Application protection

1. Stop WordPress comment spam with Akismet and reCAPTCHA Explains how to combine moderation, Akismet and reCAPTCHA to stop automated comments and how to find another form if the spam continues. 3 min · Reviewed 09/2026 →
2. Configure session cookie security in GLPI Check HTTPS and GLPI's effective PHP configuration to resolve Secure cookie warnings, without confusing them with HttpOnly or SameSite. 3 min · Reviewed 09/2026 →
3. What a WordPress security plugin should provide Helps you decide which security controls to add to WordPress without duplicating the server's WAF or scanners or using unnecessary resources. 2 min · Reviewed 09/2026 →
4. 2022 historical alert about a PrestaShop attack chain Summarises PrestaShop's July 2022 alert, clarifies the conditions for exploitation and explains how to investigate a shop that may have been exposed. 2 min · Reviewed 09/2026 →
5. Imunify360: check detections and understand its limits Describes Imunify360's layers for blocking attacks and malware, the actions available in cPanel and the scanning modes of Proactive Defense. 3 min · Reviewed 09/2026 →
6. Restrict PHP functions without breaking your application Explains where to restrict sensitive PHP functions from cPanel, gives a reference list and reminds you to test every application afterwards. 2 min · Reviewed 09/2026 →
7. Restrict the Magento admin by IP Provides an .htaccess rule to limit the Magento admin to exact IPs and explains its limits with proxies, dynamic addresses and other security layers. 3 min · Reviewed 09/2026 →
8. Show a temporary notice by replacing the index file Explains how to show a temporary page while keeping the original index and warns that this method does not block access to the rest of the content. 2 min · Reviewed 09/2026 →
9. GnuPG in cPanel: manage keys to encrypt email Summarises how to use cPanel's GnuPG tool to manage key pairs and makes clear that email encryption must be done by a compatible client. 2 min · Reviewed 09/2026 →
10. CAPTCHA and temporary containment in PrestaShop 1.6 Sets out the priority migration away from PrestaShop 1.6 and the temporary CAPTCHA, admin restriction and monitoring measures during the process. 2 min · Reviewed 09/2026 →
11. Set up a CAPTCHA on an old PrestaShop 1.7 installation Frames the use of eicaptcha in PrestaShop 1.7 as historical and lists the checks needed before protecting forms with reCAPTCHA. 3 min · Reviewed 09/2026 →
12. Secure WordPress and keep its access under control Brings together measures to harden WordPress through updates, unique passwords, 2FA and extra protection for the admin routes. 3 min · Reviewed 09/2026 →
13. Disable public user registration in Joomla Explains how to prevent public user sign-up in maintained versions of Joomla when the website does not need registrations, and how to review existing accounts. 1 min · Reviewed 09/2026 →
14. ModSecurity: investigate blocks and false positives Explains how the WAF blocks requests using rules, how to investigate a false positive and why a specific exception is better than disabling it. 2 min · Reviewed 09/2026 →
15. Detect and replace unmaintained WordPress plugins Explains how to detect abandoned plugins or themes from their compatibility and last update, and why they should be replaced even if there are no warnings. 2 min · Reviewed 09/2026 →
16. Stop other websites embedding your files: hotlink protection Explains how to stop external domains from embedding images or files from your hosting in cPanel, limiting extensions and authorised origins. 2 min · Reviewed 09/2026 →
17. Change the login URL with WPS Hide Login Shows how to change the login path with WPS Hide Login, its limits as a security control and how to recover access without deleting the plugin. 2 min · Reviewed 09/2026 →
18. Historical notice about mass registrations in PrestaShop 1.6 and 1.7 Documents the flaw fixed in PrestaShop 1.6.1.24 and 1.7.5.2 and explains what to do if you still find an affected version. 1 min · Reviewed 09/2026 →
19. Why you should not rename wp-login.php and how to recover access Warns that wp-login.php should not be modified and suggests protecting login with updates, 2FA, login attempt limiting and a maintained plugin. 2 min · Reviewed 09/2026 →
20. Identify and stop abuse of a website's forms Explains how to tell whether bounces come from an abused form and how to protect it with server-side validation, rate limits and anti-bot controls. 2 min · Reviewed 09/2026 →
21. Stop spam sent from PrestaShop forms Explains how to confirm whether bounces come from a PrestaShop form and how to contain the abuse with updates, validation and rate limits. 2 min · Reviewed 09/2026 →

No articles match “”.