Entries by Math

A useful feature of Sucuri

Sucuri Security offers a WordPress plugin that you can find in the WordPress plugin library under the name Sucuri Security. While it may not be an all-in-one solution against hacks and has some limitations, it does have one very useful feature that can save you a lot of time, especially if you have many plugins […]

My WordPress website is showing an error?

If there is something wrong with the code, the database, or the hosting, you may encounter an error. For many, these errors are not understandable, but as WordPress security experts, we often encounter them on hacked websites. Not every error is caused by a hack, so to find the right solution, it’s important to understand […]

10 ways to open up WordPress to hackers

These are the 10 things you absolutely should not do if you want to keep your WordPress secure: Keeping the username “admin.” Most scripts are designed to perform a brute force attack in combination with the username “admin,” where thousands of passwords are attempted on your admin page. Leaving “admin” in the wp-admin link without […]

Preventing a Brute Force Attack

How do you block a Brute Force attack? You can block a Brute Force attack by using a security plugin that imposes a temporary or permanent block on the computer from which the attack originates after 5-10 failed login attempts. This block is based on the IP address. Initially, the block is temporary, but if […]

What if I want to use a plugin or theme that is leaky?

You have just created a beautiful website with a nice theme and various plugins, and then your website gets hacked! That’s incredibly frustrating! It has happened to us dozens of times too, even with all the knowledge we have. What if it turns out that your plugin or theme has a vulnerability, and the developers […]

Do I need to keep up with WordPress update?

The developers of WordPress are very active and sometimes release updates as frequently as monthly. And that’s just for the updates addressing “potential” security issues discovered by the community. If you look at the release log, you’ll see that there have been numerous updates for WordPress. WordPress takes prompt action when they discover a new […]

Remove hack files from WordPress

You can recognize from the names of the hack files that they are related to programming; about 50% of the hack files have a logical structure that a programmer would develop. Some of the most common hack files: test.php cache.php files.php options.php view.php diff.php start.php plugin.php Note: These files can also exist in WordPress, so […]

The invisible iFrame hack

The “Invisible iFrame Hack” is one of the most effective hacks known. Why is the iFrame hack so effective? The iFrame spans across the entire browser width and height. So, wherever a visitor clicks, they will be redirected to the hacker’s advertising campaign. But wait, there’s more… The iFrame is controlled with a cookie and […]

A spam file in my site, fortunately no problem?

Sometimes, as web programmers, we are unaware if a problem lies with our internet connection or the website itself, leading to a slow website loading time of 5-10 seconds. How to Find the Cause You can easily identify the cause using the website http://tools.pingdom.com/ (free at the time of writing). After entering your website address, […]

10 ways to keep WordPress secure

Keeping WordPress secure is crucial for web designers and website owners. WordPress, as a base, is relatively secure, and regular updates are released to address security vulnerabilities in collaboration with the WordPress community. However, additional steps are necessary to prevent hackers from exploiting any weaknesses. Here are 10 ways to keep WordPress secure: 1. Update […]