Agenda:
• WordPress security by Dre Armeda. If you've ever seen Dre present on Wordpress Security, you know this is good stuff and it's probably time for a refresher. If you've never seen Dre present, you won't want to miss this valuable presentation. This is a presentation that every WP user should see.
• Dashter 1.0 presented by Jeff Turner. We're finally ready to release this bad boy! Jeff will demo the latest and greatest and will focus on "how to use this," not on "let's look at the cool technolgy." If you saw Dave Cole's initial presentation... this one will be quite a bit different.
• WordPress 3.3 beta review by Steve Zehngut. Steve will go through the new features and fixes of the upcoming latest and greatest Wordpress release.
* Photocrati Theme. Anton Vasilescu is going to show off the work he has done with this cool theme.
This is going to be a great meeting. Don't miss this one!
WordPress Meetup... now with Agenda!
Seriously, you guys rock.
One of the hacking defenses recommended by the WebsiteDefender plugin is to password protect the wp-admin directory with a .htaccess file. Anyone care to demo this?
Dre may cover this in his talk, but if not, we can show this off real quick.
@Stephen, we can go over it. Another thing to consider is whitelisting IP's with .htaccess so only specific IP's can view /wp-admin
What's Genesis doing that they no longer need the .htaccess file? I'm sure this topic needs more than the few hours we have tonight. But I am curious.
They're likely using an alternative web server like Nginx, which doesn't support .htaccess files. Instead, this means configuring similar rules in the Nginx config file (or whatever other software they're using).
Kat I haven't seen andetailed answer anywhere to what they're doing, but my guess is the same as Michaels. It's also always been possible to setup redirects in PHP (this is what most redirect plugins do), it's just less efficient then having apache process it.
Just out of curiousity I'm wondering if they have some special way of securely sharing object caching between installs...
Dre - might be out of scope but I've been curious about password protection via htaccess (mostly for sites in development) but also if it could be used instead of IP blocking for added security.
The reason btw is that from home I connect through a wireless dual WAN setup and my IP is constantly changing... Plus I connect from many places (sometimes over free VPN) and my IP address changes then too, just tired of finding and adding IPs for everywhere I go.
@Jon - It's a good way to add an extra layer. We use it on production sites as well to add dual pass auth for wp-admin. It's pretty straight forward to add .htpasswd and .htaccess to do it.
Log in to Meetup with your Facebook account.
I will be there. I won Dre's product at the OC Wordcamp but didn't use it because I didn't know what it did. Good time to learn then activate it. Thank you.