Articles by "WordPress"
Showing posts with label WordPress. Show all posts

at 2
Cpdemy is a knowledge driven hive dedicated to producing great how-to, tips and tricks, awesome tutorials on Photoshop, Wordpress, Blogger, SEO

 Today I’m going to show you how to easily hide WordPress Theme name without using any plugin. 
As we all know, WordPress is a powerful open source website development platform there are tons of themes and plugins available in WordPress and we can make any websites like business website, corporate website, E-commerce website, Photography website, Blogging website, Wedding website, News website and more.
Before hiding our own WordPress theme let see how to find WordPress theme of others website.  There are simple steps to find others WordPress theme easily just find the below methods to know.
Step 1: Visit the website which you would like know its theme.
Step 2: Click F12 button to inspect element or right click on that website and click inspect element.
Step 3: Now click Search icon or (click F2) in inspect area and find for “theme”
Step 4: You can see the theme name here like this wp-content/theme/themename
Also Read: how to speed up your WordPress site

Here's How to Hide WordPress theme Name

Step 1: open theme folder in your local computer.
Step 2: Find the file name Style.css and open and write your desired theme name. ex: CPDemy
If you're doing this from cpanel, you can find style.css by clicking on public_html - WP-Conent - themes - (themename) - style.css

How to Hide WordPress theme Name
Step 3: Delete Theme URL, Author, Author URL, Description, Version, License URI, Version and any other link or name related to theme name in your Style.css file.
Step 4: Also delete the screenshot image from the theme folder.
Step 4: Now change the theme folder name as CPDemy and save it
Note: If you did this locally, your Theme name must be same on theme folder name and also in style.css theme name.
That’s it all done now you can check your WordPress theme name using Inspect element bar.
Love is sharing, share this Tips to your Friends
If you liked this article, then please subscribe to our YouTube Channel for video tutorials. You can also find us on Twitter, Instagram and Facebook.
Continue reading

at 0
Cpdemy is a knowledge driven hive dedicated to producing great how-to, tips and tricks, awesome tutorials on Photoshop, Wordpress, Blogger, SEO

 Hello guys, what’s up. In this quick guide, am going to show you easy ways to make money from blogging in Nigeria. I have personally made some money out of most of these ways am about to show you now, the best in my opinion being AdSense which is 100% trusted.

 What is a blog?
Before we dive into details, what exactly is Blog? According to Wikipedia, A blog (a truncation of the expression "weblog") is a discussion or informational website published on the World Wide Web consisting of discrete, often informal diary-style text entries ("posts"). Posts are typically displayed in reverse chronological order, so that the most recent post appears first, at the top of the web page.  

 What then is blogging? 
From what Wikipedia already told us about a blog, we can say that blogging is an act of publishing helpful articles on a web blog.  An example is this article you are reading right now. It was written and published by me (A Blogger).
Now the question is, can you really make money from blogging?  If yes, how?
Don’t worry, I’ll do my best to break it down for your understanding.

 Here are things you will need
Before starting a blog, you will need a platform to run it and this entirely depends on you. There are tons of platform where you can run your blog but the easiest amongst them are Blogger and WordPress. To begin small, you can use Blogger to run your blog, in this case, you’ll only need a domain name without hosting.
Please read all about domain and hosting here

 On the other hand, if you have enough capital to start, you can just dive straight into WordPress, this platform is very easy. It has a lot of functionalities, you don’t need to stress much, you just allow the platform run most of your stuff for you but in this case, you’ll need a hosting and domain.
If you don’t understand what I mean by hosting and domain, please read this post here about Hosting and Domain.

 If you decide to use blogger, simply head over to smartweb.com.ng or hostnownow to get a domain. You have dot com domains there and also dot com.ng. and many other extensions depending on what you want to do.

 You’ll need to have a blog before you can make money from it.
1. Choose a profitable niche
2. Buy from Smart web or 1and1. 
If you want a very cheap host in Nigeria, Smartweb is a very good choice, it is cheap, has a good bandwidth and their security is also good. There are still a lot of good hosting available in Nigeria, but I’ve tried a lot, and I recommend smart web.

