Enabling PHP warnings and error notices for WordPress WordPress PHP error reporting, warnings and notices should be disabled by default. If for some reason you want to enable them for example, you need to debug your newly installed theme or plugin, then there are a few ways to achieve this. Using a Plugin The most user-friendly way is using a plugin like Easy Error Reporting. Once installed and activate you can set which user type will be able to see the error logging so you won't scare … [Read more...] about How to enable or disable PHP error reporting for WordPress
WordPress HTTP to HTTPS Auto Redirect
As of the beginning of July 2018 Google started forcing site owners to use the HTTPS encryption by flagging non HTTPS sites as "Not secure" when browsed with Google Chrome(v. 68). This alone is a great motive to start converting your HTTP setup into an HTTPS one. In the past, this would cost you a bit but now you can use LetsEncrypt certs for free. Of course, you still need to set up the SSL inside your WordPress site, we're going to create a simple guide about this so make sure you follow our … [Read more...] about WordPress HTTP to HTTPS Auto Redirect
How to: Change your WordPress default administrator username
Reasons to change the default administrator username In one of our first blog posts we wrote about ways of securing a WordPress site and prevent it from being hacked. One of the tips mentioned there was about changing the WordPress default admin username. You see most of the earlier WordPress installations were forced to use the "admin" name for the default administrator user role so this made their WP sites vulnerable to brute-force attacks since the attacker already new the username and had … [Read more...] about How to: Change your WordPress default administrator username
VestaCP hit by 0-day exploit
It seems that VestaCP has been hit by a 0-day exploit through its API, which allows code to be executed as Root(!!!). Many users reported on VestaCP forums that their hosting accounts were suspended and their servers were compromised. Exploit makes the hacked server to attack a chinese IP. It looks like a DDoS trojan where a .sh file(gcc.sh) is loaded in cron.hourly triggering DDoS attacks to other servers. Deleting the cron or the file loaded through the cron won't help much dealing with … [Read more...] about VestaCP hit by 0-day exploit