Tag Info

New answers tagged


As the article suggests, it's only a 'possible' permissions scheme. So there is no quick answer to 'yes' or 'no' in terms of settings the correct permission for files/folders in your particular hosting environment. My suggestion is to keep it as 'out-of-the-box' unless you run into an issue which requires you to adjust permissions in order for particular ...


In Wordpress there are php script that can be include on wordpress index.php What it does it will automatically protect your video. This Script call Defa Protector.You can Google it. Here is some video : http://www.youtube.com/watch?v=TlzNT9vJF58


Recovering from hacks is off-topic here. In any event, see FAQ: My site was hacked « WordPress Codex. Change all passwords. Scan your own PC. Use http://sitecheck.sucuri.net/ before and after.


if they use the same plugins I see no problem. you can use up even as symbolic link, getting simpler to maintain and update


It is a bug in wp-members plugin. Others have reported the same error. http://user-meta.com/forums/topic/able-to-save-plain-text-passwords-as-a-user-meta-value/ http://wordpress.org/support/topic/wp-member-passwords-are-stored-in-clear-text-in-database-highly-insecure


You cannot export passwords as plaintext in WordPress, because they are not stored in plaintext. What you see here is obviously the result of a very bad plugin. Fields like Payment, Sex or Company are not even part of the regular WordPress tables. For the future: Do not install plugins without prior tests and reviews in a safe environment. Use a local ...


If you did want to lock things down.... a normal wordpress site will usually only require the database user to have SELECT, INSERT, UPDATE and DELETE. If you want to use the automatic update feature it will also require CREATE and ALTER. Some plugins may require other permissions but most won't.


If you're wanting to limit by a capability (built in or custom) you can use current_user_can() and pass the appropriate capability. if( current_user_can('manage_options') ) { echo "Hi there user who can manage options'; } Keep in mind that the post or page content is one chunk and you would need to do something much more custom to hide certain ...


There is is_user_logged_in() - example from codex page: if ( is_user_logged_in() ) { echo 'Welcome, registered user!'; } else { echo 'Welcome, visitor!'; }


Although this was mean to block the whole page, it can be used to block just parts of a page. <?php if (post_password_required()):?> <!-- Content that's not public --> <?php endif;?> Then you just need to password protect that page. In order for this to work properly, it would be ideal for this page to have it's own template or to have ...


sanitizing have nothing to do with escaping, and escaping is not a cure to everything. The role of escaping is to convert a string to a proper HTML. What is a proper HTML representation of a string might depend upon the context and that is the reason you have several escaping functions esc_htl,esc_url and esc_attr. Unlike escaping which have to preserve ...


we have "get_permalink" and "the_permalink" functions in wordpress. "get_permalink" function Returns the permalink to a post or page for use in PHP, and "the_permalink" function Displays the URL for the permalink to the post currently being processed in The Loop! if you look up at the file where these functions are defined you can see that get_permalink ...

Top 50 recent answers are included