Please explain how WordPress works with MySQL character set and collation at a low level

As the question title suggests, I’m looking to understand how WordPress works with MySQL character sets and collation options. As I will show below, things don’t make much sense to me… I installed WordPress by following the instructions on their installation page: https://codex.wordpress.org/Installing_WordPress As part of the instructions, I followed their advice for manual creation … Read more

Prevent access or auto-delete readme.html, license.txt, wp-config-sample.php

Just a quick question that might help a tad bit with security. I noticed that the readme.html file has the version number listed. It reappears after each upgrade and so do the licence.txt, and wp-config-sample.php. Is there a easy way to have WordPress auto remove these files after an upgrade? I already block the version … Read more

Define WP_DEBUG conditionally / for admins only / log errors (append query arg for all links?)

I’m developing a site on a server that the client has access to as well and what I’d like to do is show WP_DEBUG only for administrators. Referencing Yoast’s article on a way around this: if ( isset($_GET[‘debug’]) && $_GET[‘debug’] == ‘true’) define(‘WP_DEBUG’, true); would show WP_DEBUG only for URLs that have ?debug=true attached to … Read more

Moving a WP Multisite to a subdirectory

Firstly, I’ve read a number of posts on this process. However, for various reasons, the process remains difficult to implement or troubleshoot for lack of even abstracted examples, or maybe too abstracted. And there’s a few “can not do” posts, nearly always followed up by “with 3.5, you now can” caveats, so whether one can … Read more

Site Redirecting to wp-signup.php

I migrated content from our production server to our dev server in an attempt to sync all environments. I used the All-In-One WP Migration plugin. Now, when I access dev.domain.com I am forwarded to http://dev.domain.com/wp-signup.php?new=dev.domain.com It sounds like one of the database values must be incorrect and WordPress is forwarding me here because of it. … Read more

Best practice for versioning wp-config.php?

Is there a best practice for including your wp-config.php file in your version control repository? I’m considering creating a new site with this type of configuration, (similar to Alex King and Mark Jaquith): /index.php /local-config.php /wp-config.php /wp/ (core) /wp-content/ (plugins, themes, etc.) How can I do this without exposing my passwords to git, in case … Read more

What security concerns should I have when setting FS_METHOD to “direct” in wp-config?

I have recently had an issue where I have been unable to install the WP Smush Pro plugin because I don’t have the Manual Install or One-Click Installation options available. I came across this post which suggested tweaking the settings in wp-config.php. I added the settings suggested, however the one that seems to be the … Read more