 If you decide to host using a foreign host, Namecheap, 1and1 and Blue host is a very nice choice, they are very fast and gives all the features needed to you to run a successful blog.
If you’ve done this, then we’re ready to get started.

 Here’s a list of trusted Web hosts 2018

 A Few legit way to monetize your blog  
1. Advertising:
The most popular and easiest ways is through displaying advertisement on your blog, in this case, through a particular platform, advertisers place ads on your blog/website and you make money from impressions and clicks. 

 These includes ad networks like Google AdSense. 
Google AdSense is by far the most trusted Advertising network today, they are trustworthy and they definitely pay when you reach your threshold. But Google AdSense can take a lot of time especially if you’re not doing the right time.

 To get approval fast from Google AdSense, you would have to make sure to do a lot of things right. I’ll post a blog post soon on how to easily get approved by Google AdSense. And you can easily make money from AdSense by inserting the ad codes on your blog to generate earnings. The amount of money you’ll make from AdSense depends on the amount of web traffic you get.

 Note: Never click on your ads, doing this can make Google take off Ads from your website completely.

 Other options include, NGAdverts, Adquet, and many other ones. But in my opinion, NG Adverts really does a great work and I would say it’s a good AdSense alternative for Nigerians.

 Register with this link to start making money using NGAdverts.

 Note: Just like AdSense, they will disable your ads if you click on them yourself.
script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js">
In my next post about making money online, I’ll be writing in details about 10 Ads Networks and how to make a lot of money from them.

 2. Make money from blogging with affiliate marketing:
You can also make money from blogging by inserting affiliate links on strategic positions on your articles. You’ll make sales commission once your readers make purchase from your links. It’s really a fun way of make money online.

 3. Make Money from blogging by Selling services:
You can make money from blogging by selling premium services to your readers. I personally make a lot of money by building blogs for people. As am a very good web developer, I’ve developed a lot of systems that has paid me very well.
All our Blog and Website include SEO for you to been seen on search engines. 
You can hire me if you want. Or simply contact me directly by calling me via my number.

 4. Sell advert space:
You can also sell advert space on your blog to make money. But before you do this, you should have a lot of traffic on your blog so that advertisers would come themselves seeking for spaces to advertise their blog.

 Sites like LindaIkejiblog and Waploaded uses this to make a lot of money.

 5. Sell Courses:
If you’re very good at what you do, you can create and sell courses online in your blog. You can create a section on your blog where you can create full video courses and sell it online for people to buy. Quality of content must be very great so that users can come back and buy and also tell others about your courses.

 6. Turn your blog into an app and monetize it: 
It’s getting very easy to turn your blog into an iPhone or Android apps these days.  There are tons of website that can do that for you. You can then integrate your AdSense codes and make a lot of money by targeting mobile users.

 7. Consultation:
At some point in time, your work would speak for you. You will now have people calling you for consultation on how you became successful on your blog, and through a lot of failure, you would have mastered the art and start earning by attending to people’s failure and helping people to create a successful blog.

8. Donation:
You can also earn a lot of money from friends and well-wishers if you’ve been giving out content that helped a lot of people. 

 9. Sell blog:
Blog can grow to become a very valuable online real estate.  You can decide to sell off your blog if you don’t wish to continue with it anymore.  Believe me, the amount of a full grown blog is far more reasonable than a Fiverr account.

 10. Promote offline business:
If you have offline businesses such as boutique, shops, etc., you can use your blog to promote it.  Promoting your products and services on your blog will lead to more awareness about your business. Of course you know that that more customer equals more money.

 That’s it people. But most importantly, don't blog with the intent to make money, blog because you love it and what you love would pay you.

 Let me know if you have any problem. 
Contact me directly if you need a blog, I and my team can get you a very good optimized blog for your niche at a very reasonable price.

 If this post helped you, Don’t forget to share it. 

