WordPress News & Notes – April 16, 2009

From time to time, I run across a number of very useful WordPress resources or interesting posts related to WordPress, which I share in my WordPress news and notes posts.   Here is a few that have caught my attention over the past month or so:

  • WordPress Optimization Bible -The WordPress Optimization Bible is a collection of useful tips and tutorials on how to speed up your WordPress site. If you ever experienced slow WordPress admin panel, “MySQL server has gone away” message, pages taking forever to load or you want to prepare your site for a major increase in traffic (for example Digg front page) this is the guide for you.
  • What’s in Store for WordPress Themes in 2009? – Justin Tadlock shares his thoughts on what he expects out of WordPress themes in 2009.   In my opinion, you’ll see many more premium WordPress themes, as well as a shift towards theme frameworks and child theme releases.   Click over to see what Justin is expecting!
  • 135+ WordPress Tutorials – Instant Shift has compiled another large collection, this time featuring a number of our WordPress Tutorials and our WordPress code page.
  • The A to Z of .htaccess – Alex of Nometech has published an excellent post covering a bunch of information about the .htaccess file.    Useful resource to bookmark for any webmaster!

Tweet This | Digg This | Stumble it |

Tips For Protecting Your WordPress Installation

Matt Cutts is most commonly known for his job as the head of the Google Search team, but the guy also appears to know a lot about being a webmaster. A couple of days ago Matt wrote a post titled Three Tips to Protect Your WordPress Installation where he details three things you can do to help avoid having your WordPress blog get hacked.

Here is the first tip:

Secure your /wp-admin/ directory. What I’ve done is lock down /wp-admin/ so that only certain IP addresses can access that directory. I use an .htaccess file, which you can place directly at /wp-admin/.htaccess . This is what mine looks like:

AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName “Access Control”
AuthType Basic
<LIMIT GET>
order deny,allow
deny from all
# whitelist home IP address
allow from 64.233.169.99
# whitelist work IP address
allow from 69.147.114.210
allow from 199.239.136.200
# IP while in Kentucky; delete when back
allow from 128.163.2.27
</LIMIT>

I’ve changed the IP addresses, but otherwise that’s what I use. This file says that the IP address 64.233.169.99 (and the other IP addresses that I’ve whitelisted) are allowed to access /wp-admin/, but all other IP addresses are denied access. Has this saved me from being hacked before? Yes.

Click over to check out the other two!

Tweet This | Digg This | Stumble it |