If you want to have a secure WordPress installation, I urge you not to use any automated tool to install it. In this post, I will demonstrate how I install your WordPress blog without using any FTP software and without using Fantastico.
This installation is simple, more secure, and will make your future upgrades a [...]

• 9 Comments

If you display Google Adsense on your site, then you will need to display a Privacy Policy.
Google updated it’s “Terms and Conditions” and asked all publishers to read it. I use Adsense lightly here and kept getting this message everytime I log into my Adsense account. They set a deadline for reading and agreeing to their [...]

• 0 Comments

Setting up a blog is becoming an easier task these days. There is a lot of information and help you can find that will help you get started.
Many of cpanel customers use tutorials or articles that lead them to installing wordpress using fantastico. I do however prefer using the traditional install.
With cPanel it is simpler [...]

• 6 Comments

You might have noticed from your dashboard that WordPress released yesterday 2.5.1 which they say has a “very important security fix”. They haven’t disclosed exactly what the fix is about.
If you have already installed 2.5, then you better rush with upgrading to 2.5.1.
I personally didn’t install 2.5 yet, because I tested with it on my [...]

• 3 Comments

This version follows 2.3. I don’t know why they skipped 2.4… maybe because of all the major changes in the admin area.
Yes, the admin area changed to allow less cluttering. However if you do a lot with wordpress, I would recommend you to test first before upgrading.
It could take a little of getting used to [...]

• 1 Comment

I am pleased to announce my first E-Book, that I am offering to anyone interested in building a secure WordPress site.
This E-Book will cover points that are overlooked by many, who install WordPress scripts, yet most of the points discussed are crucial for the security of your site.
E-book format:
I created this E-Book in PDF which [...]

• 10 Comments

WordPress is becoming more popular day by day, has evolved from a blogging to a CMS platform.
I started learning about it from customers who sign up for my Hosting Service. More and more use WordPress than any other script offered.
It amazed me how easily you can make your site unique by adding some simple customization [...]

• 2 Comments

If you allow users to register to your Wordpress site, then I would suggest you to look at the “Roles Manager Plugin”
WordPress Version 2.0 introduced the concept of Roles.
Each Role has a set of permissions or is allowed to perform a set of tasks called Capabilities.
If you allow anyone to register to your site, choose [...]

• 0 Comments

Have you ever forgotten your password and tried to login multiple times to your bank account.
After 3 failed attempts a message comes like “Your exceeded your login attempts. Please try later or contact our account reps”
Brute Force Attacks or multiple failed login attempts are sometimes used by malicious users to gain access to your account. [...]

• 0 Comments

Secunia reported Popular Wordspew plugin to have an input vulnerability which can be exploited to inject SQL commands to your wordpress installation.
User supplied input to the parameter “id” could be exploited by malicious users to inject SQL.
Here is how a visitor to your site can inject SQL through the plugin:
From the URL of the browser, [...]

• 0 Comments