Continue reading

at 0
Cpdemy is a knowledge driven hive dedicated to producing great how-to, tips and tricks, awesome tutorials on Photoshop, Wordpress, Blogger, SEO


Sometimes, I notice some WordPress updates being ignored by some of my clients and friends all the time and I try to warn them about ignoring these updates and why it is important to update your blog or website as often as possible. Here are some reasons why.

To Improve Features Of Your Blog
WordPress is fast growing & improving every day. They actually make some updates when they find they can do better than the previous version and add more functionalities. Therefore, by updating it you also receive all of those new, modern features.

To Keep Your Blog Safe
To me this is the most important part, hackers actually look at your source code and view some plugins used and check whether is up to date and search for some vulnerability and see how they can break into your site. So keeping you must keep your WordPress and plugins updated at all times if you want to avoid hackers breaking down your blog. Go ahead & do this now. Safety is important.

To Avoid Errors
If you run into any error when designing or upgrading your blog- make sure all of your plugins & WordPress itself is up to date, it might just fix the error you’re dealing with.

To Achieve The Best Performance
Always keeping your blog up to date can help you achieve the best speed of your website & improve overall performance.

To Fix Bugs
Updates to WordPress & plugins often fix bugs that were discovered in previous versions.

To Improve User Experience
Most updates to WordPress make the content management system way quicker, easier and nicer to use.

To Avoid Major Disruptions In The Future
If you go years without updating your blog, you then risk experiencing major errors when you finally decide to update it. Make sure to run updates on your blog as often as possible in order to keep your blog running smoothly at all times.



Conclusion: Always updating your WordPress and plugins is very important as you have seen with the reasons I pointed out above. Updating only takes few minutes so you can spare that to update your website and experience new featured and fix bugs.


Let me know if this changed your mind at all!


Worth sharing huh? Sharing is loving, please share

If you liked this article, then please subscribe to our YouTube Channel for video tutorials. You can also find us on Twitter, Instagram and Facebook.
Continue reading

at 0
Cpdemy is a knowledge driven hive dedicated to producing great how-to, tips and tricks, awesome tutorials on Photoshop, Wordpress, Blogger, SEO


























WordPress is a Content Management System that Powers more than 30% Websites, and the best part is that it's Free, you only need to pay for your Domain and Hosting. 

At times, Websites running WordPress can slow down for any number of reasons. It could be anything from bloated code, a rogue plugin or poor hosting performance. Figuring out what’s slowing you down is hard enough. Harder still is that some methods for increasing speed (caching plugins, for instance) are full of cryptic settings.


It can all add up to something of a nightmare in diagnosing and fixing what would seem to be a simple problem.

Tips for Increasing Speed
WordPress, by itself, is not a slow platform. But adding components like themes and plugins can weigh it down. Combined with database clutter and potential hosting issues, a site can really slow to a crawl.

Here are a few things to take into account when you’re looking to increase speed:

Avoid Heavy Themes
Just because a theme calls itself “minimal” doesn’t mean that it’s lightweight. A theme may sport a minimalist look but still load a ton of scripts that will slow you down.

If you’re using a third-party theme, check the documentation to see how to disable scripts you don’t plan to use. Otherwise, use a lightweight starter theme and build for what you need.

Use only Needed Plugins?
Each plugin you install and activate can add scripts, styles and database entries. Before you install a plugin, do some research to see if it’s known to cause any issues with load times. Ask yourself if it’s really a necessity for the success and security of your site. If not, you may want to move on for the time being.


Use A CDN
CDNs or Content Delivery Networks help deliver static files of your website faster to your visitors from a server location much closer to them than your site’s servers. This makes a website that normally fast seems even faster. A CDN ensures that your visitor hits the cache rather than reach your servers. And accessing the cache as opposed to requesting site data from servers is much faster.

Almost all high traffic websites now use a CDN for their static content. CDNs like MaxCDN have solid state drives strategically located all over the globe to provide the ideal global content delivery service to websites with a wide demographic reach, as you can see from the image below.

