Joomla 3.4.6, how an ordinary browser header took over the server
One of the most famous flaws in Joomla's history let you take over a site without logging in, all it took was to craft the header your browser sends.
Read more →Practical guides on the security, speed, and care of your website, written in plain language.
No articles match your search. Try another word.
One of the most famous flaws in Joomla's history let you take over a site without logging in, all it took was to craft the header your browser sends.
Read more →You changed a page address or deleted something, and now customers hit "page does not exist". It costs traffic and rankings. We explain 404 errors and 301 redirects in plain words.
Read more →Not every break-in is a sophisticated attack. Most often the attacker simply types in a password that leaked from a completely different service. It is called credential stuffing.
Read more →Weekly digest of the most important WordPress and Joomla vulnerabilities. This week we recorded 104 vulnerabilities; check whether any of them affects your website.
Read more →Thinking about moving from Joomla to WordPress? We explain when it makes sense, what the migration looks like step by step, and how not to lose content or Google rankings.
Read more →Behind a "free" version of a paid plugin there is often ready-made malware. WP-VCD is one of the most widespread families of WordPress infection and a classic example of how it works.
Read more →