WordPress Security Auditing, Applied

David Hayes (02.Nov.2018 at 13:30, 3 hr )
Workshop at Madison PHP Conference 2018 (English - US)

Rating: 5 of 5

I love WordPress. But WordPress sites are regularly compromised by bad code (and a lack of updates), that's the ugly truth of the situation. In this workshop we'll work to make sure that our code is never the reason that such a thing could happen. We'll start with a discussion of the security essentials for WordPress, and then in WP and PHP code. Then we'll dive into code, auditing and fixing a plugin with real and common security vulnerabilities. At the end, we'll gather back together and talk about what we found and what we missed.

Who are you?

Claim talk

Talk claims have been moved to the new Joind.in site.

Please login to the new site to claim your talk

Want to comment on this talk? Log in or create a new account or comment anonymously

Write a comment

 
Please note: you are not logged in and will be posting anonymously!
= six minus two

Comments

Rating: 5 of 5

03.Nov.2018 at 13:26 by Jeff Hegeman (10 comments) via Web2 LIVE

Good look at WP security

Rating: 5 of 5

04.Nov.2018 at 18:53 by Alex Fraundorf (30 comments) via Web2 LIVE

This was a very good discussion and workshop on debugging and auditing a plugin for security, especially the best way to harden a plugin in a "Wordpressy" way, for those of us new to WordPress.
Thank you.

© Joind.in 2018