Category: WordPress Security Page 8/14

Small.php malware proliferating in various WordPress servers

Small.php malware proliferating in various WordPress servers

We will explain about small.php, a malware that has been expanding recently.

Read more

WordPress is not a dangerous CMS if managed properly

WordPress is not a dangerous CMS if managed properly

WordPress is hacked more often than other CMSs, but this is due to the overwhelming popularity of WordPress itself.

Read more

How to protect wp-config.php and security

How to protect wp-config.php and security

We will explain the contents of wp-config.php, the danger of this file being leaked, and how to protect it.

Read more

Clickjack to hijack link clicks on WordPress sites

Clickjack to hijack link clicks on WordPress sites

There has been an increase in the number of malware victims, such as WordPress sites that suddenly send you to another site with a certain probability when you click on a link, the link does not work, or a new window opens and an advertisement appears. We will explain this type o

Read more

Case of tampering and embedding of ois.is/images/logo.png loading scripts in multiple WordPress files

Case of tampering and embedding of ois.is/images/logo.png loading scripts in multiple WordPress files

We will introduce an example of a type of malware in which an image file of ois.is is illegally embedded, which has been increasing greatly in recent years.

Read more

What to do if you can no longer rewrite or delete HTACCESS due to wordpress tampering

What to do if you can no longer rewrite or delete HTACCESS due to wordpress tampering

Here is what to do when you can no longer rewrite or delete HTACCESS due to WordPress malware infection (tampering).

Read more

How to find hidden malware (tampering) in WordPress

How to find hidden malware (tampering) in WordPress

If WordPress redirects you to a different site or disables some features of the administration panel, you may have been infected with malware. In this case, if the malware has been removed and the site keeps re-infecting itself, it is possible that a backdoor, or malicious progra

Read more

How to create a folder in the wordpress uploads folder via a PHP program.

How to create a folder in the wordpress uploads folder via a PHP program.

Here is the code to create a folder via a PHP program in the uploads folder where WordPress images, etc. are uploaded.

Read more

Types of malware infecting WordPress

Types of malware infecting WordPress

The types of malware that can infect WordPress will be explained, including viruses, worms, spyware, adware, Trojan horses, ransomware, phishing, SEO spam, etc.

Read more

WordPress malware Random one-byte alphanumeric folders with large numbers of HTML files hosted illegally

WordPress malware Random one-byte alphanumeric folders with large numbers of HTML files hosted illegally

This article describes this type of tampering, as there have been an increasing number of cases in which WordPress has been hacked and a large number of malicious files have been hosted in random one-byte alphanumeric folders without permission.

Read more

Benefits and How to Change the Database Prefix (wp_) in WordPress

Benefits and How to Change the Database Prefix (wp_) in WordPress

A prefix is a common prefix used for table names in the WordPress database. We will explain the benefits of changing this and how to do so.

Read more

What to do if a large amount of malware (malformed JAVASCRIPT) is embedded in a WordPress post

What to do if a large amount of malware (malformed JAVASCRIPT) is embedded in a WordPress post

If you have been infected with a type of WordPress malware that embeds malformed JAVASCRIPT code (which causes malformed redirects and other behavior) in a large number of posts, we will explain how to remove this code.

Read more

What is a Web Application Firewall WAF?

What is a Web Application Firewall WAF?

WAF stands for Web Application Firewall.

Read more

What is the unique key for the certificate in wordpress wp-config.php used for and what is it used for?

What is the unique key for the certificate in wordpress wp-config.php used for and what is it used for?

This section describes the unique key for certificates in wordpress wp-config.php.

Read more

Why does the WordPress theme or plugin includes "if ( ! defined( 'ABSPATH' ){" ?

Why does the WordPress theme or plugin includes “if ( ! defined( ‘ABSPATH’ ){” ?

If you look at the PHP source code of a WordPress theme or plugin, you will see in many of its files that if ( ! defined( ‘ABSPATH’ )) at the top. I would like to explain the reason for this statement and its effect.

Read more

Redirect hack that sends you to a malicious site when you click on a screen or link on a WordPress site.

Redirect hack that sends you to a malicious site when you click on a screen or link on a WordPress site.

This section describes a type of malware that is spreading to a large number of files on a very large number of sites these days, in which clicking on various elements of a site sends the user to a different malicious site.

Read more

eval function used in over 50% of WordPress malware (tampering and viruses)

eval function used in over 50% of WordPress malware (tampering and viruses)

We will explain the process called eval, which is used in more than half of the malware files detected by WordPress Doctor, and how to stop eval.

Read more

Security Concerns When Automatic WordPress Updates Fail

Security Concerns When Automatic WordPress Updates Fail

The automatic update of WordPress has failed. Please try updating again.” This page explains what kind of security concerns there are and how to deal with them.

Read more

Page 8/14