General

The General Data Protection Regulation (GDPR) is a regulation in EU law that went into affect on 25 MAY 2018.  If EU Citizens visit your website then you must provide a GDPR-compliant Privacy Policy. Fortunately, WordPress version 4.9.6 introduced a…

One of the items on our 'New Customer Audit' process is to verify that the WordPress database (uusally MySQL) is secured as well as the files. In the root of your website is a file named wp-config.php.  Among other things,…

"Why would hackers go after my website, it's just a brochure site?" I'm asked this often. Hackers who set up phishing attacks are looking for websites that are not blacklisted. Here is a phishing attack email I received this morning: It…

A significant number of my clients are entrepreneurs who are in the early stages of coming to grips with “I can do anything but I can no longer do everything.” They are torn between wanting to maintain their website themselves…

I want to alert you to an emerging threat to your WordPress website and what you need to do about it. For lack of a better term, this threat is being called WordPress Plugin Supply Chain Attack. It goes something…

We received notification this morning that one of the WordPress plugins used by several of our clients had been updated. A quick review of the plugin’s release notes revealed that a cross-site scripting (XSS) security vulnerability had been discovered and…

I recently received an email from a friend.  He fortunately has the free version of Wordfence installed on his website. Wordfence sent him this alert: An admin user with the username backup was created outside of WordPress. He forwarded the…

Imagine getting a call from one of your customers. She tells you that your website infected her computer with a virus and now the virus is holding her files for ransom. The answer is a good firewall and daily scans…

This week I’ve been asked by two clients to add password-protected membership areas to their websites. In one case, the client wants to create a members-only area containing paid content. In the other case, the client wants a highly secure…