Mark
Forum Replies Created
-
Forum: Plugins
In reply to: Disable search functionalityCreate a pluging that empties the ‘s’ variable for URLs and forms – 3 possible places. Something like this:
<?php Plugin Name: Disable Search Plugin URI: http://wpsecurity.net Description: This disables the search feature of WordPress. Author: Mark Version: 1.0 Author URI: http://wpsecurity.net */ $_GET['s']=''; $_POST['s']=''; $_REQUEST['s']=''; ?>Copy that to a file in your plugins dir (maybe a filename like disablesearch.php), activate the plugin, and then try to do a search manually for a word you know exists in your site, then see if the search returns nothing. Example search URL:
Forum: Fixing WordPress
In reply to: Place login in page headingOne way is to load your regular WP login page in a browser (e.g. somesitename.com/wp-login.php, view the HMTL source of the page, copy the HTML form portion, paste that into your theme where you want it, then adjust the style and layout to meet your needs.
If you can’t do that then consider joining the WP-Pro mailing list and post a message to hire someone to do it for you.
Forum: Plugins
In reply to: WordPress functions aren’t being recognised by scriptSounds to me like the wp-config or wp-load files aren’t actually being loaded properly and your site might be set to not show PHP errors so you’re not seeing the error. Or you might not see the error because it’s being generated in the background and it’s not being passed back to frontend code that could display the error.
Double check the path to the file that you define. You either have to make it the full path (e.g. something like /home/myusername/blog/wp-config.php) or a relative path (e.g. ../../../wp-config.php)
Forum: Fixing WordPress
In reply to: How do I put a text box in a page (WP2.7)Edit the HTML of the page and add a <textarea> or <input type=”text”…> form field – that’s one way to handle it.
Forum: Themes and Templates
In reply to: Simple?! Custom Variable in a TemplateLook at how Kubrick handles putting a menu item on the screen to navigate to the theme header settings page, how it puts a form on the screen and stores the values when the form is submitted. It’s pretty straight forward to do that sort of thing – assuming that you’re familiar with HTML forms, PHP, storing values in the WP database, etc.
You might want to tell us what theme you’re trying to work with? Or it is your own custom theme?
Either way the easiest approach is to copy something that works and modify it for your own needs.
Forum: Plugins
In reply to: How to use archives.php as an index?One way would be to make sure archives.php is a page template (e.g. has the appropriate Template: tag in the top of the file somewhere), then make a page in WP, select the page template to be your archives template, then configure WP to use a static home page and set the static home page to be the page you created. That’s it in a nutshell.
Forum: Fixing WordPress
In reply to: Firewall Scripts – To Stop HackersThe firewall looks interesting – I’ll definitely check into that, I hadn’t heard of it before now. Check this out too though:
Maximum Security for WordPress – it helps keep WordPress secure by blocking SQL injection, XSS attacks, locking down user accounts, removing sensitive info from a site, also includes firewall and intrusion prevention system, and a lot more.Forum: Plugins
In reply to: [Plugin: WP Wall] Possible exploitYou probably shouldn’t set it below 45. This really depends on how much traffic your site is getting. If you’ve got 100 people sitting there on your site and WP Wall is refreshing every 45 seconds then that’s 100 hits on the server ever 45 seconds – quite a lot for a shared hosting account. Were it me, I’d disable the refresh feature and maybe add a note that people should refresh the page to get updates. Or maybe I’d change hosting companies.
Forum: Fixing WordPress
In reply to: Security issue, multiple sitesYou can report security issues at
http://ww.wp.xz.cn/about/contact/
or via email to:
security [at] ww.wp.xz.cn
Also note that Maximum Security for WordPress helps keep WordPress secure – it helps stop cross-site scripting (XSS) attacks, helps lock down user accounts, and a lot more.
Forum: Fixing WordPress
In reply to: Security plugin: need some help please.Answer to Q1: You’ll need to either use FTP or your Web control panel at your hosting company to change file permissions. In particular, you need to enable write access to the wp-config.php file which is located in the directory where you installed WordPress.
If you use FTP then read the help file that comes with your FTP software (assuming it has some help built in) or if your hosting company uses cPanel for managing your site then go to File Manager in cPanel, open your site’s directory, find wp-config.php, and adjust permissions. In some versions of cPanel you have to right-click the file name and choose Permissions.
When you’ve finished changing your database prefix remove write access to wp-config.php and all other .php files in your WP root directory.
Answer to Q2: The database user that has access to your WP database might need ALTER, and/or CREATE privileges in order to change the database prefix – depending on how the plugin works (I haven’t read the code). It’s probably a good idea to limit database privileges (after you alter the table prefix) HOWEVER if you remove CREATE privileges then you will not be able to use plugins that need to create tables. So keep that in mind.To modify database permissions you’ll need to use your hosting company Web admin panel. If it’s cPanel the look in the Database section for ‘MySQL databases’. Go there, locate your database name in the list, look for the user name associated with it, and click the user name to edit the permissions. Minimally you’ll need SELECT, INSERT, UPDATE, and DELETE permissions. And if you have trouble installing or enabling plugins then you probably also need CREATE and maybe even DROP permissions.
You might also want to check into Maximum Security for WordPress to help keep WordPress secure
Forum: Everything else WordPress
In reply to: WordPress Security?You could consider Maximum Security too as way to help keep WordPress secure.