security Archives - Page 37 of 38

The definitive guide to form-based website authentication [closed]

Closed. This question needs to be more focused. It is not currently accepting answers. Closed 5 years ago. The community reviewed whether to ...

April 9, 2022
0 Comments

WordPress

IT Nursery

wp_verify_nonce vs check_admin_referer

What is the difference, which one should I use? I know that wp_verify_nonce checks the time limit, and check_admin_referer I think calls wp_verify_nonce ...

April 9, 2022
0 Comments

WordPress

IT Nursery

Is there any way to rename or hide wp-login.php?

Any way to change the wp-login.php url? It seems insecure that everyone that’s ever used WordPress could easily see if your site is ...

April 8, 2022
0 Comments

WordPress

IT Nursery

What’s the easiest way to stop WP from ever logging me out

After a certain amount of time WP logs out all users and forces them to log back in again. For development environments on ...

April 8, 2022
0 Comments

WordPress

IT Nursery

Best way to eliminate xmlrpc.php?

What is a best way to eliminate xmlrpc.php file from WordPress when you don’t need it? 8 Since WordPress 3.5 this option (XML-RPC) ...

April 8, 2022
0 Comments

WordPress

IT Nursery

Can I Prevent Enumeration of Usernames?

Can I prevent enumeration of usernames on my wordpress site? I can see users at the moment using the WPScan tool. 9 A ...

April 8, 2022
0 Comments

WordPress

IT Nursery

Worthwhile to restrict direct access of theme files?

I’ve run across the following snippet in themes from time to time: if ( ! defined('ABSPATH')) exit('restricted access'); It’s at the beginning of ...

April 8, 2022
0 Comments

WordPress

IT Nursery

WordPress 4.7.1 REST API still exposing users

I have upgraded my WordPress to 4.7.1, and after that I’ve tried to enumerate users through REST API, which should be fixed, but ...

April 7, 2022
0 Comments

WordPress

IT Nursery

Getting a List of Currently Available Roles on a WordPress Site?

When writing WordPress plugins there is often a need to set up options for which roles on the site have access to certain ...

April 6, 2022
0 Comments

Error Importing SSL certificate : Not an X.509 Certificate

Does your cacerts.pem file hold a single certificate? Since it is a PEM, have a look at it (with a text editor), it ...

April 6, 2022
0 Comments