Hot answers tagged

8

Bruteforce hashes You could bruteforce the hash that is stored in the database. WordPress uses phpass for hashing. Per default, WordPress does not use blowfish or similar, but just md5 with an iteration count of 8192. If you just want to find really bad passwords, bruteforcing is certainly feasible. But I would consider this a rather big violation of ...


7

The intelligence of the blocker is down to whatever extension or software the user is using. Some will simply block adsense, while others may be configured to read a white list, or black list configuration. Typically a site with its own ad-network shouldn't be a problem unless the site is used by hundreds of thousands of people, then you may have people ...


5

You can see an example Here http://chicagos.co This website has all the keywords and stuff like that, but it does not appear on google even if you type the domain, check the source code. chicagos.co doesn't appear in the SERPs because you are redirecting it to another domain!? chicagos.co does a 301 redirect to chicagospizza.co chicagospizza.co then does a ...


5

Any used framework under the hood has no effect on the SEO. What it matters SEO wise is the front-end (on Site SEO), and the off-site SEO. Generally any structural, mark-up, content changes have their own effect on SEO. Such changes can be done even with no underlying technology change. For sure changing framework can't affect off-Site SEO. For on-site, if ...


4

I suggest you follow what Microsoft, Apple & Amazon do - list Taiwan as Taiwan. It makes good business sense as it doesn't offend anyone in Taiwan and at the same time isn't making a statement supporting independence. You are simply abbreviating a name - which happens already. Why offend a nation of 23 million people who have their own currency and ...


4

I'm not sure that this is even possible. When you select your password, it's stored hashed in database. There's no reverse enginering when comes to hash algorithms. In my experience, script for password strenght is located in www.example.com/wp-admin/js/password-strength-meter.js, and this is the link to it. You can change levels and percentage for ...


4

Most ad blockers block 3rd party content from domains that are known to host ads. If you are using an ad server to host non-ad images, your images will got blocked whenever an ad blocker is used. I have not run across an ad server that does not use any 3rd party requests. Ads are typically served via 3rd parties so that: You don't have to deal with ...


4

All the answers suggested I would do as well. If you want another level of security I would enable Apache Basic Authentication http://httpd.apache.org/docs/current/howto/auth.html with a username/password on your admin URL within Joomla (make sure that this URL is https accessible only). This is done within your httpd.conf file whereby you generate a ...


4

Parse error: syntax error, unexpected '<' in /membri/thekrumbs/wp-content/themes/comicpress/functions.php on line 40 <?php if ( has_post_thumbnail()): the_post_thumbnail( 'featured-image', array( 'class' => 'featured-image' ) ); endif; ?> You have a PHP code block, ie. <?php...?>, nested inside a PHP code block. This code looks out of ...


3

The good news are that you can change users passwords, the bad news are that you cannot see them.Wordpress is so powerfull that even in the database it stores the password with one way encryption it's not just an md5 hash you can convert, it's not even serialized data, for the password test123 you would get something like $P$BjW8o9Dm1vC5bwAcP1iAdNVm0lbvn, ...


3

Yes, in the latest version there is a feature called Layouts which is available by default and lets you drag and drop components in a custom layout. A layout is made of rows and columns, and you can map them to a custom grid framework like bootstrap. Then, with the Layouts module you can create Blueprints which are reusable layout elements. So as layout is ...


3

As the passwords are hashed, the only way to test their security is to brute force them. Gather a list of commonly used, weak passwords and test them against the hashes stored in your database. Unless you use a very exhaustive password list this won't catch all of the weak passwords, but it will filter out the weakest of them.


3

So, it's the same old story. But, first, there are few things to do: Firstly, scan your site with some antivirus tool. Then do this: Upgrade all components/plugins Upgrade your Joomla on latest version Limit the upload of files only to allowed extensions (e.g. .pdf, .doc, .docx) Maybe put some additional stuff before upload (let's say captcha or some ...


3

Yes, you can do whatever you like with theme that you have. You've purchased it (or it's free). As long as you purchased it or if it's free, you can do whatever. Just make sure that you make a child theme out of your theme. (there are tutorials for this on wordpress community) That's because if you (in your example) edit functions.php without making a ...


3

Based on Stephen Ostermiller's research I looked at one of the sites and note that at the bottom of the source code it says <!-- Web Site Created with Microsoft Site Server Commerce Edition 3.0 Site Builder Wizard --> But neither have matching URLS for registering, but it is something to investigate.


