Marian Zburlea

When the most recent Adobe Commerce and Magento security patches were released last month, 100% of our clients were fully patched and live in production within 48 hours, the majority of them the same day. That included: ✅ Applying the patch ✅ Testing for stability ✅ Deploying to staging ✅ Full QA ✅ Deploying to production No panic. No firefighting. No excessive estimations. Just a clear process, executed quickly and reliably, without distracting your team. 👉 The next security patch is currently October 14th. If patch day currently feels like expensive chaos that disrupts the roadmap, now’s the time to rethink your approach.

45

1 Comment

After an inspiring week at WordCamp US, it feels like the perfect moment to revisit some WordPress security best practices.   The most effective WordPress security works silently, protecting your site 24/7 without disrupting your users. And it's more than just installing plugins. It’s about combining core configuration, secure workflows, and hosting-level defenses to create a layered protection strategy.   Here are seven foundational practices that work for beginners and can scale into advanced strategies for professionals:   1️⃣ Secure Admin Access One of the simplest yet most effective steps is to change the default /wp-admin/ URL to a custom path. In addition, restrict access to the admin area so only trusted IP addresses can log in. This way, even if an attacker obtains valid credentials, they cannot reach the login page.   2️⃣ Block User Enumeration via the REST API By default, the endpoint /wp-json/wp/v2/users can expose usernames and user IDs to anyone. This information is often used in brute-force attacks. Restricting this endpoint so it is only accessible to authenticated users helps protect sensitive account details.   3️⃣ Keep Everything Updated Updating WordPress core, themes, and plugins promptly is critical. In 2024 alone, more than 7,900 vulnerabilities were reported, and most were linked to plugins. Applying updates quickly closes known security gaps before they can be exploited.   4️⃣ Rotate Security Keys, Passwords, and API Keys Regularly changing your WordPress salt keys will invalidate old user sessions, while updating admin passwords and rotating API keys reduces the risk of unauthorized access. This practice ensures that compromised credentials cannot be reused.   5️⃣ Tighten File Permissions Restricting write access to only the files and folders that need it helps block common attack paths, such as unauthorized file uploads or modifications. This limits what an attacker could do even if they gain partial access.   6️⃣ Minimize Plugins Every installed plugin, whether active or inactive, is a potential security risk. Removing unused plugins not only reduces vulnerabilities but also improves performance and keeps your site easier to maintain.   7️⃣ Use Hosting-Level Security Measures Firewalls, malware scanning, and automated backups running at the hosting level create an essential layer of defense. These tools can stop many threats before they ever reach your WordPress site, and backups ensure you can recover quickly if an incident occurs.   The best WordPress security is proactive, layered, and largely invisible to visitors. By combining secure configuration, disciplined maintenance, and robust hosting-level protection, you can significantly reduce your attack surface.   What’s one security step you never skip when building or managing a WordPress site? #WordPress #Security #BestPractices #strategies #protection

30

1 Comment

🛠️ Working with unmanaged files in Drupal In Part 2 of his tutorial series, Jeff G. (The Accidental Coder) shows how to: • Build a custom unmanaged_files module • Create a service that scans a folder and returns a random file • Test it with a simple route that renders an image This hands-on walkthrough demonstrates how Drupal can work with files outside its entity system — paving the way for more flexible use cases. Read the full tutorial via The Drop Times: 🔗 https://lnkd.in/g4aQRmXx #Drupal #WebDev #OpenSource #Tutorials

23

Will AI replace developers? Here's the version of the answer by Peter Suhm from stage of Laravel Live UK. **Code will be cheaper** Code will be a lot cheaper as the AI to human ratio increases. **There will be more code** Code will be applied to more domains as it gets cheaper. **Someone will be liable** Managers will still want someone to blame. Will it be enough to blame an AI? **Coding will change** As the AI to human ratio increases, the role of the humans will change.

36

Want to organize your Drupal content forms better? Field Group lets you move field widgets to the sidebar area for cleaner layouts. Here's how: ➡️ Go to Structure > Content Types > Manage Form Display ➡️ Click "Add Field Group" ➡️ Select "Details Sidebar" from the dropdown options ➡️ Give your field group a descriptive label ➡️ Drag the fields you want into this sidebar group ➡️ Set the weight to control positioning (use negative values like -100 for top placement) ➡️ Save the config This approach works well for metadata fields, layout controls, or settings that modify page appearance. Instead of mixing these fields with main content, they stay organized in a dedicated sidebar area. I use this regularly for fields like show/hide toggles for titles, breadcrumbs, or other page elements. It keeps the main content area focused while giving editors easy access to page configuration options. #drupal #drupalcms ~~~ If you found this post helpful. ♻️ Please repost and follow.

18

1 Comment

It's official - on Jan 5th, Drupal 7 reached end of life 🪦... So what now? With all D7 security updates and bug fixes ceasing, it's time for users to make a choice: upgrade, or migrate 🤔 We've got 6 excellent reasons why a move to WordPress is the right choice for enterprises 👇 1️⃣ Cost-efficiency in migration and maintenance 2️⃣ User-friendly content management for empowered teams 3️⃣ Flexible & scalable architecture for enterprise growth 4️⃣ Enhanced security with enterprise-grade solutions 5️⃣ An expansive plugin ecosystem, minimising custom dev costs 6️⃣ Future-ready with strong community and open-source commitment Migrating to WordPress can mean more than just a new CMS—it’s about creating a sustainable, agile foundation that grows with your business, without the costly overhauls. Swipe to explore why WordPress is the right choice for your enterprise 👉 #WordPress #Drupal #CMS

19

4 Comments