Disable XML-RPC on WordPress Website

Disable access to XMLRPC in WordPress

, , , , ,

The following kinds of attacks on WordPress websites, specifically targeting xmlrpc.php, have received increasing press coverage since 2015:

[su_list icon=”icon: bug” icon_color=”#157BAE”]

[/su_list]

If you (via an app) or your website (via a plugin) are not using the xmlrpc functionality then it may be wise to disable access to xmlrpc.php

There are several free and premium plugins to choose from on the official WordPress repository. Remember, disabling access to the xmlrpc file may break API functionality that your applications or plugins rely upon.

Later in this article will show you how to disable access to the xmlrpc without using any WordPress plugins.

 

Read more

Enfold WordPress Theme Logo

How to Fix Page Preview preg_match_all Warning Enfold Theme

, ,

Beginning around Enfold v4.5.1 we noticed that when previewing the changes made to a page or post we would receive the following PHP warning message.

 

Warning: preg_match_all(): Compilation failed: unknown property name after \P or \p at offset 6440 in /wp-content/themes/enfold/config-templatebuilder/avia-template-builder/php/shortcode-parser.class.php on line 607

 

Our brief research into this issue showed that it is related to some sort of conflict with another plugin. However, it isn’t a pressing issue as it is only a warning. But it is still annoying which is why we have come up with a quick patch to mute these warning messages.

 

Read more

Enfold WordPress Theme Logo

How to Remove Admin Bar Editor Type from Enfold Theme

, ,

Beginning around Enfold v4.5.2 the theme developers (Kriesi.at) added a way to determine which editor a page or post was using when viewing it from the frontend of your website.

 

 

This was also added to the post state of every page and post within the WordPress admin backend.

 

 

No doubt some find this additional information helpful to see, at a glance, what editor a page or post is using. Then there are those who found that it added unnecessary clutter. Especially since we KNOW which editor is being used because we always use the same one.

This article contains a code snippet which will remove the editor type from the frontend admin bar as well as the post type within the WordPress backend. Thus no longer displaying “Advanced Layout Builder” or “Classic Editor“.

 

Read more

WordPress Content Management System Icon

Update Your WordPress Database Prefix for Better Website Security

, ,

When you install WordPress, it creates a few database tables beginning with the prefix of “wp_“. Despite being provided the option to change the prefix upon installation, many simply do not. Hackers anticipate this when constructing their malicious code and executing their attacks.

The good news is that you can change the default table prefix, post-install. This helps prevent some malicious code from executing but by no means is this perfect. This can be likened to taking a oral supplement to help prevent catching a cold.

 

Read more

Gravity Forms Logo

Create a Custom “Select All” Label for your Checkbox Form Field in Gravity Forms

, ,

The Gravity Forms premium WordPress plugin provides a “Select All” label option for its checkbox fields. But what if you wanted a custom label, custom text, for the “Select All” option?

In this article we will show you how to modify the default “Select All” label option to create your own custom label text.

 

Read more

W3 Total Cache WordPress Plugin Settings

WordPress Plugin W3 Total Cache Update 0.9.7.2

, , ,

 

Yesterday evening, the W3 Total Cache development team released a minor yet important update to their WordPress plugin. This update specifically addresses issues regarding those utilizing Content Delivery Networks to increase the speed and reliability of their website(s).

 

Read more

WPFront User Role Editor Plugin

Multisite Security Flaw in WPFront User Role Editor

, , , ,

Recent events showcase that the team managing WordPress is committed to security.

Plugins are removed from the WordPress.org plugin directory once WordPress is made aware of any security related issues related to a plugin or theme within their directory and have verified their authenticity.

 

WPFront User Role Editor Withdrawn

This is what happened on Jan. 20th, 2019 to the WPFront User Role Editor, which has been temporarily withdrawn from the WordPress.org plugin directory. It was reported and verified to have an exploitable security flaw but only when installed on a WordPress website utilizing Multisite installation.

 

Read more

How to Fix WordPress Image Upload HTTP Error

WordPress Uploading Blank Image Resolved

,

Attempting to upload a simple image proved difficult recently when the client’s WordPress website kept incorrectly displaying a blank image instead of what was uploaded. Alternatively, you may be receiving an HTTP error notice. Good news is that we resolved that error within another recent article.

 

 

In this article, we will provide you with some potential solutions to this common blank image upload issue so that you can get back to creating valuable content.

 

Read more

WordPress 5.0 Gutenburg Support

Support for WordPress 5.0 Gutenberg Release

,

WordPress 5.0 introduces a robust content creation experience.

The new Gutenberg editor is the first step toward an exciting new future for WordPress with a streamlined editing experience. This gives the user more flexibility with how their content is to be displayed on their website.

Introducing Gutenberg

The new Gutenberg editor was developed with mobile in mind, capable of conveniently working across all screen sizes and devices. The best aspect of this new editor is that you no longer need a bunch of separate plugins for simple content styles and designs. This provides a website owner with greater security and makes editing their website content simple.

Read more

Create Custom WooCommerce Order Status without Plugins

Create a New WooCommerce Order Status without a Plugin

, , ,

The free WordPress eCommerce plugin, WooCommerce, includes a few different “order statuses“.

These are important as they inform your clients and customers in what stage their particular order is at. These order statuses help prevent unnecessary phone calls and/or emails from said customers inquiring about the status of their order. Granted you will always have that one person who will contact you regardless. At least these will help keep the majority from reaching out to you saving you and your online business much time.

 

Built-in WooCommerce Order Statuses

Here is the default order status list built into WooCommerce:

[su_row][su_column size=”1/3″]

[su_list icon=”icon: reorder” icon_color=”#157BAE”]

  • Completed
  • Processing
  • Pending payment

[/su_list]

[/su_column][su_column size=”1/3″]

[su_list icon=”icon: reorder” icon_color=”#157BAE”]

  • On hold
  • Refunded
  • Cancelled

[/su_list]

[/su_column][su_column size=”1/3″]

[su_list icon=”icon: reorder” icon_color=”#157BAE”]

  • Failed

[/su_list]

[/su_column][/su_row]

Some online stores may want to provide their customers with more specific order fulfillment statuses. For example, an online manufacturer may want to provide their customers with the ability to see that they are “Awaiting parts“, in the “Building” process, “Shipped“, and so on and so forth.

Within this article we will show you how to easily add these custom order statuses to your WordPress website without the use of a plugin.

 

Read more