Hardening Questions
-
I have questions regarding Hardening settings, so I can understand it in a way that makes sense.
What do the following mean, in a way where I can explain it to a 8 year-old:Hardening
User registration is restricted
File editing is disabled
Code execution is restricted
Browsing directories is blocked
User enumeration is restricted
Username ‘Admin’ is not allowed
Debug log not publicly accessible
Viewing 1 replies (of 1 total)
-
Hi @maxpatrick285,
General overview of hardening features: https://really-simple-ssl.com/definition/what-are-hardening-features/
- Really Simple SSL can restrict user registrations if the Login and Display name are the same, this poses a risk as the login name would be visible to everyone: https://really-simple-ssl.com/manual/login-and-display-names-should-be-different-for-wordpress/
- This option disables the built-in file editors (Plugin/Theme File Editor) in WordPress.
- This options prevents (PHP) code execution in the public ‘Uploads’ folder, so that any uploaded files in this folder that could potentially contain malicious code, won’t be able to run.
- This option prevents “directory browsing”. Your server may show all of the available files and folders in a requested directory. Malicious actors can use directory browsing to see the files that make up your website, including the themes and plugins that you’re using.
This article covers the last three items: https://really-simple-ssl.com/instructions/about-hardening-features/
Kind regards, Jarno
Viewing 1 replies (of 1 total)
- The topic ‘Hardening Questions’ is closed to new replies.