3

Create a new document file like file.txt (In most OS you can do that by clicking on right button) and edit the extension from file.txt to file.xml or sitemap.xml, whatever you want. Add your all URL's in simple line. No need to add XML sitemap tags like <loc> <url> etc. Just plain absolute URL name like google use on their sitemap Upload your ...


3

The main difference between services like Webflow (and Squarespace, Wix etc) and WordPress is that WordPress is open source. You can host it yourself wherever you like You can tweak code or even contribute to the WordPress core. There are a squillion themes that you can also modify to suit. In short, you pretty much have full control. With other services ...


2

I would recommence using microweber or impresspages. They are open source drag and drop edit inline CMS that require no HTML, CSS and php knowledge to start. Have it a try. They already have newsletter modules and a googlemap api integrated. However for events and interest pointers, I would suggest using a standard news or event module. Else, develop your ...


2

Well, as http://whatcmsisthis.com/ doesn't recognise it, and the log-in area appears to be created with https://github.com/FriendsOfSymfony/FOSUserBundle (very few CMSs don't have user management out-of-the-box), then I would be pretty sure that it is a bespoke system using various bits of third party code and apis to achieve its means. It also uses ...


2

The solution that we found to be the most simple and effective was a simple CSS and template hack. We are using our own custom template so modifying it was not a problem. In short, I hid the Edit bar and any other content manager features using a CSS file that only loads when on the main website (www.example.com), and provided a message on those pages for ...


2

Sounds like you have three parts here: User and authorization management Content classification, profiling and/or authorization (possibly done by "tagging" or metadata) Content management--some CMS handle parts of the above 2 If this setup is core to your business model, consider developing your own setup, though most independent CMS professionals I've met ...


2

Actual Server Path This is a common problem associated with a lot of content management systems such as Joomla and WordPress that don't inform the site administrators that you are required to use actual server path and not that of the public_html or www folder. Using /tmp/ will not use example.com/tmp/ but rather attempt to access the tmp in the root of ...


2

The plugin WPML is great for this job and will solve all your problems. You'll not have duplicate content because, in fact, the content will be the same but in other language. No problem with the photos here too. WPML is possible to use "folders" like www.example.com/fr or subdomains like fr.example.com, so you'll have absolute control on your content. I ...


2

My question is would using a slite3 database for each user within one web application be viable? It is "technically" possible but highly unorthodox. Using sqlite this way would be well outside the assumed "solution space" for which it was designed. So, viable ? No. Or would it be too hard on server resources? It is such an unexpected use-case I doubt ...


2

Sitecore seems to be built on .NET platform, so depending on how you want to integrate it, you might need to create some custom portlets that use remote APIs. You could build a app (with .NET or Java) that uses Sitecore apis to synchronize content. I'm not very smart in this area, but you can use SiteCore as CMS for Java based apps.


2

On a purely technical level, you shouldn't have problems having a site there. However, the message a .cm domain gives is not "Content Management System", but "From Cameroon". If things like SEO are important, such signals are not going to help you in other countries. A list of available domains (and what they are for) is available on wikipedia. Of the new ...


2

I wanted to post this as a comment but I am lacking reputation points to do it, I want to give you recommendation before you transfer the site. Use WP Migrate DB to export the database, since wordpress got serialized data to handle and it involves the links so if you use normal export you will either have to deal with lots and lots of links or you will have ...


2

As long as all of the URLs you currently have resolve correctly and 301 redirects are created for the URLs that change, Google will be just fine with the switch. Google doesn't care how you serve your pages as long as they load, are fast, are mobile friendly, etc...


2

This is exactly why I hate wordpress and other CMS's. simply because so much can be added to it (including malicious scripts). Now the easiest way is to check each PHP file as it applies to wordpress and look for anything unusual added to your scripts since the time the fresh installation happened. To start, download a fresh copy of wordpress, and store it ...


2

Can you answer all these questions with "yes": Is the html the same after the change? Is the content the same after the change? Is the site's speed the same after the change? Are the sent headers the same after the change? Is the new version indistinguishable for bots? If you can answer these with yes, then no changes will occur. Otherwise there will be ...


Only top voted, non community-wiki answers of a minimum length are eligible