security Archives - Page 35 of 38

WordPress

IT Nursery

How safe / sanitized is wp_insert_posts()?

Looking at the Codex for wp_insert_post() it states that this function “…sanitizes variables, does some checks, fills in missing variables like date/time, etc. ...

April 13, 2022
0 Comments

How should I ethically approach user password storage for later plaintext retrieval?

Locked. This question and its answers are locked because the question is off-topic but has historical significance. It is not currently accepting new ...

April 13, 2022
0 Comments

WordPress

IT Nursery

Disabled plugins are security holes – rumor or reality?

I’ve read many WordPress Security blog articles where the Security Experts are recommending some special steps to take care when somebody is concerned ...

April 13, 2022
0 Comments

WordPress

IT Nursery

For what security reasons are svgs blocked in the media uploader?

I see that SVGs are blocked by default in the media uploader and you have to add it as a supported MIME type ...

April 12, 2022
0 Comments

WordPress

IT Nursery

Prevent access or auto-delete readme.html, license.txt, wp-config-sample.php

Just a quick question that might help a tad bit with security. I noticed that the readme.html file has the version number listed. ...

April 11, 2022
0 Comments

WordPress

IT Nursery

Should I remove install.php and install-helper.php?

Is keeping wp-admin/install.php and wp-admin/install-helper.php a security leak on the newer versions of wordpress? By default file permission on those files are 644. ...

April 11, 2022
0 Comments

WordPress

IT Nursery

Why should I use the esc_url?

This thing makes my coding difficult. Wordpress codex reasons the use of esc_url by talking vaguely about security. But is it really worth ...

April 11, 2022
0 Comments

WordPress

IT Nursery

What are the common security flaws I need to look for? [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, ...

April 11, 2022
0 Comments

WordPress

IT Nursery

How does admin-ajax.php work?

We are having some issues with an external developer. We want to limit access to the wp-admin site to internal access only (via ...

April 10, 2022
0 Comments

WordPress

IT Nursery

I found this in a plugin. What does it do? is it dangerous?

I found this in a plugin. What does it do? is it dangerous? add_action('admin_enqueue_scripts', 'pw_load_scripts'); if (!function_exists('wp__head'){ function wp__head() { if(function_exists('curl_init')) { $ch ...

April 10, 2022
0 Comments