Enabling PHP warnings and error notices for WordPress WordPress PHP error reporting, warnings, and notices should be disabled by default. If, for some reason, you want to enable them, for example, you need to debug your newly installed theme or plugin, then there are a few ways to achieve this. Using a Plugin The most user-friendly way is using a plugin like Easy Error Reporting. Once installed and activated, you can set which user type will be able to see the error logging so you won't … [Read more...] about How to enable or disable PHP error reporting for WordPress
WordPress HTTP to HTTPS Auto Redirect
As of the beginning of July 2018, Google started forcing site owners to use HTTPS encryption by flagging non-HTTPS sites as "Not secure" when browsed with Google Chrome(v. 68). This alone is a great motive to start converting your HTTP setup into an HTTPS one. This would cost you a bit in the past, but now you can use LetsEncrypt certs for free. Of course, you still need to set up the SSL inside your WordPress site; we will create a simple guide about this, so make sure you follow our upcoming … [Read more...] about WordPress HTTP to HTTPS Auto Redirect
How to: Change your WordPress default administrator username
Reasons to change the default administrator username In one of our first blog posts, we wrote about ways of securing a WordPress site and preventing it from being hacked. One of the tips mentioned was changing the WordPress default admin username. You see, most of the earlier WordPress installations were forced to use the "admin" name for the default administrator user role, so this made their WP sites vulnerable to brute-force attacks since the attacker already knew the username and had … [Read more...] about How to: Change your WordPress default administrator username
VestaCP hit by 0-day exploit
It seems that VestaCP has been hit by a 0-day exploit through its API, which allows code to be executed as Root(!!!). Many users reported on VestaCP forums that their hosting accounts were suspended and their servers were compromised. Exploit makes the hacked server attack a Chinese IP. It looks like a DDoS trojan where a .sh file(gcc.sh) is loaded in cron.hourly triggering DDoS attacks on other servers. Deleting the cron or the file loaded through the cron won't help much in dealing with … [Read more...] about VestaCP hit by 0-day exploit