Watch for Missing Content

Whether local or remote, look out for any scripts or stylesheets that fail to load. A missing file can cause your site to react incredibly slowly, along with possible display and functionality consequences. Use a tool like Pingdom or GTmetrix to analyze your site. Both tools offer a “waterfall” view that shows how long it takes for each file to load along with your page. If one of these files generates a 404 error, you’ve found the culprit.

Take Note of Hosting Limitations
Not all web hosts are created equal. Some just flat-out provide a better product. But you should also be aware of some hosting-related issues that can cause a slowdown. Being on an overcrowded server, running a non-supported (old) version of PHP or having too much traffic on a shared hosting account can all cause problems. And most importantly avoid all these mom and pops hosting promising to offer you best service. Try check out their reviews to see if they're worth your money.


Optimize Images
Using Very high size images can cause your website to run very slow, image have about 1MB Pictures of about 5 to 10 on a single page, of course the website has to load all of them and hence may do this very slow especially if you have a low bandwidth and there are many people accessing your website at the same time. Optimizing Images becomes very essential.

You can use a Software like Photoshop to resize your images or you can also use sites like postimg.cc to upload your image and then link it to your site, this can aid to increase the speed of your Website.

You can also use EWWW Image Optimizer to Optimize your images with lossless compression; you can reduce image sizes without much loss of quality. 

Alternatively, you can use Compress JPEG & PNG Images plugin for the same. They promise a compression in size by about 40% – 60% for JPEG images and 50% – 80% for PNG images, without a visible and obvious loss in quality.



Disable Hotlinking
Hotlinking is a means by which people use the content that is a host on your site’s servers for their own websites. So basically they use your servers with your content on their site. And as a result, your server gets loaded with no benefit to you whatsoever.

How do you stop someone from stealing your server resources?
To prevent people from hotlinking stuff from your site’s content. Some tinkering with your site’s code is required. You can use this tool from htaccesstools.com to generate the necessary code which you can add to your server. Normally, your host will also be willing to help you with this.

And once you prevent hotlinking, you can be certain that your server resources are not spent hosting content for a website other than your own. Hotlinking tactics generally target images and other multimedia which are data heavy, so if you run a site with minimal imagery, disabling hotlinking will not have any effect on your site’s performance.

Disable Pingbacks and Trackbacks
Trackbacks and pingbacks are used to let you know that someone else has put a link of your post on another blog or site. Trackbacks are manual and pingbacks are automatic, they both end up in your comment moderation. 99% of all trackbacks and pingbacks are spam. And if you start getting too much of it, your site speed can potentially be affected.

Go to Settings > Discussions, under Default Article settings disable the pingbacks and trackbacks.

Or we can use a plugin that can deal with spam, like WP SpamShield Anti-Spam. And that’ll be the end of spam in any form.


Continue reading

at 1
Cpdemy is a knowledge driven hive dedicated to producing great how-to, tips and tricks, awesome tutorials on Photoshop, Wordpress, Blogger, SEO





















What's popping guys, Today am going to show you the Top 5 WordPress Hosting Providers on my list. And In case you haven’t heard, WordPress is kind of a big deal, they are one of the top content management systems (CMS) in the world and power nearly 30% of the web. Much larger than the simple blogging tool most people are familiar with, this open-source software is used to create and manage beautiful-looking and fully-functional and professional websites or blogs and guess what, it's Free. 


But before you have a site, a hosting package is need thereby requiring hosting providers, so in this quick tip, am going to show you my 5 Best WordPress Hosting Providers with great support.

Factors to Consider When Looking For WordPress Hosting

Due to its popularity, most popular web hosting providers offer some form of WordPress integration and services, such as easy one-click install options for WordPress and the basic requirements of PHP version 7 or greater and MySQL version 5.6 or greater.

