WordPress.org

Ready to get started?Download WordPress

Forums

Ultimate Security Check
[resolved] BS (7 posts)

  1. K5WW
    Member
    Posted 4 years ago #

    Yep, it checks the WP installation, alright. But that's about it.

    It would be nice if the "Fix now" button actually worked; instead of taking me to some website where nothing is going on...

  2. greencode
    Member
    Posted 4 years ago #

    My thoughts exactly. At the very least it should help you and tell you what to do in order to get A's across the board. Some of the stuff it's come back with I've no idea what I'm supposed to do in order to fix.

  3. bsndev
    Member
    Plugin Author

    Posted 4 years ago #

    very-very sorry guys! I won't put any more releases when i tired, promise... I did a typo with url and pasted wrong one :( dumb. I just pushed 2.0.1 where i fixed the link under the green button and position of suscribe block.

    Thanks for pointing this out and for trying plugin, new features coming very soon!

  4. mindspins
    Member
    Posted 3 years ago #

    Okay button is fixed. It now takes you to a website where you're asked to fill in your FTP login and password. The one thing you should never do online for security reasons, if you ask me!
    Why dont they use the wordpress admin environment to keep the WP install clean and secure?!

  5. bsndev
    Member
    Plugin Author

    Posted 3 years ago #

    One of the biggest security issues is with rights/permissions. Unfortunately, it's not possible to fix these issues unless you have ftp access to the site. I understand this is a potential security risk, and we take that very seriously, but it's the only way we can think of to fix these problems. If you have another suggestion, we'd be open to it.

  6. shmeg
    Member
    Posted 3 years ago #

    I agree providing ftp details directly is just a no no... its just not done... I am sure you guys are on the up and up and are just trying to make things better for everybody, So how to do it?

    2 options...

    1) have a paid for service, secured by a NDA and contracted agreement for performing the changes under your care including once only (includes customer randomising password after done) and ongoing service to keep up to date... I know many of my clients would pay a few dollars a month to have this outsourced... including me cause I find it a headache.

    2) Have a free service supported by advertising that takes you to a site suitable for admins with step throughs or video tutes... That should satisfy both the DIY security guys and commercial (i haven't got the time) type admins...

    Anyway thats my two cents..
    cheers
    Ben

  7. bsndev
    Member
    Plugin Author

    Posted 3 years ago #

    THanks Ben for your suggestion! Did you heck our payment service already? I think we definitely will do some website with DIY tutes, for now we just going with some great updates for the service which will be released next few weeks.

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic