• Disabling WordPress public REST API

    I've recently found that the public WP REST API endpoints within WordPress can provide information which can be used in 'hacking' attempts. One such endpoint is '/wp-json/wp/v2/users' (e.g. https://yourdomain.com/wp-json/wp/v2/users), this will display Admin usernames to any unauthenticated user. There are a couple of way to mitigate this risk, install the Disable REST API or add...
  • Notifying Google of an XML sitemap via a URL

    Today I found out you can easily notify Google of an XML sitemap by ‘pinging’ Google via a GET request: http://www.google.com/webmasters/sitemaps/ping?sitemap=URLOFSITEMAP.xml You can perform this via PHP, or if running on Linux; use wget.
  • Websites of the month: August 2017

    Parallax   BaySentry   Waymo   CitiPark   Teachable   Made By Google   Marvel App   Help Scout   Simply Measured   Mapbox   Quickbase
  • Quick and Easy SSL chipers

    I’ve recently came across the https://cipherli.st/ site, from the cron.weekly email newsletter (I highly suggest you sign-up, some great posts and sites featured). Cipherli.st allows you to copy and paste SSL ciphers for a variety of web software (Apache, Nginx, etc.).
  • Favourite typefaces of 2017 so far

    This list features some of my favourite typefaces so far for 2017. Most are from websites I have seen over the past couple of months, others are ones I Have known about for a while – see the list below     Activ Groteske By Dalton Maag Download: https://www.daltonmaag.com/library/aktiv-grotesk Price: Paid, dependant on styles and ...