Another Malaysian Technology Blog
I would like to wish Selamat Hari Raya Aidilfitri, Maaf Zahir & Batin to all my readers. -CH.
I have about eleven WordPress sites (or blogs) in my ManageWP account.
Before ManageWP exist, it was very time consuming to manage and update all your WordPress sites, plugins and themes to their latest version.
But with ManageWP, I just need to login into it once a week and click the Update button to update all my WordPress sites.
Easy.
But what is ManageWP?
Continue reading…
By default, all files that you have uploaded to WordPress will be stored in /wp-content/uploads/ folder.
And by default, folders that come with WordPress installation i.e., plugins, themes will have index.php file. So when someone try to access that folder will stumble on a blank page.
But for this uploads folder, there is no index.php file created for it. So you need to create an empty index.php for that folder to protect it. Great!
Continue reading…
In this post, I will share with you how to make your WordPress to automatically share new post update to Facebook page.
For me, this technique is very easy and does not require any plugin. It just uses IFTTT (If This Then That) services and your RSS feed.
Continue reading…
If you have SSL installed on your website and want to force all connections to HTTPS, you need to include this code in your .htaccess file.
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]All traffics to your website will be forced to use HTTPS instead of normal HTTP.
And if you are using WordPress, you need to edit your WordPress Address and Website Address in Settings to your new HTTPS URL.
Don’t have SSL installed? Don’t worry. You can purchase from Elfbytes Web Hosting or any other SSL providers.
Suspicious codes found in WordPress wp-config.php file
A Sophos Senior Threat Researcher, Paul O Baccas found a malware codename, Troj/PHPShll-B in a WordPress wp-config.php file that was installed in one of their IT department friend’s website.
This malware was first detected by SophosLabs automated systems as Mal/Badsrc-C from the downloaded index.html file.
Further analysis, Paul saw a suspicious piece of code written in base64 string format in the wp-config.php file. When translated, the code will only be served if the User-Agent is Internet Explorer.