Translations

By default, users who select the 'remember me' option will stay logged in for 14 days. If you and your users don’t need to login to your website backend regularly, it’s good practice to reduce this default time to reduce the risk of someone gaining access to your automatically logged in account.

By default, users who select the 'remember me' option will stay logged in for 14 days. If you and your users don’t need to login to your website backend regularly, it’s good practice to reduce this default time to reduce the risk of someone gaining access to your automatically logged in account.

Code

Code

3. Reload NGINX.

3. Reload NGINX.

Instructions

Instructions

We can’t automatically action this fix, but follow the instructions below to patch this up.

We can’t automatically action this fix, but follow the instructions below to patch this up.

We can automatically disable all error reporting for you below. Alternately, you can ignore this recommendation if you don't require it. Either way, you can easily revert these actions at any time.

We can automatically disable all error reporting for you below. Alternately, you can ignore this recommendation if you don't require it. Either way, you can easily revert these actions at any time.

While it may not be in use, we haven't found any code stopping debugging information being output. It's best to remove all doubt and disable error reporting completely.

While it may not be in use, we haven't found any code stopping debugging information being output. It's best to remove all doubt and disable error reporting completely.

Error debugging is currently allowed.

Error debugging is currently allowed.

You've disabled all error reporting, Houston will never report a problem.

You've disabled all error reporting, Houston will never report a problem.

Developers often use the built-in PHP and scripts error debugging feature, which displays code errors on the frontend of your website. It's useful for active development, but on live sites provides hackers yet another way to find loopholes in your site's security.

Developers often use the built-in PHP and scripts error debugging feature, which displays code errors on the frontend of your website. It's useful for active development, but on live sites provides hackers yet another way to find loopholes in your site's security.

Error Reporting

Error Reporting

We can automatically disable XML-RPC for you below. Alternately, you can ignore this recommendation if you don’t require it. Either way, you can easily revert these actions at any time.

We can automatically disable XML-RPC for you below. Alternately, you can ignore this recommendation if you don’t require it. Either way, you can easily revert these actions at any time.

In the past, there were security concerns with XML-RPC so we recommend making sure this feature is fully disabled if you don’t need it active.

In the past, there were security concerns with XML-RPC so we recommend making sure this feature is fully disabled if you don’t need it active.

XML-RPC is currently enabled.

XML-RPC is currently enabled.

If you are using the WordPress mobile app, want to make connections to services like IFTTT, or want to access and publish to your blog remotely, then you need XML-RPC enabled, otherwise it’s just another portal for hackers to target and exploit.

If you are using the WordPress mobile app, want to make connections to services like IFTTT, or want to access and publish to your blog remotely, then you need XML-RPC enabled, otherwise it’s just another portal for hackers to target and exploit.