-
Passwords have one big weakness: someone can guess them. Brute force attacks do exactly that, trying thousands of passwords until one works. Your server logs may already show some visitors trying their luck. SSH key-based login offers a better way. You create a pair of keys. The private key stays on your computer and is…
-
Some files do not belong on a live web server, and your FTP client will happily upload them anyway. It has no opinions, which is both its charm and its flaw. Leave out the .git folder. It holds the entire history of your project, and if the web server exposes it, a visitor can download…
-
After moving a WordPress site, the old web address is scattered through the database like glitter after a party. You need to replace it everywhere, and the obvious way is a quick SQL REPLACE. Please resist. WordPress stores much of its settings and widget data as serialised data. That is text that includes the length…