With PHP 7.1, some PHP web applications fail because of deprecated code usage. This may result in an error message like `[] operator not supported for strings` for various Joomla, WordPress and Drupal components. Here's how to fix this code for PHP 7.1+.
Published on Friday, 2 March 2018
How to increase the memory limit for your WordPress website, the right way. In this post I show you a correct way of setting WordPress WP_MEMORY_LIMIT and PHP memory_limit settings to improve Wordpress speed & performance.
Published on Monday, 26 February 2018
The WordPress XML-RPC API has been under attack for many years. Back in August 2014, WordPress released version 3.9.2, fixing a possible denial of service issue in PHP’s XML processing. There are brute-force amplification attacks, reported by Sucuri, and so on. So, how do you protect WordPress from these xmlrpc.php attacks, optionally still being able to use (some of) its functionality like Jetpack? This post gives you some insights.
Read more...
Published on Friday, 2 June 2017
The default WordPress theme Twenty Seventeen's content width can be easily changed to full width. All you need is this bit of CSS. To make Twenty Seventeen full width in WordPress, add the following CSS to your theme's CSS file, or in Customizer's Additional CSS.
Published on Wednesday, 8 March 2017
Check WordPress integrity and verify WordPress Core files' md5 checksums against WordPress' checksums API, using this standalone PHP file. I chose to use a standalone PHP script to check the md5sum of WordPress Core files against the API so you're not dependent on a possibly hacked WordPress installation. This kind of guarantees the result can be trusted, as opposed to using a WordPress plugin. I think this is a better integrity check of WordPress Core files.
Read more...
Published on Friday, 16 December 2016
WinCache, or Windows Cache Extension for PHP, is a PHP accelerator that is used to significantly increase the speed of PHP applications running on Windows Server IIS. Besides increasing the speed of PHP applications, WinCache decreases CPU usage making it a win win situation extension.
Published on Sunday, 9 October 2016
During an HTTP request, WordPress executes a lot of queries on your MySQL database. Not just the database queries take time, also loading and executing PHP takes time. How to measure WordPress loading time and executed database queries?
Published on Sunday, 9 October 2016
In this post I show you how you can benchmark the loading speed of your WordPress. For this you use ab, or ApacheBench. ab is a tool for benchmarking your Apache Hypertext Transfer Protocol (HTTP) server. It is designed to give you an impression of how your current Apache installation performs.
Published on Sunday, 9 October 2016
Optimized WordPress hosting is a subject on which a lot is written about. And therefore, this post is not about where to host your WordPress blog, or who offers the best WordPress hosting. This post is for _you_ developers, what _you_ can do to optimize your WordPress hosting. Or for any other PHP web application for that matter.
Published on Wednesday, 31 August 2016
Over the course of one week I had the opportunity to audit two hacked WordPress websites. I could quickly discover two vulnerabilities, a Cross Site Scripting, or XSS, in a premium WordPress theme Akal, and a Denial-of-Service in an undisclosed newsletter plugin.
Published on Monday, 22 August 2016