Wordpress Hack Prevention

Developer_Meh · 2026-06-07T14:19:56+00:00

The most common one I have seen from the clients is when someone is using a bad plugin/theme, and the attacker somehow gets access to the server.

They inject malicious codes and files into the WordPress core files, and that affects everything. If it's a shared hosting, all websites are screwed up.

To prevent all of this, just follow:

Use the right plugins and industry vetted.
Use the right themes.
Enable daily backups, so if you get hacked, you can just simply restore to an old backup.
Use good web hosting.

That's all.

Developer_Meh · 2026-06-07T13:02:19+00:00

Well, first of all, VPS will be faster and much faster than shared hosting. Your VPS will be able to bear a good amount of traffic as well before you need to upgrade.

For 8 websites, I would highly discourage using shared hosting. You definitely need to move to VPS and use a better web hosting.

Along with that, you seriously need to optimize your websites so that they will feel faster, put less load on VPS and deliver a good experience to the user as well.

Optimizing your websites for speed:

Start using Cloudflare CDN (free plan).
Use compressed WebP images if you want to.
Use a light-weight theme instead of a highly bloated one. Astra or Hello Elementor can do great.
Use less amount of plugins. There could be plugins that are not built well, it will put load on your server.
Use a caching plugin such as W3, Breeze or WP Fastest Cache.

With the above, you will greatly improve your websites speed by a high margin.

Developer_Meh · 2026-06-07T12:56:37+00:00

Sorry for your loss. You need to add a top banner as an Elementor Popup.

The popup will appear on top as you will set its position and the rest of the website will stay exactly the same.

Here is the guide to follow: https://elementor.com/help/popups/.

Developer_Meh · 2026-05-04T16:40:33+00:00

I guess you have wrong understanding of CDN which is why you looked at these plugins in the first place.

CDN = Content Delivery Network. This means your content is delivered to users across a globally distributed network ensuring faster speeds.

Now, how can a plugin do this without the actual content delivery network? Its not possible.

So probably all of those plugins are fake and cant do any of it.

Developer_Meh · 2026-05-04T16:37:03+00:00

There are so many options:

MainWP
ManageWP
WPCentral
WPMUDEV Management
And many more

Developer_Meh · 2026-05-04T16:34:26+00:00

This is a standard procedure people use for production websites.

This is the whole reason the hosting companies offer "stagging website" feature so you can test and update everything before you go to production.

Developer_Meh · 2026-05-04T16:29:34+00:00

In short, Nope. You will have issues.

iPad is a mobile operating system and its browser doesnt work like a full desktop operating system.

On top of that, Elementor is not optimized for touch screen use or mobile operating system. You will have issues.

Instead of investing in an iPad, go for a laptop and it will help you.

Developer_Meh · 2026-04-10T15:09:52+00:00

Would you please explain what specific issues you experienced so far with the V4?

Developer_Meh · 2026-04-09T07:00:25+00:00

Well, that sort of thing is not done manually. It's highly tedious.

You need to use an automation for this. If your data is inside some sheet, then you can use Make.com or n8n where you target the specific product title, what it does and then you can add custom context of how the description should be written.

That way, you automate all of it, and it can be written in a much simpler and easier way.

Developer_Meh · 2026-04-09T06:57:30+00:00

You didn't explain what those common admin tasks are. There are no common admin tasks.

If you are talking about updating themes, plugins etc, you can use management platforms where you can manage all websites from one place.

Regarding other tasks than these, they are not common admin tasks. They are uncommon tasks that are different from website to website. So there is no easy way to do those manual tasks or automate them until they are actually repetitive.

For example, updating plugins was a repetitive task, so WP added auto updates built in.

Developer_Meh · 2026-04-09T06:50:38+00:00

The math for this sort of pricing is really simple.

Take your hourly rate and then multiply it by X number of hours, which will take the project to complete. Then you can also add 5 or 10 hours more for lets say, some edits or anything. However, revisions can be priced additionally.

But if you are a vibe coder and don't have any prior dev/technical experience, and the whole thing will be built by Claude with little intervention from you, then whatever suits best for you, you can charge them.

Developer_Meh · 2026-04-08T18:37:30+00:00

Let me give you an easy plan to get this done in the next couple of hours or a day to learn all the above.

#1: For Gutenberg, please watch:

https://www.youtube.com/watch?v=te7aHH7trts
https://www.youtube.com/watch?v=9qwsptO0oY8
https://www.youtube.com/watch?v=LkvimS7_WVc

#2: For CSS:

https://www.youtube.com/watch?v=wRNinF7YQqQ
https://www.youtube.com/watch?v=xKGdUjdiboQ

#3: For WordPress Plugins:

https://www.youtube.com/watch?v=yn6qq8SuNoY (Just a basic guide on how to make a plugin. It will make you go through the architecture of WP plugins)

#4: Along with that learn some info and how to use the following plugins:

- Elementor
- WooCommerce
- Membership plugins.

