WordPress hardening

How to set correct WordPress file and folder permissions Incorrect file permissions cause WordPress errors like “Could not create directory” or “Unable to locate WordPress root directory”, while overly permissive settings (like 777) are a serious security risk. The standard WordPress recommendation is 755 for folders and 644 for files, and both can be set…

Add Google reCAPTCHA v2 to a WordPress form Google reCAPTCHA v2, the “I’m not a robot” checkbox, stops most spam bots on contact, registration and comment forms. You need two keys from Google and two pieces of code: the widget in the form, and a check of its token on the server before the form…

WordPress security hardening: the first steps before launch A fresh WordPress installation is reasonably secure, but a few small changes reduce the attack surface a lot. None of them needs a plugin: they go into wp-config.php, .htaccess and functions.php, and most take a minute.

Is someone using my webcam? It’s no secret that attackers can activate a webcam without the owner’s knowledge. In response, some laptop manufacturers have started adding physical privacy shutters or LED indicators. You can also buy stick-on covers, or just use a piece of tape: cheap and effective. But if you want to know whether…

How to allow SVG uploads in WordPress SVG is the format of choice for logos and icons, but WordPress blocks it out of the box. There are two ways to enable it: install a plugin, or add a small filter to your theme or plugin code.