Improve wordpress security by hiding non public resources

I’m new from wordpress and i want improve security of wordpress multisite by hiding non public resources, eg. wp-admin, wp-config etc. My setting seem to work, but i don’t know if this setting can break something (core features, popular plug-in, etc.) Are my settings good in general way? My settings improve real security or i’m … Read more

Masking wp-content/themes/name/images to just images directory using htaccess

I’m trying what I thought would be something really simple of masking my url but cannot seem to get it to work. I want to be able to link to images in my img tag without having to type in the full url. i.e. Current url: http://server.com/wp-content/themes/standard/images/img.jpg or <img src = “http://server.com/wp-content/themes/standard/images/img.jpg” /> However on … Read more

Which one does WordPress prioritize when it comes to php.ini, wp-config and .htaccess?

Let’s say I want to change the max upload limit for a WordPress website and I give the following values: wp-config.php: 128MB php.ini: 256MB .htaccess: 64MB So, which one would WordPress prioritize while processing upon need? 3 s 3 It’s not clear from your question what you are changing in each of these files, but … Read more

Access-Control-Allow-Origin Multiple Origin Domains?

Is there a way to allow multiple cross-domains using the Access-Control-Allow-Origin header? I’m aware of the *, but it is too open. I really want to allow just a couple domains. As an example, something like this: Access-Control-Allow-Origin: http://domain1.example, http://domain2.example I have tried the above code but it does not seem to work in Firefox. … Read more

WordPress Redirect All HTTP requests to HTTPS via .htaccess

I’ve done this many times before, and yet I’m not managing to do this again for some unknown reason. Tried endless solutions. Everything I’ve tried results in an endless redirect loop. What is the best option for doing this? Update 1 Here are a few of the things tried; RewriteCond %{HTTP_HOST} ^website\.co\.uk [NC] RewriteCond %{SERVER_PORT} … Read more

How do I skip wordpress’s 404 handling and redirect all 404 errors for static files to 404.html?

How do I skip wordpress’s 404 handling and redirect all 404 errors for static files to 404.html? I read and it seems its not possible when using permalinks? The objective is to reduce the server load for 404 errors by not loading php. 7 .htaccess skip WordPress 404 error handling for static files. <IfModule mod_rewrite.c> … Read more

Default .htaccess file for WordPress?

My .htaccess files are intercepting WordPress’ .htaccess file. Which modules and which settings (specified by .htaccess) are required for WordPress to work? In other words, where can I find WordPress’ default .htaccess file? 4 Here is the default code for that file. # BEGIN WordPress <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteRule ^index\.php$ – [L] … Read more

“Too many redirects” ONLY when trying to access wp-admin page

I figured I would ask my own question seeing as the duplicate question(s) still haven’t been answered. For some reason after my fresh install of WordPress 4.9.1 on my Ubuntu VPS, enabling my “flexible” SSL issued by Cloudflare, and finally switching my URLs in WordPress (from “https://foo.com” to “https://foo.com”) I can no longer access my … Read more

Moving a WP Multisite to a subdirectory

Firstly, I’ve read a number of posts on this process. However, for various reasons, the process remains difficult to implement or troubleshoot for lack of even abstracted examples, or maybe too abstracted. And there’s a few “can not do” posts, nearly always followed up by “with 3.5, you now can” caveats, so whether one can … Read more