WordPress Security 8 min read Reading WordPress Malware: Decoding eval(base64_decode()) Obfuscated code using base64_decode sits in almost every hacked WordPress site. How to find it, make it readable safely and interpret what you found. Daniel Nilges 30 October 2026
WordPress Security 7 min read PHP2Shell: What the Critical PHP Flaw Means for Your Website Two critical PHP flaws, patched on 21 Oct 2026: who is affected, why hosts took sites offline, and what you need to check and do right now. Daniel Nilges 21 October 2026
WordPress Security 8 min read Password-Protect a Directory with .htaccess and .htpasswd Protect part of your website with a password: how directory protection works, where the traps are – with a generator for .htaccess and .htpasswd. Daniel Nilges 9 September 2026
WordPress Security 8 min read Securing wp-admin with Directory Protection – When It Works A second password in front of the WordPress login stops bot attacks before WordPress loads. When it works, when it breaks (WooCommerce!) – with a generator. Daniel Nilges 9 September 2026
WordPress Security 8 min read Cyber Resilience Act: What Applies to WordPress from Sept 2026 CRA reporting duties apply from 11 September 2026. What that means for plugins, themes and your WordPress site – and what to do about it now. Daniel Nilges 5 September 2026
WordPress Security 8 min read Securing WordPress: Login, wp-config.php, Backups and More Automated attacks hit WordPress daily. The most important protective measures for login, wp-config.php, backups and hardening – all in one overview. Daniel Nilges 27 June 2026
WordPress Security 8 min read WordPress Hacked? Recognising and Cleaning Up Malware Redirects, spam or Google warnings: how to tell if your WordPress site was hacked – and clean it up in a structured way instead of blindly deleting files. Daniel Nilges 26 June 2026
WordPress Security 7 min read WordPress Backups Done Right – and Testing the Restore A backup you can't restore isn't a backup. What makes a good WordPress backup, how often to back up – and why the restore test is the most important step. Daniel Nilges 25 June 2026
WordPress Security 7 min read Hardening wp-config.php: The Most Important Security Constants wp-config.php is the control centre of every WordPress install. A few constants make it considerably safer – file editor off, force HTTPS, new security keys. Daniel Nilges 24 June 2026
WordPress Security 7 min read Securing the WordPress Login: 2FA, Login Limits and a Custom Login URL The WordPress login is the most targeted attack vector. Two-factor auth, a login limit and a custom URL make brute-force attacks practically useless. Daniel Nilges 23 June 2026
WordPress Security 7 min read Locked Out of the WordPress Admin? Here's How to Regain Access Can't log into WordPress? Get back in via lost password, phpMyAdmin, FTP or SQL – step by step, with a generator for the SQL and functions.php snippet. Daniel Nilges 15 June 2026
WordPress Security 9 min read Locked Out of the WordPress Admin? The Most Common Causes at a Glance Login won't work, password reset fails or admin rights gone? Overview of the most common causes of losing WordPress admin access – and a fix for each. Daniel Nilges 6 June 2026