Here are some other important factors to consider when choosing a hosting provider for your WordPress website:
Security
Load time
Uptime
Reliability
Customer support (Very Important)
Variety of web hosting options for your needs




1. SiteGround
It’s generally understood by anyone reviewing the top WordPress hosting providers that SiteGround just has to be on that list. Founded in Sofia, Bulgaria in 2004, SiteGround has made a name for themselves by playing a prominent role in the WordPress community for some time now.

Siteground


Their hosting platform is optimized for WordPress servers, plus they also offer managed WordPress hosting at very competitive rates hard to find elsewhere. Even WordPress.org has vouched for SiteGround as a solid WordPress hosting provider.

SiteGround offers some great WordPress friendly features, including a free wildcard SSL certificate, daily backups with up to 30 copies, staging, advanced caching, free PCI compliance (for e-commerce) and fast support on their GrowBig and GoGeek plans. These plans are generally the more WordPress-optimized packages SiteGround offers. While they’re a little pricier than the StartUp package, the perks are worth it. Getting your WordPress site up and running is a cinch with their built-in installer, making the installation process seamless.

SiteGround has a vast online community which are always happy to give positive feedback in all variety of SiteGround reviews.



2. InMotion Hosting


InMotion Hosting is another popular contender for excellent WordPress hosting. Their Launch plan is optimized for WordPress specifically and is also the most affordable. It comes with SSD disk space (known for their superior performance), a free SSL certificate, and hosting that includes two websites on the plan.
InMotion

With InMotion hosting, they offer WordPress pre-installed as part of the package. This is excellent for those who want the process to be as easy as possible. You don’t have to handle the WordPress installation at all since it’s done automatically. During checkout, all you need to do is to click the correct checkbox.


3. A2 Hosting
A2 Hosting has been around since 2001 when they were a small company called Iniquinet and has gone through massive re-branding which has resulted in A2 Hosting. Now established as a widely used hosting provider, A2 Hosting has also established themselves in the WordPress space as a solid provider with good performance and affordable prices.
A2Hosting

Their WordPress hosting is based off of their principals of being developer friendly, offering quality performance, high security, and a WordPress-optimized environment.

Each of their WordPress hosting plans come with WordPress pre-installed, with the added option of installing new instances through their one-click installer. A2 Hosting also guarantees 99% uptime.


4. BlueHost

Bluehost offers multiple WordPress packages. Their basic package is their cheapest option for WordPress hosting, and is a shared plan. Unlike other providers on this list, Bluehost doesn’t offer monthly packages, so expect to sign up for a 12 month commitment minimum. With that said, they also have a solid money back guarantee policy if you aren’t satisfied.
BlueHost

Similar to other web hosts on this list, Bluehost makes the WordPress installation easy with a one-click install that is handled by a service called MojoMarketplace. The only knock on Bluehost is that this interface can be a little confusing. Be careful not to accidentally install multiple instances of WordPress, which is easy to do.


5. HostGator
HostGator is another renowned player in the web hosting world, but hasn’t always been the best. The quality of their hosting plans have been a point of contention for a while now, but they’ve come back in the past couple years with a strong offering for WordPress users with their WordPress Cloud hosting plans.
HostGator

Their signup process is pretty straightforward and leads to the traditional cPanel setup. WordPress installation has also been made painless using their built-in cPanel WordPress installer. HostGator guarantees 99.9% uptime along with 24/7 customer support.



Conclusion
If you are using WordPress for your website, life becomes a lot easier with these hosting companies, they are equipped with professionals and experts that know too much about about WordPress. It’s often as easy as one-click and comes with superior customer support by a team that lives and breathes WordPress. And 

Finally, I recommend Siteground and Inmotion for Wordpress Hosting.

Another very good Hosting is WPEngine, these guys are built for Wordpress, they know every nook and cranny about WordPress but I just purposely excluded it from the list because it very expensive. Still, feel free to check it out.

