Referral headers
By default we have Referrer-policy = same-originThis WILL strip referrers to all other domains, including your own subdomain. You could use this in your HTML of referral is absolutely neccessary for a href links:
Infra/stack
Forcing a letsencrypt certificate
Important before you do this: Visit the “External request” plugin from your hosting panel ans logged-in enduser. Not reseller level, you need enduser level. enter domain WITH www if it should cover www.fulldomain.com AND fulldomain.comORenter domain with subdomain if it should only cover thesubdomain.domain.com Follow instructions, this can take a minute if the 2 pre-conditions … Read more
Set varnish cache time without wp rocket cache
.htaccess, all pages, cache for 10 minutes, only for informative static sites:
How the 2FA mechanism works
Our plugin will generate a unique 2FA random token(text) along with an incremental serialnumber. As 2FA tokens are encrypted we cannot retrieve a token for you. Once generated, the created email will be handed over to your WordPress installation using wp_mail() to be actually sent over the internet. That means that after that we have … Read more
Buckaroo openssl_sign issue
As of writing make sure your openssl has SHA1 enabled.
Defaults wp-config
If your webserver is “w123c2” , this should be the default wp-config code.Please note the “123” in the code below and change accordingly.If your webserver ends with “c3”, please read the whole instruction further on this page. Warning There is one other syntax , which only applies if your webserverver ends with “c3”. Example: “w456c3”.Then … Read more
SPF
Warning: You are best to use a (transactional) SMTP provider and use their SPF DKIM and dmarc.See: https://www.publicdocumentation.com/email/ for more information. Cluster 1 (the Netherlands – Brabant) Cluster 2 (the Netherlands – Rotterdam) Cluster 3 (the Netherlands – Brabant) Location 4 (Germany – Frankfurt)
I want to overwrite WP Core (wp-admin, wp-includes, twenty-x themes and so on), may I?
No you may not. We run, secure and update all WP Core files. Do not modify any WP Core file, it will be automatically overwritten.
Rest/wp-json firewalling
Getting a 403 response ? Sent us: your _full_ : useragent, IP adress, domain, path. Before you do, check your home directory for managedwp_[date].txt logs. Do note that we block common bot user-agents such as curl or wget. Make sure your user-agent is human readable and unique.