261 reputation
317
bio website mygemologist.com
location
age 27
visits member for 3 years, 8 months
seen May 27 at 20:15

I'm a small business web designer and marketer. I do a little of everything, and I'm always interested in learning new techniques and technologies.


Aug
20
awarded  Notable Question
Aug
14
accepted Best Way to Enable Two Step Authentication
Aug
14
revised Best Way to Enable Two Step Authentication
Fixed typo and explained my solution
Aug
14
comment Best Way to Enable Two Step Authentication
I've seen a couple examples where the second factor is given on a second page after the initial authentication. I prefer that UX, but if you do that, I think you pretty much have to use your own authentication cookies (or server side sessions) which, as you say, is not for the faint of heart.
Aug
14
comment Best Way to Enable Two Step Authentication
Thanks for the ideas. Those are really interesting. I'm using HTTP Digest authentication for some extra security on the admin area already, so that's good. I wonder if emailing the password would create another issue though. From what I understand, email isn't the most secure means of communication.
Aug
14
comment Best Way to Enable Two Step Authentication
Thanks. That's good advise. I really like that plugin, but I would also like to avoid an extra fields on the login form. Although, I can't really see a way around that.
Aug
14
asked Best Way to Enable Two Step Authentication
Aug
13
comment Selectively Disabling PHP via .htaccess in Root Directory
@Wyck, thanks for the input. Could you maybe explain why it wouldn't make any sense?
Aug
13
comment Selectively Disabling PHP via .htaccess in Root Directory
Maybe I'm missing something, but as I understand it, the root dir .htaccess will disallow direct access to any PHP file except index.php. This will cascade into subdirectories, so you override it with the .htaccess in wp-admin to allow the admin panel to work normally. It's basically an extension of the practices described here and here.
Aug
13
comment Selectively Disabling PHP via .htaccess in Root Directory
Won't the allow from all directive in the wp-admin .htaccess allow the admin area to work?
Aug
12
asked Selectively Disabling PHP via .htaccess in Root Directory
Jul
17
comment Security and Must Use Plugins
Thanks for the explanation. Of course, simply uploading a file doesn't guarantee the web server will execute it in the WP environment where you can access $wpdb, but, as you say, replacing functions.php or a core file would easily accomplish that.
Jul
17
accepted Security and Must Use Plugins
Jul
17
asked Security and Must Use Plugins
Jul
10
comment Using search.php without a 's' field in searchform.php
I can understand not wanting it in your code if it's not needed, but realize there's also nothing to stop people from entering yoursite.com?s=my+search directly which will accomplish the same thing as modifying a form input using dev tools.
Jul
8
comment Using search.php without a 's' field in searchform.php
Could you just make the s field <input type="hidden" />?
Jul
8
comment Using search.php without a 's' field in searchform.php
You probably mean name="s" right? I don't think the id attribute matters in the $_POST super global.
Jul
8
comment Show a widget as a sidebar fallback
the_widget() was definitely what I needed. Thanks for suggesting it.
Jul
8
comment Show a widget as a sidebar fallback
the_widget() works perfectly. I never knew about that function. Thanks.
Jul
8
accepted Show a widget as a sidebar fallback