
Was My WordPress Site Hacked? 5 Places Attackers Hide
Hidden admin accounts, web shells in uploads, invisible must-use plugins, code that runs before WordPress, and spam only Google can see. Where to look and the exact commands.
Posts in
6posts

Hidden admin accounts, web shells in uploads, invisible must-use plugins, code that runs before WordPress, and spam only Google can see. Where to look and the exact commands.

What a bread starter actually is, why it's worth keeping (and why you might not need one), and how to use it for poolish, a sourdough loaf and pizza. Spoiler: the number that matters is water.

A practical guide to issuing a free SSL certificate with Certbot, completing the ACME HTTP challenge through .well-known, and setting up renewal without a paid SSL service.

A practical WordPress security checklist covering users, passwords, updates, plugins, .htaccess, the REST API, XML-RPC, and WP-Cron.

A practical cPanel and WHM command-line guide for creating cpmove backups, moving accounts between servers, restoring them safely, and checking what went wrong.

A client's site started showing ₪ instead of &. The culprit was the font. Here's how I tracked it down and shipped a fix in a day.