We know that WordPress has Multiple Vulnerabilities. So that’s why your site can be hacked easily. I will discuss how to overcome this problem, I did not write down what the problem is. Because a lot has already been written about this. So I just discussed the remedy here.

First go to the / public_html / or / www / or / htdocs / folder or the sub-folder where you have installed WordPress with the FTP or Hosting Cpanel’s File Manager.

Now open the .htaccess file from the WordPress Installation Root folder.
Now copy and paste the following code.


# Start WordPress Vulnerabilities fixed
order allow,deny
deny from all
order allow, deny
deny from all
# End WordPress Vulnerabilities fixed


Once pasted, save the file.

Now go to the “wp-admin” folder and create a .htaccess file here and copy and paste the following code into the file as before.


# Start WP-Admin Vulnerabilities fixed
order allow, deny
deny from all
order allow, deny
deny from all
# End Wp-Admin Vulnerabilities fixed


Now save the file.

Now open the browser for testing and open the link as below

http://wordpresslink.ext/wp-admin/install.php

or

http://wordpresslink.ext/wp-admin/setup-config.php

If it shows 404 Error or Not Found type message, you will understand .. You have done the job successfully.

Now to add a little more security, go to / wp-content / themes / your used theme / folder and open the functions.php file.

Now at the very end of this file?> Copy and paste the following line before. By doing this, no one will be able to understand which version of WordPress you are using


[highlight]remove_action('wp_head', 'wp_generator');[/highlight]


Now your WordPress site is protected.

The WordPress Widget makes it so easy for WordPress users that it can be used anywhere on the site with just a drag and drop. There are many WordPress themes or plugins on the market that allow widget users to create their own layouts. Plugins are even available for widget management. Today’s post will show you how to create a custom WordPress widget for yourself.

What is a WordPress widget?

WordPress Widget is basically designed to help its users to design and structure the site in a simple way. The most interesting thing about using WordPress widget is that you can use it in any sidebar or widget ready area by dragging and dropping on your site. This is a very useful tool for WordPress theme developers or plugin developers which multiplies the speed of their work. They create functionality for the site through various programming and the user can use them where they need to customize their site according to their needs. This is possible only because there are WordPress widgets. You can also create your own custom WordPress widget and use it as a drag and drop on your site.

Creating custom WordPress widgets

You need to paste the code given below in the functions.php file of the theme. The code that is kept for you here will greet the visitors.


// Widget description
array( ‘description’ => __( ‘Sample widget based on WPBeginner Tutorial’, ‘tortoizthemes_widget_domain’ ), )
);
}
// Creating widget front-end
// This is where the action happens
public function widget( $args, $instance ) {
$title = apply_filters( ‘widget_title’, $instance[‘title’] );
// before and after widget arguments are defined by themes
echo $args[‘before_widget’];
if ( ! empty( $title ) )
echo $args[‘before_title’] . $title . $args[‘after_title’];
// This is where you run the code and display the output
echo __( ‘Hello, World!’, ‘tortoizthemes_widget_domain’ );
echo $args[‘after_widget’];
}
// Widget Backend
public function form( $instance ) {
if ( isset( $instance[ ‘title’ ] ) ) {
$title = $instance[ ‘title’ ];
}
else {
$title = __( ‘New title’, ‘tortoizthemes_widget_domain’ );
}
// Widget admin form
?>

<label for="”get_field_id( ‘title’ ); ?>”>
<input id="”get_field_id( ‘title’ ); ?>” name=”” type=”text” value=”” />

<!–?php
}
// Updating widget replacing old instances with new
public function update( $new_instance, $old_instance ) {
$instance = array();
$instance[‘title’] = ( ! empty( $new_instance[‘title’] ) ) ? strip_tags( $new_instance[‘title’] ) : ”;
return $instance;
}
} // Class tortoizthemes_widget ends here
// Register and load the widget
function tortoizthemes_load_widget() {
register_widget( ‘tortoizthemes_widget’ );
}
add_action( ‘widgets_init’, ‘tortoizthemes_load_widget’ );

Now go to your dashboard Appearance »Widgets, drag and drop the Techonlinebd widget to any of your sidebar areas. Visit the site to see what you have done for your site.

Isn’t that a very common job? I hope the post will be useful to you, if you have created a widget through it, please comment and request to give the link. Stay well.

Working on our site or blog panel or dashboard is a daily occurrence. But if the work is such that it is not possible to display the content on the homepage at this time. Or in a word: do not allow anyone on your site at this time. What to do then? Then you have to show a message of maintenance mode on your homepage. And we use different types of plugins to do this. But using the plugin makes the site relatively heavy which makes your site take longer to load. So if you wish you can do this on your WordPress site with a shortcode. And all you have to do is:
You need to copy the code from below and add it to the functions.php file.


function wpexplorer_maintenance_mode() {
if ( !current_user_can( 'edit_themes' ) || !is_user_logged_in() ) {
wp_die('Maintenance, please come back soon.');
}
}
add_action('get_header', 'wpexplorer_maintenance_mode');


As long as this code is in the functions.php file of your WordPress site theme, if someone enters your site, it will show you the message of maintenance mode which is in the above code where Maintenance, please come back soon. Replace there. Thanks.

You must have noticed that there are 5 types of User Roles in WordPress. Administrator, Editor, Author, Contributor and Subscriber. However, if you wish, you can create a new type of User Role.

Each of these 5 types of users has different scope of work, capabilities and limitations. The list of different User Roles of WordPress in the order of power is as follows:

Subscriber:

These types of users can do virtually nothing. By registering, they become members of that site, but they can’t post anything. If so, you will not allow comments on your site without a registered user; But if you don’t want them to post, you can use this roll.

1. They can comment.
2. Be able to update your profile.

Contributor:

This type of user will be able to post. But their posts will not be published directly.

1. They can comment.
2. Be able to update your profile.
3. Be able to post. Posts will not be published directly, there will be pending. Edit or delete text before it is published; But once published, you can no longer edit or delete. Cannot add Media (image or other files) to image.
4. See comments from yourself and other posts.

Author:

They will be able to post and the post will be published directly. This roll is commonly used in blogs.

1. Be able to comment.
2. Be able to update your profile.
3. Can post, the post will be published directly. Can edit or delete published text. Can add Media to posts.
4. See comments from yourself and other posts. You can delete, edit, unapprove the comments of your post.

Editor:

They mainly do Moderation work.

1. Be able to comment.
2. Be able to update your profile.
3. Will be able to post, the post will be published directly. Can edit or delete published text. Can add Media to posts.
4. Can delete, edit, etc. the writings of others. If there is a Contributor level post pending, it can be published.
5. Create a Page. You can delete, edit, etc. of your own or other’s page.
6. Can delete the category of the post or add a new category.

Administrator:

They can do everything. Editor level can work on everything as well as changing themes, adding or deleting new themes, Activate, Deactivate or Delete plugins etc. It is also the administrator’s job to control the widget, menu, etc., various settings, even the site content (posts, pages, users, etc.) to export, import.