99% of WordPress users are already aware of a number of security tips, including: But in this guide, I’ll go over a few other, lesser-known techniques that can help keep hackers out of your WordPress website. Not just hide – disable wp-admin ❌ Security by obscurity is nothing more than a house of cards. – … Read full article →
AJAX enables tasks such as fetching, inserting and deleting records from a MySQL database, as well as file uploading. AJAX sent URL should be admin-ajax.php. wp_ajax action hooks. Here are well-explained tutorials from Yogesh Singh on how to send AJAX requests from a WordPress theme and a WordPress plugin:
WordPress uses the wp_commentmeta and wp_comments tables to store comments and their data. To delete all comments in WordPress simply empty those tables in the database: To delete all spam comments use: To delete all unapproved comments use: NOTE: In the above commands change wp_ prefix with the table prefix that you are using *(view … Read full article →
MonsterInsights Error: The firewall of your server is blocking outbound calls. Please contact your hosting provider to fix this issue. cURL error 28: Failed to connect to www.google.com port 443 after 1201 ms: Couldn’t connect to server This error is caused by cURL (Client for URLs) – a command line tool that is used to … Read full article →
Magic Quotes is a PHP function where strings are automatically escaped (special characters are prefixed with a backslash) before being passed. This is considered a bad practice and as of PHP 7.4, they are deprecated. This article by Sebastian Bergmann explains in detail Why Magic Quotes are gone in PHP 7 WordPress doesn’t use magic … Read full article →
By default .css and .js files used in WordPress themes and plugins will add a version number using ?ver= To disable this add the following inside your theme functions.php file or as a new plugin:
I have a WordPress blog on pcelarstvopejcic.com/blog and a few pages that I would like to move to the domain document root, so that: pcelarstvopejcic.com/blog/contact becomes pcelarstvopejcic.com/contact pcelarstvopejcic.com/blog/shop becomes pcelarstvopejcic.com/shop So this way I only have one WP installation and blog posts would be accessible via pcelarstvopejcic.com/blog/POST and pages in pcelarstvopejcic.com/PAGE To do this, edit … Read full article →
Figuring out templates that are being used while you are building and developing a custom WordPress website can be problematic. Using the following snippets you can quickly and easily display template name or full path to the file in your wp-admin bar. Display Template name To display just template name add the following to functions.php … Read full article →
Useful WP-CLI commands that I use when cleaning hacked WordPress websites in order to reinstall WP core, all themes, and plugins from WordPress.org
DO_NOT_UPGRADE_GLOBAL_TABLES is a WordPress constant that can be added to the wp-config.php file in order to avoid the upgrade functions from doing expensive queries against global tables. To enable it, simply add the following to your wp-config.php file: WordPress websites that use bbPress have large users and usermeta tables. When upgrades are running, ALTER, DELETE … Read full article →