7thcircle

I do not understand the idea of using an extra plugin to fix a security flaw. I also do not understand the need to compromise security for debugging purposes. You debug on a test site and fully secure a production site as best practice. By your comments, am I to believe that this plugin is still in beta?

<meta name=”twitter:card” content=”summary” />
<meta name=”twitter:site” content=”@7thcircledesign” />
<meta name=”twitter:creator” content=”@https://twitter.com/7thcircledesign” />
<meta name=”twitter:domain” content=”7thCircleDesigns.com” />

I have emailed the files

I saw a few minor issues in the logs and sent them to the plugin devs, but nothing that would explain the issues I had been seeing.

I am now at 30 hours with no 500 errors after several changes.

1. Better search replace and update all internal redirects (many items were doing http to https redirects), this lowered the number of errors

2. Disable cron and make it a server job, lowered to a handful of errors once a day

3. Changed cache preload to weekly from daily

4. wp-config tuning and some selective bot blocking in htaccess

<?php

/***************************************
PRODUCTION SERVER. OPTIMIZED FOR SPEED.
****************************************/
define(‘WPCACHEHOME’, ‘/home2/XXXXXXXX/public_html/wp-content/plugins/wp-super-cache/’ ); //Added by WP-Cache Manager
define(‘WP_CACHE’, true);
define(‘WP_DEBUG’, false);
define(‘SAVEQUERIES’, false);
define(‘SCRIPT_DEBUG’, false);
define(‘COMPRESS_CSS’, true );
define(‘COMPRESS_SCRIPTS’, true );
define(‘CONCATENATE_SCRIPTS’, true );
// log errors in a file (wp-content/debug.log), don’t show them to end-users.
define(‘WP_DEBUG_LOG’, true);
define(‘WP_DEBUG_DISPLAY’, false);
define(‘ENFORCE_GZIP’, true);
// DATABASE
define(‘DB_NAME’, ‘DB_NAME’);
define(‘DB_USER’, ‘DB_USER’);
define(‘DB_PASSWORD’, ‘DB_PASSWORD’);
define(‘DB_HOST’, ‘localhost’);

// DOMAIN & URL
define(‘PROTOCOL’, ‘https://&#8217;);
define(‘DOMAIN_NAME’, ‘www.artstopinc.com’);
define(‘WP_SITEURL’, PROTOCOL . DOMAIN_NAME);
define(‘PATH_TO_WP’, ‘/’); // if your WordPress is in a subdirectory.
define(‘WP_HOME’, WP_SITEURL . PATH_TO_WP); // root of your WordPress install
// Using subdomains to serve static content (CDN) ?
// To prevent WordPress cookies from being sent with each request to static content on your subdomain, set the cookie domain to your non-static domain only.
// define(‘COOKIE_DOMAIN’, DOMAIN_NAME);

/**#@+
* Authentication Unique Keys and Salts.
*
* Change these to different unique phrases!
* You can generate these using the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}
* You can change these at any point in time to invalidate all existing cookies. This will force all users to have to log in again.
*
* @since 2.6.0
*/
define(‘AUTH_KEY’, ‘ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ’);
define(‘SECURE_AUTH_KEY’, ‘ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ’);
define(‘LOGGED_IN_KEY’, ‘ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ’);
define(‘NONCE_KEY’, ‘ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ’);
define(‘AUTH_SALT’, ‘ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ’);
define(‘SECURE_AUTH_SALT’, ‘ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ’);
define(‘LOGGED_IN_SALT’, ‘ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ’);
define(‘NONCE_SALT’, ‘ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ’);

/* ———————— SETTINGS COMMON TO ALL SERVERS ——————— */
define(‘TABLE_PREFIX’, ‘wp_’); // Something else than the default wp_. Only numbers, letters, and underscores.
define(‘WP_POST_REVISIONS’, 3 ); // How many revisions to keep at max.
define(‘AUTOSAVE_INTERVAL’, 180); // in seconds
define(‘EMPTY_TRASH_DAYS’, 3); // in days (use 0 to disable trash)
define(‘IMAGE_EDIT_OVERWRITE’, true); // Allows overwriting images when editing them.
define(‘MEDIA_TRASH ‘, true);

// WORDPRESS’ LANGUAGE _ Default is ‘en_EN’
define(‘WPLANG’, ”);

// DB INTERNALS
define(‘DB_CHARSET’, ‘utf8mb4’);
define(‘DB_COLLATE’, ”);

// Database repair page
//define(‘WP_ALLOW_REPAIR’, true); // wp-admin/maint/repair.php

// DIRECTORY CUSTOMIZATION
// make it less obvious that your site is using wordpress.