Don't forget to Share
Continue reading

at 0
Cpdemy is a knowledge driven hive dedicated to producing great how-to, tips and tricks, awesome tutorials on Photoshop, Wordpress, Blogger, SEO

A managed WordPress site is a website that is hosted on a managed WordPress host. Essentially, you’ll be outsourcing the hosting of your site to a team of WordPress experts. If you run a high-traffic WordPress site, then going with a WordPress managed host could be a great option for you. Below we explore what managed WordPress hosting is, and the benefits it can offer your site, so you can determine if it’s time for you to switch up to WordPress managed hosting.


What Is Managed WordPress Hosting?


Managed WordPress hosting is a streamlined hosting environment that’s optimized to help you build and run WordPress websites. The goal of this style of hosting is to ensure your site is running at peak performance, with high levels of security. A managed host will also take care of general administrative tasks like updating your site, maintaining security, and monitoring traffic levels. By hosting your site on a managed WordPress host you’re effectively outsourcing your hosting to a third-party of experts, so you can focus on growing your site instead. 

The Benefits of WordPress Managed Hosting


Having a managed WordPress site just requires a switch to managed WordPress hosting. Below we explore the main benefits your site will receive when you make the jump to a managed hosting environment. 

1. Improved Speed and Performance


When you utilize a WordPress managed server everything to do with the server environment will be optimized to get the most out of WordPress. That includes the server configuration, the hardware, the software, and the databases. Your WordPress site can become slow for a variety of reasons, whether onsite or having to do with your server environment. With regular monitoring, the team behind your site will be able to diagnose and solve any performance issues before they become a problem. 

2. Easier to Scale Your Site


If your site prepared for when an post goes viral, or you get featured by a major media outlet? Most sites will fail when they receive a large spike in traffic. Instead of visitors seeing the article or homepage, they’ll get nothing more than an error message. Managed WordPress hosts are built to scale. With traffic monitoring features the team behind your site will be able to scale your site’s resources at a moments notice to handle the flood of traffic. 

3. Greater Levels of Security


Most people don’t want to admit it, but there’s a chance your site could be hacked. Security is typically the farthest thing from people’s minds. Why would somebody want to hack my site? The last thing you want is to wake up one morning and realize your site’s been hacked. Then, you have to go through the process of fixing your site, which can be a real headache if you don’t have solid technical skills. With a managed WordPress host your server environment will be much more secure. Plus, since they’re WordPress experts they’ll be well aware of any common security holes and vulnerabilities and be able to patch the issues effectively. 

4. An Expert Support Team Behind You


A lot of support teams will only be able to help you with the actual server hardware when something goes wrong. So, if the issue is with your site, then you’re left on your own, having to search through Google looking for the magic fix. A managed WordPress host will not only be able to diagnose and solve server and hardware issues for you. But, they’re also staffed by a team of WordPress experts that will be able to help you troubleshoot any issues that might arise. And of course, the goal of a solid managed WordPress host is to help you avoid experiencing any site issues in the first place. 

5. Automated Website Backups and Updates

Backing up your website is incredibly important, but usually, it falls by the wayside if you have to figure it out yourself. However, with a WordPress managed host your site will be backed up automatically. The frequency of the backup will depend upon your host, but usually, it’s on a daily or weekly basis. Beyond backups the other task you’ll have to take care of yourself is updating your WordPress core, themes, and plugins. Failing to update these in a timely manner will make your site more vulnerable to attacks. Luckily, with WordPress managed hosting all of your updates will be handled automatically. Whether or not your plugins will be updated as well depends on the host. 
Is Managed WordPress Hosting Right For Your Site?

Managed WordPress hosting gives you the freedom and time to focus on growing your site, not managing your hosting. If you’re running a high traffic WordPress site and you want to improve its performance and security without any added work on your end, then WordPress managed hosting is an option worth considering.

Need a website? Contact me, Nice looking and appealing website to showcase your brand with a perfect SEO. Here's my contact 2348106919811
Visit our website today, Emsmart Technology for great offers

Source: hostgator
Continue reading

at 0
Cpdemy is a knowledge driven hive dedicated to producing great how-to, tips and tricks, awesome tutorials on Photoshop, Wordpress, Blogger, SEO

To simple control the number of post that display on your blog, archive and search page, Go to settings, click on reading.

