemini

Category WordPress

WordPress powers a massive portion of the web, but running it at a professional level – especially on Windows/IIS or high-performance Linux stacks – requires specific expertise. This sub-category focuses on the technical side of the world’s most popular CMS: from MySQL/MariaDB tuning and PHP-FPM optimization to advanced caching strategies and security hardening.

Forget the basic plugin reviews; here we go under the hood. You’ll find guides on managing WordPress via WP-CLI, automating updates, and protecting your installation from the latest vulnerabilities. If you are looking to host WordPress with the speed and security of an enterprise-grade application, these battle-tested configurations are for you.

Home » Web applications » WordPress

Disallow direct access to PHP files in wp-content/uploads/

Securing the WordPress uploads folder is important. In many hacked WordPress sites, a PHP backdoor is found within the WP_CONTENT_DIR/uploads directory. Often because this is the location where uploads are placed automatically. From the backdoor within wp-content/uploads other backdoors are uploaded to various locations, and scripts are injected with malware.

Read MoreDisallow direct access to PHP files in wp-content/uploads/