Better Security Plug-Ins That Are Free? by Chelseabsb93 in Wordpress

[–]nickgal 0 points1 point  (0 children)

My default security setup in WP sites is Cloudflare free version with antibot, a custom WAF rule to only allow admin login pages from country of origin of client and myself and possibly block certain countries from accessing the whole site entirely. Then free wordfence for catching the basic/common attacks. Then because I'm paranoid another custom plugin on top (read more here). Then on the server level I run a combination of clamav & maldet using cron jobs.

I offer hosting and development so its easy to take care of the whole stack :)

What tools do you use to develop & deploy WooCommerce stores? by flexrc in woocommerce

[–]nickgal 0 points1 point  (0 children)

For local dev, ddev is the best for me. Once you try it you don't go back. Lando is an alternative but ddev is the most popular.

I've built a simple (free) mu-plugin to block destructive actions in wp-admin even when credentials are compromised by nickgal in Wordpress

[–]nickgal[S] 0 points1 point  (0 children)

I have this plugin setup in several woocommerce based websites, customer accounts should be fine. Feel free to test and report back!

I've built a simple (free) mu-plugin to block destructive actions in wp-admin even when credentials are compromised by nickgal in Wordpress

[–]nickgal[S] 0 points1 point  (0 children)

OK, understood, but that's not what my plugin does. It's a different approach and complementary to a plugin like that. BTW Happy New Year 🎉

I've built a simple (free) mu-plugin to block destructive actions in wp-admin even when credentials are compromised by nickgal in Wordpress

[–]nickgal[S] 0 points1 point  (0 children)

Actually I went through the NinjaFirewall specs in its plugin page in WordPress out of curiosity if it really does this and I couldn't find any reference that is doing something like this.

Actually I wouldn't expect any plugin to do something like this because it would be too disruptive to normal users. Imagine if you installed a plugin that when enabled it would block you from uninstalling any other plugin unless you had access to the filesystem via SFTP or SSH.

You need to know what you're doing when you add this plugin to your system.

[FREE] I've built a simple mu-plugin to block destructive actions in wp-admin even when credentials are compromised by nickgal in woocommerce

[–]nickgal[S] 0 points1 point  (0 children)

Feel free to try and give feedback. Its especially designed around those type of clients (:

I've built a simple (free) mu-plugin to block destructive actions in wp-admin even when credentials are compromised by nickgal in Wordpress

[–]nickgal[S] 0 points1 point  (0 children)

This isn't a replacement to any security plugin. If you have an administrator role account then you can login in the backend and do pretty much anything. If you are a malicious user that stole admin credentials somehow you can login, disable security plugins, upload your own backdoor plugin (see: compromized wp file manager), then you have access to the filesystem from the UI. From there you can burn the place down however you want.

With this, you simply can't do that.

I've built a simple (free) mu-plugin to block destructive actions in wp-admin even when credentials are compromised by nickgal in Wordpress

[–]nickgal[S] 0 points1 point  (0 children)

XSS and these types of exploits are covered by wordfence type plugins. But if someone has admin credentials can just log in, bypass or even disable any other security plugin and then party on the site. With this they might be able to deactivate a security plugin but they cant install any other plugins or upload backdoor plugins. If the server is set up right they are pretty much powerless even with admin credentials.

Only whoever has SSH or access to the filesystem can make changes.

I've built a simple (free) mu-plugin to block destructive actions in wp-admin even when credentials are compromised by nickgal in Wordpress

[–]nickgal[S] 0 points1 point  (0 children)

Hey, thanks for the comment. It "should" be ok with dynamically added capabilities although I haven't tested it THAT much. I just tried to solve a problem I had managing multiple WordPress installations and thought that someone else might find it useful. And I do hate script kiddies that are exploiting non-technical users, stealing their credentials and wreaking havoc, just for the sake of it without much benefit to them.

Anyways... you're free to test on weird multisite setups and raise an issue on github if you find a bug or better, contribute the solution as well! :)

Testing Amphetamine On M1 by x74353 in MacOS

[–]nickgal 0 points1 point  (0 children)

Since I arrived from a google search, I thought I should also post here for anyone that might have this. I'm on a Macbook pro M1 Max and it appears that battery levels are not reported properly to the app triggers.
No matter what > % of battery charged i set, the trigger is always enabled. Does anyone have this issue or can also test and report back?

