Friday, 18th July 2014 The world is waking up without suspecting that a wave of attacks has affected thousands of WordPress sites. Even up to date in their version of their favorite CMS, the attacks came from elsewhere, it is not WordPress itself that is at issue. One can always ask the question “Will not […]
WooCommerce 2.1.6 contains a vulnerability capable to display any post title of any type. This is included since 2.0. It therefore becomes possible, modifying the purchase address directly in the address bar, to display post title from any type and any status. We can display titles from drafts, pendings, protected, et other Custom Post Type even if not designed to be displayed in front-end. Knowing that it exists […]
Heartbleed in 2 words It’s huge. Heartbleed in a few words Heartbleed take its name from Heartbeat, from where came the flaw, this big security flaw discovered the 8th april 2014. This is in the SSL protocol (used by many sites and services in the world) that flaw permit to a hacker, in certain conditions, to extract passwords, secret […]
After the WordCamp Paris 2014, i’m back to share a tip based on fact to force some options on some values, they can become malicious: Force the admin email address Force this value with a hardcoded one, you’ll be sur to always receive important emails in relation with WordPress. Force the non-registering possibility With the same […]
A thing we know when we write rules in the firewall or in .htaccess files, it’s to not block the search engines like Google, Bing, Yahoo etc.
This website is edited by 21(douze).
Registered office:
26, rue Montgolfier
62510 Arques - France.
SIRET
523 133 189 00010
Email
contact@secupress.me
Hosted by o2switch
222 Boulevard Gustave Flaubert
63000 Clermont-Ferrand
France