// rename wp-content folder
// define( ‘WP_CONTENT_DIR’, dirname(__FILE__) . ‘/wp-content’ );
// define( ‘WP_CONTENT_URL’, WP_SITEURL.’/wp-content’);

// rename uploads folder
// define( ‘UPLOADS’, ‘/wp-content/uploads’ );

// rename plugins folder
// define( ‘WP_PLUGIN_DIR’, dirname(__FILE__) . ‘/wp-content/plugins’ );
// define( ‘WP_PLUGIN_URL’, WP_SITEURL.’/wp-content/plugins’);

// You cannot move the Themes folder, but your can register an additional theme directory
// register_theme_directory( dirname( __FILE__ ) . ‘/themes-dev’ );

// Prevent users from editing themes and plugins via the UI
define(‘DISALLOW_FILE_EDIT’, true); // Disable the Plugin and Theme Editor
define(‘DISALLOW_FILE_MODS’, false); // Disable WordPress Plugin and Theme Installation, Update and Delete

// Cron system
define( ‘DISABLE_WP_CRON’, true ); // If you can, disable wp_cron: use a real cronjob to trigger /wp-cron.php
//define( ‘WP_CRON_LOCK_TIMEOUT’, 120 ); // cron repeat interval
//define( ‘ALTERNATE_WP_CRON’, false ); // Issues with cron? Try this setting as a last resort.

// SSL
if (PROTOCOL === ‘https://&#8217;){
define( ‘FORCE_SSL_LOGIN’, true );
define( ‘FORCE_SSL_ADMIN’, true );
}

// If you don’t plan to post via email, decrease this
define(‘WP_MAIL_INTERVAL’, 604800); // 1 day (instead of 5 minutes)

// MEMORY ALLOCATION
define(‘WP_MEMORY_LIMIT’, ’64M’);
define(‘WP_MAX_MEMORY_LIMIT’, ‘256M’); // Admin area specifically

// Auto-updates
define(‘CORE_UPGRADE_SKIP_NEW_BUNDLED’, true); // Make WordPress core updates ONLY update the core without Akismet & Hello Dolly
define( ‘WP_AUTO_UPDATE_CORE’, false ); // Disable all core updates

/* ———————— OTHER CONSTANTS YOU COULD NEED ——————— */

// MEMORY ALLOCATION
//define(‘WP_DEFAULT_THEME’, ‘twentyeleven’); // Custom Default Theme

// Custom Database Table for Users
//define( ‘CUSTOM_USER_TABLE’, $table_prefix.’peeps’ );
//define( ‘CUSTOM_USER_META_TABLE’, $table_prefix.’peepmeta’ );

// Auto-updates
//define( ‘AUTOMATIC_UPDATER_DISABLED’, true ); // Disable all automatic updates
//define( ‘WP_AUTO_UPDATE_CORE’, true ); // Enable all core updates, including minor and major
//define( ‘WP_AUTO_UPDATE_CORE’, ‘minor’ ); // Enable core updates for minor releases (default)
//define( ‘DO_NOT_UPGRADE_GLOBAL_TABLES’, true ); // Disable DB Tables auto-update

/* ————————– STOP EDITING PAST THIS POINT ——————— */
$table_prefix = TABLE_PREFIX;

if(WP_DEBUG_LOG){
@ini_set(‘log_errors’,’On’);
}
if(WP_DEBUG_DISPLAY){
@ini_set(‘display_errors’,’On’);
}
// Adapt your servers to the chosen locale.
setlocale(LC_ALL, WPLANG);

// For compatibility with old plugins
define( ‘PLUGINDIR’, WP_PLUGIN_DIR );

/** Absolute path to WordPress. */
if ( !defined(‘ABSPATH’) )
define(‘ABSPATH’, dirname(__FILE__) . PATH_TO_WP);
require_once(ABSPATH . ‘wp-settings.php’);