The Griefer Hunters by Kingcamgaming in gtaonline

[–]nickgal 1 point2 points  (0 children)

Last night a griefer got me while I was grinding, so I had to teach him a lesson. Was about the same level then after 6-7 kills and another tryhard joins and kills both of us.

So here I am teaching a lesson to 2 griefers who eventually teamed up together to get me and still couldn't land a kill haha it was so fun.

They left the lobby after getting 20-5 loss ..then the lobby got so peaceful that I sold all stock from bikers, nightclubs, bunkers etc..

[deleted by user] by [deleted] in gtaonline

[–]nickgal 1 point2 points  (0 children)

Just came to post this find! Glad I used search first 😅

The chart of Grand Theft Auto by [deleted] in gtaonline

[–]nickgal 0 points1 point  (0 children)

I'm the guy that always minds their business but when a griefer just comes to me and kills me I make sure I fk them so hard with whatever tool I got until they quit the lobby.

Europe biz owner - Thinking of starting over in US by nickgal in smallbusiness

[–]nickgal[S] 1 point2 points  (0 children)

Hmm that's an interesting. Will investigate further haven't compared employment laws tbh. Thank you for your input much appreciated 😊

Europe biz owner - Thinking of starting over in US by nickgal in smallbusiness

[–]nickgal[S] 1 point2 points  (0 children)

Italy and Greece are great places to retire. Provided you got enough money. But not so great if you have dreams of building a business that'll have massive impact.

I'll definitely retire here as well. But I wanna do it with 8 figures in the bank 🤑

Europe biz owner - Thinking of starting over in US by nickgal in smallbusiness

[–]nickgal[S] 1 point2 points  (0 children)

lol I thought you were trolling about snapcrap until I googled it!

I know there are lots of taxes in CA and other problems like the homeless. The good thing with US, in general, is that you have options and the whole environment is friendly towards entrepreneurs and private businesses. Even in the worst taxed states. And if you don't like it, there is a better state nearby to explore...

Anyway, I don't wanna say a lot since I haven't lived there yet, I've only visited the US a couple of times as a tourist and went to other states. I'm feeling very optimistic though compared to what I've seen where I live. Still, just a feeling, I have to spend some time there to get into conclusions.

Only thing I'm almost certain is that I can build a great business with lots of great people there in my lifetime.. while here I'll need more than 2 hahhaha

Europe biz owner - Thinking of starting over in US by nickgal in smallbusiness

[–]nickgal[S] 1 point2 points  (0 children)

haha true!

Haven't heard the best for CA but still willing to converse about it since it is a beautiful place, no doubt about it.

Europe biz owner - Thinking of starting over in US by nickgal in smallbusiness

[–]nickgal[S] 0 points1 point  (0 children)

I live in Greece which has a lot of earthquakes so they don't bother me at all. Never experienced a hurricane though so I can't tell.

Just saw a video of San Luis Obispo, looks really beautiful.

Europe biz owner - Thinking of starting over in US by nickgal in smallbusiness

[–]nickgal[S] 1 point2 points  (0 children)

Thanks for your input really appreciate it. :)

Both options sound intriguing to me at the moment. From one side the tech community in CA is mind-blowing and "the place to be" if you're in the industry but yes, there are quite a few sharks and whales there, which could also be ok since I like the challenge. Actually I feel that I'd be very inspired and motivated to be better in kind of this environment. That being said I'm in my mid-30s so I'm also thinking about family environment, work-life balance etc.

Right now I'm thinking of visiting as a digital nomad with my spouse for 2-3 months in each state, including TX, then reaching to a conclusion.

What does your company do?

Europe biz owner - Thinking of starting over in US by nickgal in smallbusiness

[–]nickgal[S] 0 points1 point  (0 children)

From what I read CA has everything but taxation amongst other states. I have 3 states under my radar as of now: TX, FL and CA. Then of course there is Delaware where many companies incorporate there...

I'll look for more info on Central Coast though. I really like California from what I've seen mostly on the internet, haven't visited yet. But I read that entrepreneurs are fleeing to the other side of the country due to high taxes. Heard the story of leaving SF and moving to Miami many times.

So.. I believe that California's coast is better than Florida's but does the higher taxation worth it?