WordPress has Bolstered PHP and How

Even since its inception, WordPress has dwarfed all the other open source blogging platforms. With the incessant updates and developments, it continues to rise above the competition with both its feet comfortably perched on the growth curve. But what makes it even more resourceful is how it seamlessly combines the PHP functionalities with its own set of capabilities to create dynamic web pages. This has in turn lead to a resurgence of PHP, as more and more WordPress users are making sure they do not miss out on the PHP add-ones for their websites. The .php files on the WordPress add vibrant features and ease customization. Let’s take a detailed look of why it’s widely believed that WordPress has given PHP a shot in the arm:

Making Novices Take PHP More Seriously

For the fact that WordPress gives them a heap of reasons to develop their websites in PHP, website owners have been increasingly realizing the relevance of this programming language, even if they don’t have a lot of clue of its syntaxes. To begin with, if the WordPress theme you have selected is missing out on certain features, you can easily include them using PHP. To stay in sync with all the benefits of PHP, the WordPress website owners are beginning to learn PHP too.

You Believe it Because Google Says So

WordPress is also said to be buoying PHP simply for the fact that it is a much more popular technology than PHP, as PHP still can’t boast of as many advocates as WordPress can, despite the fact that it made its way into the market 8 years prior to the WordPress launch. Whilst, the simplest way to determine so is through a Google search with ‘PHP’ and ‘WordPress’ as separate queries, which lets you compare the search results and come to the conclusion. However, for the fact that Google keeps changing its algorithms, the appearing search results cannot be validated. In order to get more assured results, you can try out Google trends, is an excellent tool by Google to find out which particular term is searched the most from different locations of the world. The search stats are divided according to the different timelines, and thus it helps you establish the fact that WordPress is something that is searched and used by a large section of webmasters.

If you wish to develop your website in PHP using the PHP framework, that would mean a lot of time spent on development. WordPress ensures you slash any additional time you might have otherwise spent on writing codes. Afore mentioned, PHP can be later exercised to extend functionalities beyond what WordPress gives you.

About The Author:
Celin Smith is a PHP developer and also a technical writer working with Custom PHP Development Company offering wordpress and all PHP Frameworks services.

Read More

How to setup Wordpress on Localhost with Xampp

Hello Guys :)
Today I have a tutorial from my friend Soldier Of God aka SOG on installing Wordpress on your localhost using Xampp.
The best way to find 0days and test the security of any webapp is using your localhost, because its faster, safer, and even more reliable!
The Video is in HD, and feel free to ask you questions at our page on Facebook as a message, and we will answer you as soon as possible! =)

Read More

Most Important Steps To Secure Wordpress

Hello Guys, Today I'm going to tell you the most important steps to do to have a more secured Wordpress blog.

I think wordpress is the most used Webapps on cyber now; however, it's almost the easiest to be hacked and defaced!

But, on the other hand, securing your wordpress is so easy. specially on linux servers.

Note:- This tut will be based on linux commands, if you're a windows server user this tutorial is not completely for you!

so lets start with our steps!

1. Harder & Longer Password

Wordpress Hashes are so hard to crack (hardest for me xD) so making you password harder than "123456" , "admin" , "password" could help you ALOT!

The first thing a hacker would do is guess your password, if he failed he'll brute force it!

Hard password can save you from almost 50% of the attacks ! (In My Point of view )

When we say "hard password" it means using special characters like (@, () , [] , {} , ^ , % ,$ ,#,!,) and so on..

A longer password would not only secure you from Brute forcing, but even if you have a vulnerability like SQL injection for example and the attacker got a hash of your password (which is a Long and Full of special characters password) it would be hard as hell to crack it! and it will take them forever to crack it!

2. Securing From Symlink

Symlink is the most common way of hacking nowadays, and securing your website from it is will help you much!

For those who don't know what symlinking is can read my Symlink tutorial here. 

now to secure your blog from this kind of attack, you just have to change the permissions of you configuration file. You can do that though FTP, Cpanel, a shell, etc. 

just change the configuration file (wp-config.php in your case =) ) to 400

you can do that in a shell by running this command:

chmod 400 wp-config.php

and other ways are easy, just press on the option and change (in FTP and cpanel)

and always remember to remove your shell as soon as you finish working on it! xD 

Chmoding this file to 400, will not allow the attack to read your configuration file from another user! and that's about it :P

3. Securing From Defacing

If a hacker managed to get in your admin panel (somehow o.O) maybe through a Trojan on your PC or something you should close all the ways that let him upload a shell or deface your website!

What you can do it change the permission of all the pages (index.php, 404.php, footer.php, etc etc) in the theme to 400 (Example: chmod 400 page.php) or through your ftp or cpanel because if those files are writable there is a big change that the attacker change their source to a shell source code and deface you.

4. Vulnerability Discovering & Finding And Removing

Scan it every month just to check if any plugin have any vulnerability or something. that will make you faster than the hacker by discovering the vulnerability and patching it before someone else exploit it.

and second thing you want to do is being up-to-date with 133day.com and Wordpress forums they post any discovered vulnerability and sometimes its patches. This will help you to be less exploitable (I guess xD) 

5. Some Quick Tips

# NEVER EVER use the same password in two different things related to your website for example your Database's password and Cpanel's password, website's password and Database's password.

Always use different passwords

# Disable FTP when there is no use of it

# Don't use "admin" or "administrator" as your username

# Change Admin's Panel password every two weeks or so

# Read this article on Wordpress official website (Click Here) For more security

Following the above steps can prevent almost 98% of the attacks on your wordpress blog :)

Hope you liked it!

thanks for reading.

Read More