In part I of this article, we discussed how to secure wordpress server by applying PHP secure configurations such as to switch on safe_mode, and to switch off expose_php, enable_dl, and allow_url_fopen. This time we’ll cover more secure PHP configurations. Read the rest of this entry »
A new article has been added. It covers how to cover all angles to maintain CIA (Confidentiality, Integrity, and Availability) of a wordpress server or a LAMP server. It is a part II of an earlier article on how to secure a wordpress server or other LAMP servers. The latter covers securing individual software components of a wordpress server or other LAMP servers.
Right now it is a long check list. I plan to expand and elaborate item by item over time. If you like any particular item be covered first, please leave a note in the comment section below.
Last night, I read a chapter on PHP security from apachesecurity.net. Therein, I found some practical points that can be used to secure PHP’s configuration and its interaction with Apache. Assume we already turned on safe_mode for PHP, per my article on how to secure wordpress server and other LAMP application servers. Read the rest of this entry »
Last night I added the post list functionality to SEO Dave’s almost-spring-adsense theme by copying the functions from his Blix-adsense theme . When previewing the new post list on this site running Wordpres 2.1 on FC6, I noticed the very single post is listed in the ‘most recent posts’ list on the sidebar as well. That’s a bit unusual. Read the rest of this entry »
