Tag: security
-
Automatic Admin Login for WordPress, A Really Bad Idea
This content presents a PHP snippet that forces automatic login to a WordPress site as the admin user. While it may be useful for local environments and testing existing data, it is strongly discouraged for production use due to security risks.
-
Super Simple OpenAI PHP Class
in Dev StuffI’ve been playing around with hooking up ChatGPT/Dall-E to WordPress and WP-CLI. To do this, I whipped up a super simple class to make this easier: I can generate images and get back text from the LLM. Here’s some examples ChatGPT made to show how you can use these: Example 1: Generating an Image This…
-
How To Restrict User to Self Posts in WordPress
in WordPressTo secure our private site while using a third-party WordPress REST API integration, I restricted the plugin user to its own posts with user_has_cap and allowed access to its revisions. I also used posts_results to mark non-qualifying posts as private. Here’s a sample implementation for similar needs.
-
Guerilla Ad-Blocking: Taking Back the Web with WordPress
Unveiling stealthy WordPress strategies for guerilla ad-blocking, empowering users to cleanse their online spaces and champion a distraction-free web experience.
-
My Favorite Firefox Addons
A list of Firefox add-ons for various functions such as password management, privacy, and content filtering. Add-ons include 1Password X, ClearURLs, uBlock Origin, and more. Explore these options for enhancing your browsing experience.
-
Open source ngrok alternative
in Dev StuffLearn about setting up sish, an open-source ngrok alternative, for secure HTTP(S)/WS(S)/TCP tunnels. Follow the steps to create a wildcard subdomain, set up a DigitalOcean droplet, install necessary packages, obtain SSL certificates, and set up sish service with Docker. Finally, create a shortcut program to initiate tunnels locally.
-
Securing WordPress Plugins with more Plugins
in WordPressLearn how to secure plugins from accidental deactivation in WordPress by creating a helper function within an mu-plugin. This function ensures that critical plugins cannot be disabled, providing stability to your website. See how to implement this function and prevent the “Deactivate” option from appearing in the WordPress admin interface.
-
Auto-Upgrading users in WordPress
in developmentI wrote some terrible and insecure code to make WordPress users administrators.
-
Let’s Encrypt SSL on SABnzbd+
Let’s Encrypt and SABnzbd+ are easy to pair together, if everything works right and you’re lucky.