Forum Replies Created

Viewing 15 replies - 196 through 210 (of 210 total)
  • I forgot also, all files must have permissions set to 644 (not 666) and folders to 755 (not 777). Check this with your FTP software.

    To complete your list of bad search engines (from spammers or hackers), you can go to this page (in french), cut and paste the code to a .htaccess file. More than 300 “bad” bots are listed.
    https://www.toulouse-renaissance.net/c_outils/c_code_htaccess.htm

    But, most ot them pretends to be a normal web browser. The WP plug-in “Bad Behavior” can stop them. https://www.ioerror.us/software/bad-behavior/

    No, a good password is the best (no word or combination of words found in a dictionnary).
    Use different passwords for your FTP, SQL and WordPress account. Avoid to simplify the hacker’s work.
    wp-admin is really secured. For every action, it checks all the time if you are logged-in. However, an insecured plug-in may create a hole. So, use and activate only very useful and well-known up-to-date plug-ins.
    To prevent hackers from finding me, I try to force google, yahoo and other search engine spiders not to index some wordpress files and folders. Type in Google “wp-login.php”, and see how many websites are available for login! And hackers will try that list first.
    So, to prevent this, create a robots.txt file in the root folder, and put the following:

    User-agent: * # focusing on all spiders
    Disallow: /cgi-bin/
    Disallow: /feed/
    Disallow: /wp-content/
    Disallow: /wp-includes/
    Disallow: /wp-admin/
    Disallow: /xmlrpc.php
    Disallow: /wp-trackback.php
    Disallow: /wp-settings.php
    Disallow: /wp-rss2.php
    Disallow: /wp-rss.php
    Disallow: /wp-register.php
    Disallow: /wp-rdf.php
    Disallow: /wp-mail.php
    Disallow: /wp-pass.php
    Disallow: /wp-login.php
    Disallow: /wp-links-opml.php
    Disallow: /wp-feed.php
    Disallow: /wp-config.php
    Disallow: /wp-commentsrss2.php
    Disallow: /wp-comments-post.php
    Disallow: /wp-blog-header.php
    Disallow: /wp-atom.php

    Some may say it is worthless (i don’t think so), but it does no harm.
    In the .htaccess file, you can also put the following:

    <Files .htaccess>
    order allow,deny
    deny from all
    </Files>
    <Files ~ “^(index|default)\.(htm|html|shtm|shtml|asp|cgi|pl|php3|php4|php5|phtm|phtml|jsp)$”>
    order allow,deny
    deny from all
    </Files>
    ErrorDocument 403 http: / /www .yourdomain/
    ErrorDocument 404 http :/ /www .yourdomain/
    DirectoryIndex index.php
    Options -Indexes
    Options +FollowSymlinks

    This is different, it forces the server to avoid displaying any index files but index.php (the good one). If, by any means, a hacker put an “index.htm” file, your web server may serve this file first (without doing any harm to wordpress). It will prevent this behaviour. Tested and approved by myself!

    The hacked file is an index.html file. If there is an index.html and an index.php file at the same place, the server may serve the html file first. When, I type:
    mariaangeline.com/index.php , I got your WP site. When I type:
    mariaangeline.com/index.html, I got the hacked page.

    I guess the hacker got your FTP password. Change it. Or, do you have a script somewhere that allows to upload, create files online? Or, maybe the hacker put this script somewhere on your site.

    Have you removed the .htaccess file? (there may be a backdoor there).

    Is your password a dictionnary word or a combination of 2 words that can be found in a dictionnary? Invent a long password (10-12 characters) with numbers in it.

    Blaming WordPress? How many security alerts with WP? Quite a few, and quickly fixed. This cheap talking is very easy for people who try to hide their ignorances. Maybe you can blame your provider for not securing its servers enough?

    Forum: Fixing WordPress
    In reply to: WordPress Location

    This guide is your friend, but use it wisely.
    https://www.tamba2.org.uk/wordpress/site-url/

    You made a big misconfiguration. When, I tried to go here:
    jamesvandellen.com/wp-admin/

    There is a password window, not the one expected from WP, not showing the wp-login.php file.

    Erase your WP folder and re-install it without changing any rights. You did something bad with the chmod command and WordPress cannot access his files.

    If you want more control, and if you have around 150 posts, you can simply cut and paste from one blog to another. Then, do not forget to give the right category and to change the time stamp of each post for the time they have been posted.
    It tooks me 4 hours, but at the end, I was sure of the result.

    Or, go to one blog, on WP-admin, go to Options -> Reading, on Syndacation feeds, put the numbers of posts you have (i.e. 150), check the “full text” button. Then use a RSS reader software, save the RSS feed in a text file, go to WP admin, -> import ->impost RSS, and select the saved file. It should be OK.

    Forum: Fixing WordPress
    In reply to: Local charset?

    You don’t do it. You have to stick with one charset. It is *impossible* to mix 2 charsets in the same page (or the browser will be lost), and WP only accepts one single charset.

    Stop using Word. It is the worst software to work with internet files. Use any other word processor (OpenOffice, Abiword, notepad). Word is the problem, not the solution.

    Create a new user, just to play with. In the admin area, Users tab, Authors and Users sub-tab, give it a role of either contributor, author or editor. Then, log in with this “fake” user and see what its administration area looks like. You will see what they are allowed to do.
    If you want to moderate, they cannot be higher than contributors.

    In your css file, try to remove the useless and empty url(”) when you set a background.
    I guess Safari is looking first for the background color, then to a background file. As it is empty, perhaps, it invalidated the whole background definition.

    Usually, you are logged in as “admin” by default, then, put your password. If you changed it, nobody can help you. Sorry

    Welcome to IE standard against the world.
    To override this, in your css file, you can specify a command only for IE. For example:
    width:40px; (this is for everybody)
    _width:20px; (this is for IE only, IE will know it has to override the first command and use this one instead)

    This trick is working on almost every stylesheet definitions.

    Forum: Themes and Templates
    In reply to: Sidebar

    In you style.css file, there is the #sidebar definition. Try to remove the line
    margin-left: -20px;
    If it is not enough, try to change (increase) the witdh to the sidebar, say
    width: 280px; (instead of width: 220px;).

    Hope this help.

    IE PC is totally different, more updated. Blix looks good with IE PC.

    However, I don’t like Blix colours (too bright, not enough contrast), fonts too small. You have to change the CSS file for that: layout.css is about the “layout”, size, position, and spring_flavour.css is about colours.

    1. Yes
    2. Who is using IE on Mac? Abandoned by microsoft for 2 years, no significat upgrade for 4 years. Doesn’t know anything about today’s web standard (CCS2, XHTML, JAVA 2, etc.). IE Mac is dead for long.
    3. work on the CSS files or see other themes here:
    https://themes.wordpress.net/

Viewing 15 replies - 196 through 210 (of 210 total)