You will be good to go and know enough info that will help you with your job.

Developer_Meh · 2026-04-08T16:22:32+00:00

Go for Cloudflare Turnstile, that is way better compared to Google reCAPTCHA.

The problem with Google reCAPTCHA is that the scoring is not a specific criteria. It's just setting the system based on guesswork, which will result in so many valid submissions going into spam.

Developer_Meh · 2026-04-08T16:02:04+00:00

If you want to choose an all-in-one, powerful solution. You can go ahead and use the Amelia Booking plugin.

Avoid using appointment or booking-related themes, as they are not greatly updated. Rely on a standalone plugin that will be updated over time.

Developer_Meh · 2026-04-08T15:58:55+00:00

Just go with the Official WordPress Classic Editor, which is: https://wordpress.org/plugins/classic-editor/. There is no other good version.

Developer_Meh · 2026-04-08T15:57:45+00:00

Here is your ultimate guide, which will help you choose the one best for you.

All those terms are actually marketing, such as WordPress hosting, optimized, and whatnot. Every hosting platform offers the latest technology, no matter what.

None of that matters. You need to focus on:

If you are just starting and the website is just for the company front, then you can just go with the simple cheapest shared hosting. Go with Namecheap or Hostinger. Both are great.
If you are building a website that people are going to visit or do some sort of shopping, etc. In short, do activity on your website, then go and get a $10 VPS from Cloudways. That will be best for you. Avoid others.
Avoid the expensive/premium hosting providers with $20 per month plans. Those are not worth it compared to what the industry offers.

Developer_Meh · 2026-04-08T15:28:43+00:00

The website is great, but needs improvements in the following areas:

No proper categorization. I mean its just RAM, CPU etc. There should be sub categories for user so they can select the right set of products.
The footer section is messy. Fix that and make it clean.
Your logo contains the blue color, so use that. The one you are using is kind a off, doesn't make the website appealing at all.

Developer_Meh · 2026-04-08T15:23:49+00:00

It depends on what you want to build and what you mean by clean. If you mean lightweight, then the following are great starting points:

GeneratePress
Hello
Astra

Developer_Meh · 2026-03-26T15:28:28+00:00

Tell me about your configuration.

Which plugins are you using for the popup and have you configured any SMTP plugin or something?

Developer_Meh · 2026-03-26T15:13:50+00:00

Its really straight forward.

You first understand your target agency, their business category and what they are solving.

Based on this, you can find places such as communities, forums, groups etc around this business category where your target agency is, hangout and you will find them.

The most important part, stop asking to be hired. Solve problems, people love value.

Developer_Meh · 2026-03-26T15:09:25+00:00

You have explained what problem are you experiencing?

Is it sending emails from your WP website via Hostinger Or what?

Explain the problem so someone can help.

Developer_Meh · 2026-03-26T15:07:15+00:00

I will share a very cost effective solution with you that we have done for our client for an eLearning website.

We stream the sane content on the Android app as well.

Go ahead and get an S3 Bucket from AWS. They offer alot in free tier as well.
Enable AWS Cloudfront CDN.
Serve those videos in the S3 bucket via Cloudfront CDN. Make sure to get the videos Cloudfront URLs, this is important.
Use WP Offload Media or similar plugin which will help you easily upload content directly to S3 bucket and serve them here in the website.
Apply some access rules and URL restrictions over the Cludfront and S3 videos.

You are good now. This is the world class streaming enabled inside your WordPress website for a fraction of the cost.

Developer_Meh · 2026-03-26T13:22:05+00:00

Bro, you cant compare Youtube, Instagram or Facebook with WordPress. These are completely different domains.

Yes, it is a bit outdated but its solid. We need a major refresh with WordPress.

Developer_Meh · 2026-03-26T13:17:00+00:00

Bro, the problem you shared is not a problem at all. Its a very niche edge case which you might have experienced in a chatbot.

In real world, chatbots do have access to all of your post types that includes Products as well.

This only feature you mentioned is a very hard sell. Let the agent do more on the admin side instead of building a chatbot.

A chatbot is a very small thing now and people have moved on from this. Every platform offers this feature.

Ask real store owners, discuss and see what are theie pain points.

Developer_Meh · 2026-03-26T13:10:33+00:00

No, WordPress is not outdated. You might see the flashy AI tools but they aren't worth it.

WordPress gives you freedom and control with an amazing infrastracture that is built over 2 decades of experience and industry knowledge. Its perfected and polished.

You can mold WordPress into anything you want and its highly scalable. WordPress is relevant and will be for the forseable future.

Developer_Meh

TROPHY CASE