On the page that opens, look for Blog pages shown at most.

Input the number of post you want and click on Save Changes.

See screenshot below



Continue reading

at 0
Cpdemy is a knowledge driven hive dedicated to producing great how-to, tips and tricks, awesome tutorials on Photoshop, Wordpress, Blogger, SEO


Sometime ago, I spent some time chatting with Mike Dahn who is the co-founder of the BSides information security conferences globally. He’s also organizer of BSides San Francisco and is well known and respected in information security circles.

We had a really informative chat and I’ve posted the video interview below. You know you’re chatting with someone who spends a lot of time thinking about a subject when they’re able to provide insights that are concise and are highly effective – ideas that can have a significant impact if overlooked or implemented.

During our conversation I asked Mike how “we can all be more secure”. We stopped filming for a few minutes and agreed….that is a really big question. He told me he knew what many vendors could do to be more secure – and so I filmed his response.
What Mike said is that “the best way to secure data is to get rid of it“.

If you’re new to systems administration, security or WordPress administration, you may not understand the value of this advice. So I’m going to expand on what Mike said because I think it’s something that is overlooked by many of us and can be a major risk reducer when trying to secure your website or your systems.
Anything you store needs to be protected.

Storing data you don’t absolutely need is a potential liability and a source of risk. Here are a few things that you may currently store on your WordPress site or in other areas of your organization that you may be able to get rid of or take offline, reducing risk:

Backups
We’ve seen many customers use WordPress plugins that store backup files on the server. Sometimes, catastrophically, the backups even end up in publicly accessible web directories. These should be backed up to an external storage system that is secure, or ideally taken completely offline. You don’t need your backups online until you need to perform a disaster recovery and that is (hopefully) a rare occurrence.

One compelling reason to take your backups offline is the rise in ransomware which encrypts both your web server (or workstation) and your backups. If your backups are offline, ransomware can’t encrypt it and your backups remain safe.

Credit Card Data
Never, ever store any data related to credit cards. In the interview Mike mentions “tokenization”. If you want to give your customers the ability to “store” their card information with you so they can perform repeat transactions, the way to do this securely is to pass the card data to a processor like Authorize.net (owned by Visa) and have them store the card data. They give you a unique ID or token which you can use to perform future transactions.

By tokenizing credit card data, you avoid having to store it and there is no card data on your site for an attacker to steal.
User Personally Identifiable Information (PII)
Only store what you absolutely must. Don’t collect information you only think you “might” use. Collect the data you have to and discard everything else.

For example, I’ve seen many online forms that ask for physical address information. Leave this out if you can because it’s one more piece of sensitive PII that you need to protect and it introduces additional liability into your organization if you are hacked.

Leave it to the (real) experts
While it’s tempting to store data on your own servers, companies like Visa in the credit card example above have much more stringent compliance requirements and have a larger team of security professionals than you do. So if you are able to outsource storage of data to a company that has a proven track record of excellence in data security, do that rather than reinventing secure data storage as a small team.

Delete old data

  • Another way to get rid of data so that you don’t have to protect it is to remove old data you no longer need. This may include:
  • Inactive user accounts
  • Old backups
  • Archived copies of your site stored on the server
  • Draft posts and pages
  • Inactive plugins and themes on your WordPress site
  • Websites that are still active but don’t receive any traffic or aren’t used
  • Old database instances that aren’t used anymore
  • Old database tables no longer used
  • Backup files or old files – for example if you made a copy of wp-config.php for WordPress and called it wp-config.php.old you definitely need to delete that because it contains your database credentials and is publicly visible on your site!

The Interview with Mike
This was filmed outside the BSides security conference in San Francisco. As always we welcome your feedback and insights in the comments below. Please share this to help promote good security practices in the WordPress community.




 By Mark Maunder   

 Originally posted in Wordfence 
Continue reading
Subscribe to: Posts (Atom)