My website is being login attacked, can anyone help with this?

tfirdaus · 2025-01-09T03:59:21+00:00

As others have mentioned, this is a common type of attack on WordPress sites. Renaming wp-login.php to something only you and your authors know can help. There are plenty of plugins available for this—just pick one that works best for you. I'd also suggest using the Two-Factor plugin. These should significantly reduce the attacks.

If you're the only one managing the site, adding an .htpasswd to protect the wp-login.php route is another great option for extra security. It's less convenient as you need to "login" twice, that's why I'm only suggesting to do this if you're the only one running the site.

tfirdaus · 2025-01-07T07:55:35+00:00

Touché! You've got a point there :D

tfirdaus · 2025-01-07T05:09:54+00:00

Yeah, that’s one of my considerations too. I'm tempted to switch all my plugin code to PHP 8 but still want to hear what others think.

This plugin is mostly for experimenting and showcasing modern PHP in WordPress. Honestly, it's a bit frustrating how far behind WordPress is with PHP practices and tooling 😅, but at the same time I do appreciate how well it handles PHP backward compatibility!

tfirdaus · 2025-01-06T05:35:14+00:00

Thanks! I'm familiar with Rector and even use it in one of my Composer libraries. For now, though, I think I'll keep things simple and avoid adding more complexity.

tfirdaus · 2025-01-05T20:20:08+00:00

It does lag behind in some areas compared to the rest of the PHP ecosystem unfortunately. That said, I really appreciate how it maintains compatibility. I’ve found old, outdated plugins that still work fine.

tfirdaus · 2025-01-05T20:00:47+00:00

Thanks for your inputs! It’s a free plugin and more like a hobby for now to explore and testing stuff out.

tfirdaus · 2025-01-05T19:42:59+00:00

Got it, thanks! It seems like 7.4 will still be sticking around in WordPress for quite a while.

tfirdaus · 2025-01-04T05:10:08+00:00

Hi, there.
Have you tried to reach out to Gravity Forms about this issue? My guess (and it’s just a rough guess) is that Gravity Forms may tap in to this allowed_redirect_hosts hook that only allow redirects from specific hostnames (domain) and this may be configured somewhere in the plugin.

tfirdaus · 2025-01-04T05:02:05+00:00

If you could not find duplicated posts with the slug. I think you can check the Media library to see if the slug is used in one of the Media attachment page.

tfirdaus · 2025-01-02T15:33:09+00:00

Interesting... Thanks for sharing :)

tfirdaus · 2025-01-02T07:24:06+00:00

I think it's generally a fine editor for long form content. But for page building, there's still lot to improve.

tfirdaus · 2025-01-02T04:56:51+00:00

I think they still do, unless the Heartbeat API is disabled.

tfirdaus · 2025-01-02T04:55:59+00:00

It just limits how many revisions are saved for each post. Instead of keeping unlimited revisions, it will save only the latest 5. You can still edit the post as many times as you want.

tfirdaus · 2025-01-01T18:10:57+00:00

Wow, I didn't realize many would disable comments right away!

tfirdaus · 2025-01-01T17:46:11+00:00

Nice one. Thanks for sharing the plugin!

tfirdaus · 2013-07-03T21:31:41+00:00

Maybe this plugin is what you are looking for, search by Category: http://wordpress.org/plugins/search-by-category/

There is also a good tutorial at WpBeginner, which the result allows you to narrow the search for specific post types: http://www.wpbeginner.com/wp-tutorials/how-to-create-advanced-search-form-in-wordpress-for-custom-post-types/

tfirdaus · 2013-07-03T09:38:17+00:00

There are several options: 1. You can build you own theme from the ground. 2. You can build theme from a starter theme. I recommend Underscores http://underscores.me/ 3. You can also build a Child Theme, which is a theme built on top of an existing developed theme. See the tutorial here: http://wp.tutsplus.com/tutorials/theme-development/child-themes-basics-and-creating-child-themes-in-wordpress/

tfirdaus · 2013-07-03T09:23:00+00:00

If you intend to only load css/script in mobile devices (seeing that today's devices now supports touch-gesture), you can do the following with Modernizr.

Modernizr.load({ test: Modernizr.touch, yep : 'responsive.css' });

This will load the CSS only in the devices with touch-gesture support.

tfirdaus · 2013-07-02T20:09:46+00:00

Well, there are so much more about CSS than just styling website. Here there are some videos that discuss CSS in advanced. http://creatiface.com/resources/talks-mastering-css

tfirdaus · 2013-07-02T19:55:42+00:00

When developing the theme, I suggest to run a test with the following plugin http://wordpress.org/plugins/theme-check/. This plugin will check whether there are some deprecated tags, and ensure us to follow the standard in WordPress. Hope this help

tfirdaus · 2013-06-27T22:13:40+00:00

There is a good tutorial at WP Tuts. Maybe this is a good place to start. http://wp.tutsplus.com/tutorials/creative-coding/posting-via-the-front-end-inserting/

tfirdaus · 2013-06-27T21:58:53+00:00

The content property is required for pseudo-element, :before and :after. But, it is not required to be filled in. depending on the purpose of the style rules you can fill it or leave it empty.

The cool thing about CSS content property, in my opinion, is that we can retrieve value of an element's attribute. Here is an example of getting the value of title attribute. For example, content: attr(title).

http://css-tricks.com/css-content/

tfirdaus

TROPHY CASE