PozHonks
Forum Replies Created
-
Forum: Fixing WordPress
In reply to: Any way to secure wp-admin?I forgot also, all files must have permissions set to 644 (not 666) and folders to 755 (not 777). Check this with your FTP software.
To complete your list of bad search engines (from spammers or hackers), you can go to this page (in french), cut and paste the code to a .htaccess file. More than 300 “bad” bots are listed.
https://www.toulouse-renaissance.net/c_outils/c_code_htaccess.htmBut, most ot them pretends to be a normal web browser. The WP plug-in “Bad Behavior” can stop them. https://www.ioerror.us/software/bad-behavior/
Forum: Fixing WordPress
In reply to: Any way to secure wp-admin?No, a good password is the best (no word or combination of words found in a dictionnary).
Use different passwords for your FTP, SQL and WordPress account. Avoid to simplify the hacker’s work.
wp-admin is really secured. For every action, it checks all the time if you are logged-in. However, an insecured plug-in may create a hole. So, use and activate only very useful and well-known up-to-date plug-ins.
To prevent hackers from finding me, I try to force google, yahoo and other search engine spiders not to index some wordpress files and folders. Type in Google “wp-login.php”, and see how many websites are available for login! And hackers will try that list first.
So, to prevent this, create a robots.txt file in the root folder, and put the following:User-agent: * # focusing on all spiders
Disallow: /cgi-bin/
Disallow: /feed/
Disallow: /wp-content/
Disallow: /wp-includes/
Disallow: /wp-admin/
Disallow: /xmlrpc.php
Disallow: /wp-trackback.php
Disallow: /wp-settings.php
Disallow: /wp-rss2.php
Disallow: /wp-rss.php
Disallow: /wp-register.php
Disallow: /wp-rdf.php
Disallow: /wp-mail.php
Disallow: /wp-pass.php
Disallow: /wp-login.php
Disallow: /wp-links-opml.php
Disallow: /wp-feed.php
Disallow: /wp-config.php
Disallow: /wp-commentsrss2.php
Disallow: /wp-comments-post.php
Disallow: /wp-blog-header.php
Disallow: /wp-atom.phpSome may say it is worthless (i don’t think so), but it does no harm.
In the .htaccess file, you can also put the following:<Files .htaccess>
order allow,deny
deny from all
</Files>
<Files ~ “^(index|default)\.(htm|html|shtm|shtml|asp|cgi|pl|php3|php4|php5|phtm|phtml|jsp)$”>
order allow,deny
deny from all
</Files>
ErrorDocument 403 http: / /www .yourdomain/
ErrorDocument 404 http :/ /www .yourdomain/
DirectoryIndex index.php
Options -Indexes
Options +FollowSymlinksThis is different, it forces the server to avoid displaying any index files but index.php (the good one). If, by any means, a hacker put an “index.htm” file, your web server may serve this file first (without doing any harm to wordpress). It will prevent this behaviour. Tested and approved by myself!
Forum: Fixing WordPress
In reply to: Restoring Hacked SiteThe hacked file is an index.html file. If there is an index.html and an index.php file at the same place, the server may serve the html file first. When, I type:
mariaangeline.com/index.php , I got your WP site. When I type:
mariaangeline.com/index.html, I got the hacked page.I guess the hacker got your FTP password. Change it. Or, do you have a script somewhere that allows to upload, create files online? Or, maybe the hacker put this script somewhere on your site.
Have you removed the .htaccess file? (there may be a backdoor there).
Is your password a dictionnary word or a combination of 2 words that can be found in a dictionnary? Invent a long password (10-12 characters) with numbers in it.
Blaming WordPress? How many security alerts with WP? Quite a few, and quickly fixed. This cheap talking is very easy for people who try to hide their ignorances. Maybe you can blame your provider for not securing its servers enough?
Forum: Fixing WordPress
In reply to: WordPress LocationThis guide is your friend, but use it wisely.
https://www.tamba2.org.uk/wordpress/site-url/Forum: Fixing WordPress
In reply to: index.php, (and all pages) not displaying liveYou made a big misconfiguration. When, I tried to go here:
jamesvandellen.com/wp-admin/There is a password window, not the one expected from WP, not showing the wp-login.php file.
Erase your WP folder and re-install it without changing any rights. You did something bad with the chmod command and WordPress cannot access his files.
Forum: Fixing WordPress
In reply to: Scared to drop tables!!If you want more control, and if you have around 150 posts, you can simply cut and paste from one blog to another. Then, do not forget to give the right category and to change the time stamp of each post for the time they have been posted.
It tooks me 4 hours, but at the end, I was sure of the result.Or, go to one blog, on WP-admin, go to Options -> Reading, on Syndacation feeds, put the numbers of posts you have (i.e. 150), check the “full text” button. Then use a RSS reader software, save the RSS feed in a text file, go to WP admin, -> import ->impost RSS, and select the saved file. It should be OK.
Forum: Fixing WordPress
In reply to: Local charset?You don’t do it. You have to stick with one charset. It is *impossible* to mix 2 charsets in the same page (or the browser will be lost), and WP only accepts one single charset.
Forum: Themes and Templates
In reply to: how do I force one font and size (in the content) – but withStop using Word. It is the worst software to work with internet files. Use any other word processor (OpenOffice, Abiword, notepad). Word is the problem, not the solution.
Forum: Fixing WordPress
In reply to: Authors – can their posts be moderated?Create a new user, just to play with. In the admin area, Users tab, Authors and Users sub-tab, give it a role of either contributor, author or editor. Then, log in with this “fake” user and see what its administration area looks like. You will see what they are allowed to do.
If you want to moderate, they cannot be higher than contributors.Forum: Themes and Templates
In reply to: No Content bg color in Safari and KonquerorIn your css file, try to remove the useless and empty url(”) when you set a background.
I guess Safari is looking first for the background color, then to a background file. As it is empty, perhaps, it invalidated the whole background definition.Forum: Fixing WordPress
In reply to: Can’t login to WP to update my blogUsually, you are logged in as “admin” by default, then, put your password. If you changed it, nobody can help you. Sorry
Forum: Themes and Templates
In reply to: Line height difference in IE and FF 1.5 ?Welcome to IE standard against the world.
To override this, in your css file, you can specify a command only for IE. For example:
width:40px; (this is for everybody)
_width:20px; (this is for IE only, IE will know it has to override the first command and use this one instead)This trick is working on almost every stylesheet definitions.
Forum: Themes and Templates
In reply to: SidebarIn you style.css file, there is the #sidebar definition. Try to remove the line
margin-left: -20px;
If it is not enough, try to change (increase) the witdh to the sidebar, say
width: 280px; (instead of width: 220px;).Hope this help.
Forum: Themes and Templates
In reply to: Blix theme questionsIE PC is totally different, more updated. Blix looks good with IE PC.
However, I don’t like Blix colours (too bright, not enough contrast), fonts too small. You have to change the CSS file for that: layout.css is about the “layout”, size, position, and spring_flavour.css is about colours.
Forum: Themes and Templates
In reply to: Blix theme questions1. Yes
2. Who is using IE on Mac? Abandoned by microsoft for 2 years, no significat upgrade for 4 years. Doesn’t know anything about today’s web standard (CCS2, XHTML, JAVA 2, etc.). IE Mac is dead for long.
3. work on the CSS files or see other themes here:
https://themes.wordpress.net/