User Menus is the perfect plugin for websites that have logged in users. The plugin gives you more control over your nav menu by allowing you to apply visibility controls to menu items e.g who can see each menu item (everyone, logged out users, logged in users, specific user roles). It also enables you to […]

For this step, you should be comfortable with FTP and editing the .htaccess file. If not, simply skip this for now. 1. In your browser, navigate to Security Headers and scan the site. All you have to know about security headers is nicely explained in that report. 2. Find the file .htaccess – should be in the root directory of your […]

By adding the Strict Transport Security header to your site, you secure every visit from your visitors except for the initial visit. That still leaves your site vulnerable to MITM (man-in-the-middle) attacks for that initial visit, so there is a technique called “preloading” that will add your site to a pre-populated domain list. Once your site is on […]

Moving Your wp-config.php File With the correct file permissions and a correctly configured web server, keeping your wp-config.php file in the same public folder as the rest of your blog should be perfectly fine. But, when it comes to protecting your website, security is an onion (or Ogre apparently); the more layers, the more of it you got. […]