http://arsenal-fc.fr is mine
Here you can see my blog. I write about android, and this seemed the best theme to customize my blog my way.
http://androidxphone.es/
THIS FORM IS NOT SAFE ANY MORE TO SHOWCASE UR SITES,THEY SOME LOW LIFE HACKERS IN THIS FORM THAT WAITING TO YOU POST YOUR SITE LINK TO HACK UR SITE…WATCH UR TRAFFIC AND CHECK UR LOGS THEY ONE FROM INDIA THAT KEEP TRYING EVERY DAY TO GET IN MY SITE AND THE FIRST PLACE HE COME FROM IS THIS SHOWCASE FORM…
I generally agree with what Steven said.
Of course, major hackbots actually go after ALL sites running WordPress, and even folders with /wp-content/ or /wp-admin/ simply by doing Google search.
It’s of utmost importance to keep your core WP files updated for all the security patches.
It’s imperative to learn about security strategies:
1) rename your admin account to something else — you should NEVER have account called “admin”
2) use tools like “limit login attempts”
3) consider disabling pingbacks and XMLRPC unless you have absolute need for them
4) make sure your host has system in place like IPTables/CSF for auto-blocking port scans and basic probing of server.
5) delete old plugins and themes you are NOT using — 5 year old theme in your theme folder might be hackable. Just because it’s off doesn’t mean the php files are not still there (!).
6) check your site/domain error logs from time to time to look for folks from certain IPS generating large amount of errors; have your host add them to a block list, or in some cases you can do so with htaccess if not other method.
7) try not to have any “account signup” forms on your site; make sure any contact forms do NOT send auto emails back to the sender — instant spam engine.
8) subscribe to security blogs like Securi which keep up on major WP hackables
9) don’t install any plugins which have not been updated in 2015 unless you’re 100% sure they are safe as they may not have the security updates of recent months
10) don’t install free plugins “found on the web” on some random website (don’t trust “glowing reviews” from junk WP review sites which are affiliate link farms!)
Use common sense, be proactive in having a security PLAN like regular safe backups, etc. and “be careful out there!”
Chris
Thanks Chris.
Sorry but i dont agree on the point 7, i fi understand it well.
What do you suggest instead of “account signup sending confirmation email” ?
If we dont put email confirmation or password sent by email, we would get thousand of fake profiles…
Hi
point (7) is for people who have “contact us” forms, which allow people to put in an email address, type in message and then hit submit; they can put anybody’s email in there — not theirs – and send spam from your contact form. So, “auto respond” bad idea there.
Obviously for “lost password” you need to have it send email to the person, but it should be smart enough to only send the email to the pre-existing account, right? So that negates somebody using that to send email to a third party.
Imagine the “chain of email” when a form is filled out … in the case of contact form, it’s problem; in case of somebody who lost their password – the email can only go to the person’s pre-existing email account.
For account “setup” that is different use case, such as “sign up for free account” — but even then, newsletters should be handled offsite (e.g., Mailchimp, etc. — not from YOUR site). and for ecommerce like WooCommerce turn off pre-order account setup, so account is auto-created on first order.
Be as paranoid as you can possibly be.
For all signup contact forms, be sure to consider the latest Google “I’m not a robot” captcha, and additionally use a plugin which interacts with known RBLs to stop anything being entered from bad domains and/or IPs.
Hi there everyone, I am a curious reader, always finding out why a fact is how it is, verifying the news and having fun while learning new things. I built http://factwide.com with Newspaper 6.
@akpanpromise I like the clean look, but no images are showing up. I can click on images inside of posts and they will load in their windows, but they aren’t showing anywhere on the site elsewhere. I’m on Chrome and Firefox using Win10. Not sure what’s causing that. If I had to guess, it’s a plugin conflict with the lazy load feature of Newspaper. Might try disabling lazy load to see if the images show, and then isolate the plugins by disabling all and re-enabling one by one.
I created a click bait site similar to ViralNova, BuzzFeed, etc using Newspaper 6, I think it turned out really well..
That link gfran5 posted shows up as spam when you click it, and if you follow through (aka ignore warning by your browser) you see even more spam. Smh
my site is http://www.surreyscoop.com still needs lot’s of work 🙂
This site start with newspaper version 4 and now to version 6, I am pretty impressive about the function and efficiency of the theme. With help from the support team and Chris-just by reading their menu, I also manage to make it GTMetrix 93% YSLOW about 76% loading time about 3s
It’s a Chinese news mag for overseas Chinese.
jornhaugland.no
My blog in Norwegian about careers, personal branding, recruitment, the staffing industry, employment bransing, social media and occasional other stuff.
Built with Newspaper 6 and a tiny bit of custom CSS. During the setup process I have been quite impressed over the quality and customability of the theme, and also over the response of the support team.
There are sayings that goes ‘there is an app for that’ and ‘ there is a plugin for that’. With Newspaper 6 the slogan should be; ‘there is a setting for that’.
Hello
Our website is the principal french magic magazine online.
There are reviews, interviews, events, forums, classified ads…
It exists til 1997 and we just change all after 2 years of work ! 🙂
You are welcome to tell me some points of improvement.
Regards
I like your creative approach !
I’ve been having fun with my new MGB historical and restoration site http://mgb1967.com/
Wonderful theme to work with.
Yes, you are right. I disabled the lazyload feature of Newspaper and then deleted the lazyload plugin I used earlier. Check it again and tell me what you think.
Maybe I could try using the feature again, but let me hear of your observation before implementing anything.
This is my website, PanduanSaya.com
It is basically like a how-to website where people can look for things that they need further assistance. The website is in Malay, targeting Malaysian.
