Website Security
Do You Need a WordPress Security Plugin?
What a WordPress security plugin really covers, where it overlaps with your host's firewall and scanning, what it cannot protect, and how…
Read article
Tag
Tag: website security
Website Speed
Is Bot Traffic Slowing Your Website? Read the Logs First
Crawlers, scrapers and login attackers use the same server resources as customers. Here is how to find them in your logs and…
Read article
Website Security
WordPress XML-RPC: What It Is and Whether to Disable It
xmlrpc.php is an old remote-publishing door that attackers still knock on. Here is what it does, what might depend on it, and…
Read article
Website Security
WordPress File Permissions Explained: 755, 644 and 777
Failed updates, "Could not create directory" and surprise FTP prompts usually come down to file permissions or ownership. Here is what the…
Read article
Website Security
WordPress User Roles: Give Each Person Only What They Need
Most small business WordPress sites have more administrators than they need. Here is what each user role can do, and how to…
Read article
Website Security
Protecting wp-config.php: Practical WordPress Hardening
wp-config.php holds your database password and security keys. Here is why attackers look for it and the practical steps that keep it…
Read article
Website Security
Website Firewalls (WAF) Explained for Small Businesses
A plain explanation of web application firewalls: cloud-level versus plugin-level, what each blocks and misses, and how to switch one on without…
Read article
Agency Resources
Client Data Privacy When Agencies Outsource WordPress Work
An admin login shares far more than code. Here is how agencies can limit, document and protect client and customer data when…
Read article
Website Security
Japanese Keyword Hack and SEO Spam: Finding and Removing It
Spam pages in Japanese or full of drug names can sit on your site for months because they are hidden from you.…
Read article
Website Security
WordPress Site Redirecting to Spam Sites: How to Fix It
Spam redirects are built to hide from the site owner, firing only on mobile, only from Google or only for logged-out visitors.…
Read article