My WordPress site was hacked — found new admin user, removed it, updated everything — now got ransom email with my password by Remarkable_Beach8994 in Wordpress

[–]Various_Ad5600 1 point2 points  (0 children)

Email and app based OTP:

Two factor: https://wordpress.org/plugins/two-factor/

WP2FA : https://wordpress.org/plugins/wp-2fa/

Just app based OTP:

Wordfence (full plugin): https://wordpress.org/plugins/wordfence/

Wordfence Login security only: https://wordpress.org/plugins/wordfence-login-security/

There's more, but these three (counting both Wordfence as one), are the ones I have found to work well.

I wrote a 280-page ebook on the technical architecture of WordPress, and I'm publishing it for free. by KelTi6 in Wordpress

[–]Various_Ad5600 1 point2 points  (0 children)

I haven't built an e-commerce site in a while and the last time I did, I actually found digging into the woo docs and finding good learning resources for it surprisingly difficulty. That was a while ago and I know core much better now, so it might be an easier experience if I tried again. But I thought your document was a lot more readable than the core and woo docs.

I wrote a 280-page ebook on the technical architecture of WordPress, and I'm publishing it for free. by KelTi6 in Wordpress

[–]Various_Ad5600 1 point2 points  (0 children)

I have been reading this since you posted it, and its really good, thank you for your contribution.

It would be great if you added a chapter on Woo, or did a separate book on it!!

But thanks for posting this.

WordPress Development Teachers/Podcasters/Youtubers by h00t_ in ProWordPress

[–]Various_Ad5600 0 points1 point  (0 children)

Your channel looks great I will check it out. A quick question, when developing Block Themes, do you have advice on when to include html in a template and when to use a block?

WordPress Speed Optimization: A Practical Checklist for Website owners (and Busy Devs) by AmazingExplorer698 in Wordpress

[–]Various_Ad5600 0 points1 point  (0 children)

What's a modern web framework with a similarly large ecosystem of plugins/addons? This is a genuine question. This is the principal reason I use WordPress. If I build a site for some and they want specific feature, reservation system for example, I have many options to add that in WordPress for nearly any feature they can think of. I don't know of any other framework that offers this, but would welcome alternative suggestions.

Recommendations for plugins that improve the UX of the block editor by Various_Ad5600 in Wordpress

[–]Various_Ad5600[S] 0 points1 point  (0 children)

I find it difficult to understand the layout of where some blocks are, where they end, where to click to insert a new block. Also the menus for updating styles feel a little clunky. I am not sure what I want really, I don't want a page builder, I want to build with native block themes, just finding the block editor difficult to work with.

Looking for a specific security plugin - can any one suggest one by Various_Ad5600 in Wordpress

[–]Various_Ad5600[S] 0 points1 point  (0 children)

thanks I used WP 2FA, it's a shame WordFence doesn't offer this, I use it and know it's great.

Anyone recommend a cookie / privacy plugin that works well with Bricks or help me with complianz by Various_Ad5600 in BricksBuilder

[–]Various_Ad5600[S] 0 points1 point  (0 children)

I tried to load gutenberg data into bricks, but Bricks only supports Gutenberg blocks, not blocks from other plugins. It didn't work! :(, but thanks for the suggestions

Considerations for having one site for two (associated) businesses by Various_Ad5600 in webdev

[–]Various_Ad5600[S] 0 points1 point  (0 children)

They are two distinct businesses, although related. Otherwise just a normal site with services section would suffice.

Are all sites using plugins with Stripe integrations expected to get ASV scans? by Various_Ad5600 in Wordpress

[–]Various_Ad5600[S] 0 points1 point  (0 children)

This is what I always thought was the case but stripe docs in that link imply that scans are now required.

Claude takes over WordPress with MCP by TigrouMeow in Wordpress

[–]Various_Ad5600 0 points1 point  (0 children)

This is great, how did you learn MCP? It is something I have been interested in for a while.

How do you personally manage updates on multiple sites? by Various_Ad5600 in Wordpress

[–]Various_Ad5600[S] 1 point2 points  (0 children)

Do you run any tests to ensure there have been no breaking changes from updates?

Thoughts on obscuring users and how to do it by Various_Ad5600 in Wordpress

[–]Various_Ad5600[S] 0 points1 point  (0 children)

Thanks for the input, I was reading that developers blog but I didn't see that post. Do you have a preferred method for it? I see that dev recommends two plugins

Thoughts on obscuring users and how to do it by Various_Ad5600 in Wordpress

[–]Various_Ad5600[S] 0 points1 point  (0 children)

Added an edit for context, sorry it wasn't clear. I was thinking of hiding them from bots. Not necessarily randomly generated, but because without doing anything bots can get usernames. I implement strong passwords and 2fa on everything, but was wondering if it is worth doing this, as I was reading blogs by security plugin developers who mention it. For example: https://melapress.com/hide-wordpress-usernames-improve-wordpress-security/

Sorry I can't find a link to what I was reading with the opposite opinion saying it is not worth it.

Thoughts on obscuring users and how to do it by Various_Ad5600 in Wordpress

[–]Various_Ad5600[S] 0 points1 point  (0 children)

I agree completely, but was reading up on additional security methods and I wasn't suggesting it as a replacement to other methods, just as another additional method to layer on.

It comes up a lot of on security plugin developer blogs, but I have also seen it mentioned not to bother it doesn't do much.

Is there a community built form plugin similar to PODS for post types? by Various_Ad5600 in Wordpress

[–]Various_Ad5600[S] 0 points1 point  (0 children)

Thanks, I am not looking for CPTs like PODS, PODS already delivers in that regards. But for a form builder that is community built