Secure URL Attacks
Noticed in our logs that a lot of the websites we operate are often targeted by Internet users that attempt to execute malicious scripts by hoping they can include an external page, we script to prevent this. But as an extra line of defense we use the following code in wp-config.php:
if (strpos($_SERVER['REQUEST_URI'] , "http://")){
exit;
}
If someone should try to include an external URL this stops them in their tracks, simple.
.html on PAGES plugin .html Wordpress permalink on PAGES pluginCorrect Title Case Correct Wordpress Title Case FunctionRemove view all posts Strip 'view all posts filed under' from Cat MenuSecure URL Attacks Help Secure Wordpress From URL Include Attacks
Develop
Projects
Tips