{bjørn:johansen}

Enabling uploads of SVG files in WordPress is quite easy, and there is a tonne of posts on the Interwebs explaining how you do it.

Uploading SVG files to WordPress when you’re behind the Sucuri CloudProxy Web Application Firewall isn’t that straightforward, but it is possible.

Let’s install an SSL-certificate from Let’s Encrypt for Nginx.

Running a real cronjob is much more reliable than WordPress’ built-in “maybe-will-trigger” solution.

Depending on your time zone, PHP 7 was finally released on 3rd/4th of December 2015.

Security vulnerabilities are often exploits of software that fails when trying to deal with unexpected input.

In your WordPress site, there are directories that include PHP files that visitors should never be able to access directly.

If you have a static IP address, like from your office, or your own private VPN, you can increase your security tremendously by restricting all logins to that IP address.

All login credentials transferred over plain HTTP can easily be sniffed by an MITM attacker, but is is not enough to encrypt the login forms.

WordPress requires write access to one directory, and that one directory only: the directory returned by wp_upload_dir().

Logs are nice and all that, but sometimes certain entries are there just to fill up the logs or are cluttering them.

Using Postfix with specialized, transactional email services like SendGrid or Mandrill is excellent for not only for optimizing email deliverability, but they usually also offer some nice features.

If you’re using a strong password, brute-forcing is a very inefficient way of breaking into your WordPress account, and if it is really strong, dictionary attacks won’t help much either.

SSH timeout due to inactivity is annoying.

To be honest, I don’t exactly know too much about Big-IP, but I’ve come across someone who use it.

Experimental support for HTTP/2 became available in Nginx version 1.9.5 (mainline).

Using HTTPS helps preventing someone from snooping your username/password or hijacking your sessions.

TL;DR: Your computer is sending my server data.

Here are my slides from WordCamp Belgrade 2015: HTTP/2 is here – Unlearn your optimization skills If you’re having issues with the HTML version, you may download a PDF here.

As I’m writing this, the calendar shows April 14 2015.

HHVM can really speed up your PHP-based web site.

Fail2ban works by filtering a log file with a regular expression triggering a ban action if the condition is met.

If your fail2ban is on a host behind a Rackspace Cloud LoadBalancer, you’ll want to block the offending IP addresses directly in your LoadBalancer.

Since version 3.9, WordPress have been 100% compatible with HHVM and I have begun replacing PHP with it on a few of my servers to experiment.

Any organization where multiple developers cooperate on a regular basis needs some guidelines to assure optimal quality of the end result.

OK, so you might have been at a WordCamp listening to talks or reading a few blog posts and you get that you should really get your WordPress site speed optimized.

Now that you have secured Nginx with HTTPS and enabled SPDY enabled HTTP/2, it’s time to improve both the security and the performance of the server.

Recently, I’ve done some WordPress load optimization with Thomas Bensmann (read his post « Full score on Google PageSpeed, Pingdom and GTMetrix») and to achieve full effect, you do have to load the Google Analytics tracking script, ga.js, from your own se…

When you get into page loading optimization, you will quickly find these «must-dos»: Combine your CSS and JavaScript files (respectively), minimize your CSS and JavaScript, load CSS before JS, load JS in body footer and then even some.

Gravity Forms is not only THE way to create and manage forms in WordPress, but is also pretty awesome when it comes to extensibility and flexibility.

There are now several years since WordPress was considered a blog platform only.

SPDY is this new, cool, fast protocol created by Google that “replaces” HTTP (the first draft of HTTP 2.0 is using SPDY as the working base).

Adding a certificate and using the HTTPS protocol is a good improvement to the security in the communication between the browser and the server, and should be in place on all sites that have a user login.

I always run the latest LTS version of Ubuntu on all my servers.

I always run the latest LTS version of Ubuntu on all my servers.

You have finished that WordPress site, and want to deploy it – move it from your test server to the production server where it goes live.

If you have a static IP address, like from your own VPN, it is very easy to increase your security tremendously.

When it comes to VPNs, there is the choice between PPTP and OpenVPN.

These are the first steps you should perform on your shiny, brand new VPS to set out on a safe journey on the internets.

TL;DR: Varnish lacks support for SSL and SPDY.

OK, so I was ready to give Jekyll another shot today.