Tiny WordPress Insights
On WordPress core, plugins, themes, etc.Thu, 02 Dec 2021 02:13:31 +0000en-US
1 https://wordpress.org/?v=6.0.1Rate limiting xmlrpc requests on WordPress using Nginx
https://www.tinywp.in/xmlrpc-rate-limit-nginx/#respondThu, 02 Dec 2021 02:02:30 +0000https://www.tinywp.in/?p=2609WordPress based sites are target for most automated bots. Those bots look for various vulnerability in WordPress core, the themes, and the plugins. Then, there are some kids (and their kid bots) that target specific resources in a WP site. “xmlrpc.php” is one such resource. It uses XML-RPC protocol that does many things in WordPress. For example, it helps with remote sites to notify their mentions...
]]>https://www.tinywp.in/xmlrpc-rate-limit-nginx/feed/0Disable PHP warnings when running wp-cli
https://www.tinywp.in/disable-php-warnings-on-wp-cli/#respondTue, 18 May 2021 14:46:00 +0000https://www.tinywp.in/?p=2577Continue reading "Disable PHP warnings when running wp-cli"]]>It is not uncommon to test sites on a development environment (locally or in a staging environment where others can see the work-in-progress). On a development environment, usually we have configured to be . Here’s the sample of file in a development / test / staging environment… While the above code is perfectly okay, if the site creates PHP warnings, it is a nuisance to see them repeatedly when...
]]>https://www.tinywp.in/disable-php-warnings-on-wp-cli/feed/0Nginx compatibility for “Cookies for Comments” plugin
https://www.tinywp.in/nginx-config-cookies-for-comments/#respondThu, 29 Apr 2021 06:07:57 +0000https://www.tinywp.in/?p=1438Continue reading "Nginx compatibility for “Cookies for Comments” plugin"]]>Whether you are aware or not, spammers are more interested in your site than anyone else. You’ll understand this more vividly, when your blog starts to become famous and brings more and more visitors week after week, month after month, year after year. The most annoying thing about spam comments is the amount of time that you need to waste in dealing with it. There are some bright minds in...
]]>https://www.tinywp.in/nginx-config-cookies-for-comments/feed/0Buypass CA – SSL with 180 Days Validity
https://www.tinywp.in/buypass-ssl-certificate/#commentsTue, 21 Apr 2020 14:45:00 +0000https://www.tinywp.in/?p=2494Continue reading "Buypass CA – SSL with 180 Days Validity"]]>Buypass is a Certificate Authority (CA) based on Europe. It offers free SSL certificates with a validity of 180 days. Unlike LetsEncrypt, Buypass CA also offers paid SSL too. So, it is neither a competitor to LetsEncrypt, nor it is a nonprofit. It is a for-profit company that also offers free SSL certificates. There are other CAs that offer free SSL certificates too. However...
https://www.tinywp.in/version-control/#respondWed, 10 Jul 2019 12:31:37 +0000https://www.tinywp.in/?p=2439Continue reading "Version Control"]]>WordPress uses SVN internally such as for plugins repository. So, a plugin author must use SVN tools to upload a plugin and update the existing plugin/s in wp.org plugins repository. If you are new to SVN, WordPress docs team has a nice guide to get started with SVN and plugins repository. The best practices section is a gem. It is possible to update WP core using SVN. However...
]]>https://www.tinywp.in/version-control/feed/0Handling WordPress Cron failures using wp-cli
https://www.tinywp.in/fixing-wp-cron-failures-with-wp-cli/#respondTue, 18 Jun 2019 04:34:51 +0000https://www.tinywp.in/?p=2425Continue reading "Handling WordPress Cron failures using wp-cli"]]>To understand WP cron, let me quote the following text from Cavalcade documentation… wp-cron is not actually a real task scheduler, and doesn’t actually operate like cron. Instead, it’s a pseudo-cron system, which is run as a loopback HTTP call when you access a page on the site (essentially, the page “forks” itself to run scheduled tasks). This is fine for high traffic single-sites...
]]>https://www.tinywp.in/fixing-wp-cron-failures-with-wp-cli/feed/0WordPress Migration Checklist
https://www.tinywp.in/wp-migration-checklist/#respondWed, 22 May 2019 05:30:32 +0000https://www.tinywp.in/?p=2417Continue reading "WordPress Migration Checklist"]]>A successful WordPress site gets migrated to another host or another server within the same host, at least once in every few years for a number of reasons. Better operating system, to upgrade the PHP version, to handle larger traffic, etc. The first step is to test your migration on a staging server. Most issues (such as theme / plugins incompatibility) can be caught, if we test our migration...
]]>https://www.tinywp.in/wp-migration-checklist/feed/0DigitalOcean Hosting Review
https://www.tinywp.in/digitalocean-review/#commentsMon, 29 Apr 2019 13:17:10 +0000https://www.tinywp.in/?p=2393Continue reading "DigitalOcean Hosting Review"]]>No affiliate links are inserted in this post. I did not have and do not have any monetary benefits in posting a positive review about DigitalOcean (or any other hosts in this blog), either. No host is perfect. So, I am posting only what I like about DigitalOcean. There may be some cons of using any host. If you search the internet, you may find them. I use Google Compute Engine for hosting this...
]]>https://www.tinywp.in/digitalocean-review/feed/1WordPress vs Other CMS Platforms vs Static File Generators
https://www.tinywp.in/wordpress-pros-cons/#respondThu, 28 Mar 2019 14:10:32 +0000https://www.tinywp.in/?p=2369Continue reading "WordPress vs Other CMS Platforms vs Static File Generators"]]>WordPress is the most hated and loved CMS among all CMS platforms. Recently, one of my clients wanted to switch away from WordPress for a new project for multiple reasons. When asked about my opinion on other CMS platforms, here’s what I told my client… This could be a joke for many. But, seriously, WordPress core is one of the most widely scrutinized software for the past 10 years and it will...
]]>https://www.tinywp.in/wordpress-pros-cons/feed/0Checklist while migrating a WordPress site from HTTP to HTTPS
https://www.tinywp.in/ssl-migration-checklist/#respondTue, 12 Feb 2019 12:19:47 +0000https://www.tinywp.in/?p=2307Continue reading "Checklist while migrating a WordPress site from HTTP to HTTPS"]]>Hello fellow developers! Here is the checklist that I look upon whenever a WordPress site is migrated from plain old HTTP to HTTPS. At the end of the checklist, there are links to some useful websites where you can verify if everything has gone through correctly. Nothing is more important than taking a backup before making any (important) changes on a site. So, take a backup and make sure it works...