Random posts about networking, storage, guns, reggae, probably booze and whatever else I feel like posting about.
WordPress’ security track record speaks for itself. That being the case, my general goal is to run php apps under unique UID’s, even if they reside on the same website Continue Reading…
It’s possible to get WordPress to help you with a reflective DDoS attack using the pingback feature. For additional info, see https://isc.sans.edu/forums/diary/Wordpress+Pingback+DDoS+Attacks/17801/ In any case, here’s a quick perl script Continue Reading…
Typically you’ll see your site being blown up with requests to wp-login.php. If you don’t have remote editors adding content, you can just block the requests from all but your Continue Reading…
WordPress, starting in version 2.6, added a very underutilized feature of being able to both force your login screen (for admins and users) to use SSL as well as being Continue Reading…