Everybody knows that Zapier is a great tool when you need to create automated tasks on your WordPress site or to trigger an action when you create new posts or pages
We recently tested Zapier to create new posts in WordPress while Hide My WP Ghost plugin is activated.
We noticed that Zapier needs the xml-rpc.php file to work properly and we switched off the option Hide My WP > Tweaks > Disable XML-RPC access. With this option off we were able to create and promote our posts on Social Media.
Having this option on it’s not safe for your website. Many brute force attacks are made through this URL. Sometimes you need to make compromises in order to prevent functionality issues.
The Advanced Access Manager is a great plugin which lets you customize the users rights when it comes to access the backend of your website.
It’s also a good security plugin which protects your personal information when you want to limit the access to developers who sometimes have to work on your live website.
We tested Hide My WP Ghost together with AAM plugin and we noticed that with small adjustments, the two plugins are working beautifully together.
AAM plugin recommends you to add some rewrite rules into the .htaccess file. All you need to do is to change the old WP path with the new Hide My WP Ghost path and that’s all:
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} -f
RewriteCond %{REQUEST_URI} \.(jpg|jpeg|png|svg|gif|ico|pdf|doc|docx|ppt|pptx|pps|ppsx|odt|xls|xlsx|psd)$
RewriteCond %{REQUEST_URI} wp-content/uploads/(.*)$
RewriteRule . /index.php?aam-media=1 [L]
</IfModule>
to
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} -f
RewriteCond %{REQUEST_URI} \.(jpg|jpeg|png|svg|gif|ico|pdf|doc|docx|ppt|pptx|pps|ppsx|odt|xls|xlsx|psd)$
RewriteCond %{REQUEST_URI} storage/(.*)$
RewriteRule . /index.php?aam-media=1 [L]
</IfModule>
Where storage is the custom wp-content/uploads path you set in Hide My Wp Ghost. If you use another path for uploads, please replace wp-content/uploads with your custom path.
If WPPlugins founds any security issue, it means that your WordPress CMS is detected and hackers will find these breaches.
If you don’t act NOW, the hacker’s bots will get into your website sooner or later. If they do, they usually remove the website content entirely and steal your database information. The loss and recovery costs can be … oh well … you do the math.
Below you will find more details and solutions for each security breach we found:
(more…)You can do that. Follow the pictures:
In the “Privileges” tab which list your users click the “Edit Privileges” of the user.
Then select the database:
After that specific the privileges by checking them and then select your table as shown in the picture:
After you select your table, you can define the operations in detailed:
If you followed all the Hide My WP Ghost indications, probably it’s a .htaccess file issue.
Please check the .htaccess file and look for
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress(more…)Please follow this tutorial step by step to set up the Hide My WP Ghost for Nginx server:
If your server is a Linux server, the main path to the nginx.conf file is /etc/nginx/nginx.conf (or /etc/nginx/conf/nginx.conf if you’re using Arch Linux). If the server is a Windows server your nginx.conf file will be located at C:/nginx/conf/nginx.conf)
If your nginx doesn’t have sites-enabled option activated (check for sites-enabled subdirectory in the same directory with nginx.conf file), you will find the server configuration in nginx.conf file like in the below example:
server {
server_name [your domain name];
root [path to the website root];
index index.php;
location / {
try_files $uri $uri/ /index.php?$args;
}
}(more…)Step1: Install, Setup Hide My WP Ghost Plugin and click the Save button with the new paths.
Step2: Copy the rewrite rules from Hide My WP Ghost into Bitnamy config file
Bitnami uses “htaccess.conf” files by default instead of “.htaccess” files for security and performance reasons. You can find more info at https://docs.bitnami.com/general/apps/redmine/administration/use-htaccess/
(more…)Setting Hide My Wp Ghost on a Nginx server it’s pretty easy.
Nginx stores its configuration files in the “/etc/nginx” directory.
Inside of this directory, you will find a few directories and various modular configuration files:
cd /etc/nginx ls -F(more…)
If you want to create a login based website and you need to redirect all your visitors to login page, please add this code in your theme’s functions.php file.
(more…)