How To Choose a Catchy Tagline For Your Blog Read More »
from RoadToBlogging https://ift.tt/2XcQL66
More View at https://mwktutor.com
How To Choose a Catchy Tagline For Your Blog Read More »
By default, WordPress makes certain directories writeable so that you and other authorized users on your website can easily upload themes, plugins, images, and videos to your website.
However this capability can be abused if it gets in the wrong hand such as hackers who can use it to upload backdoor access files or malware to your website.
These malicious files are often disguised as core WordPress files. They are mostly written in PHP and can run in the background to gain full access to every aspect of your website.
Sounds scary, right?
Don’t worry there is an easy fix for that. Basically, you’d simply disable PHP execution in certain directories where you don’t need it. Doing so, any PHP files will not run inside those directories.
In this article, we will show you how to disable PHP execution in WordPress using the .htaccess file.
Most WordPress sites have a .htaccess file in the root folder. This is a powerful configuration file used to password protect admin area, disable directory browsing, generate SEO friendly URL structure, and more.
By default, the .htaccess file located in your WordPress website’s root folder, but you can also create and use it inside your inner WordPress directories.
To protect your website from backdoor access files, you need to create a .htaccess file and upload it to your site’s /wp-includes/ and /wp-content/uploads/ directories.
Simply create a blank file on your computer by using a text editor like Notepad (TextEdit on Mac). Save the file as .htaccess and paste the following code inside it.
<Files *.php> deny from all </Files>
Now save the file on your computer.
Next, you need to upload this file to /wp-includes/ and /wp-content/uploads/ folders on your WordPress hosting server.
You can upload it by using an FTP client or via File Manager app in your hosting account’s cPanel dashboard.
Once the .htaccess file with the above code is added, it will stop any PHP file to run in these directories.
Using this .htaccess trick helps you harden your WordPress security, but it is not a FIX for an already hacked WordPress site.
Backdoors are cleverly disguised and can already be hidden in plain sight.
If you want to check for possible backdoors on your website, then you need to activate Sucuri on your website.
Sucuri is the best WordPress security plugin on the market. It scans your website for possible threats, suspicious code, malware, and vulnerabilities.
It also effectively blocks most hacking attempts to even reach your website by adding a firewall between your site and suspicious traffic.
Most importantly, if your WordPress site gets hacked, then they will clean it up for you. To learn more, you can check our Sucuri review because we have been using their service for years.
We hope this article helped you to learn how to disable PHP execution in certain WordPress directories to harden your website security. If you are looking for a complete guide, check out our ultimate WordPress security guide.
If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.
The post How to Disable PHP Execution in Certain WordPress Directories appeared first on WPBeginner.
Do you want to display the total number of comments on your WordPress site?
Comments allow users to participate and engage with the content on your website. By showing off the total comment count, you can encourage more users to join the conversation.
In this article, we will show you how to easily display the total number of comments in WordPress, with or without a plugin.
This method is easier and it is recommended for all users. Instead of writing code, you’ll be using a plugin to display comment count in WordPress.
First, you need to install and activate the Simple Blog Stats plugin. You may read our step by step guide on how to install a WordPress plugin for detailed instructions.
Upon activation, go to Settings » Simple Blog Stats page to configure plugin settings.
On this page, you’ll see all the shortcodes that you can use to show different stats like the total number of comments, registered users, number of posts, categories, page count, and more.
You need to copy the shortcode [sbs_approved]
to display the total number of approved comments on your WordPress site.
If you want to display it in a post or page, then simply create a new post or edit an existing one.
On the post edit screen, you need to add the shortcode block in the WordPress content editor.
You can do this by clicking on the Add block (+) icon and then search for the shortcode block. Once you find it, you need to click on it to add the shortcode block to the editor.
Next, you need to paste the shortcode [sbs_approved]
inside the block settings.
You can add any text you want to display before or after the shortcode.
Alternatively, you can also use the shortcode inside a paragraph block. Simply copy and paste the shortcode where you want to display the comment count.
Using the paragraph block will also allow you to use the text styling option available in the WordPress block editor.
Once you are done, click on the publish or update button to save your changes. You can now visit your website to see your changes in action.
Displaying total comment count in a sidebar widget
You can also use the same shortcode inside a WordPress widget and display it in your blog’s sidebar.
Simply head over to the Appearance » Widgets page and add a ‘Text’ widget to the sidebar.
Next, go ahead and paste your shortcode inside the ‘Text’ widget.
Don’t forget to click on the ‘Save’ button to store your widget settings.
You can now visit your website to see the widget in action.
If you don’t want to use a plugin, then you can use display the total comment count manually.
This method requires you to add a code snippet to your website. If you haven’t done this before, then please check out our guide on how to copy and paste code snippets in WordPress.
Before you do anything, you should make a full backup of your website. This will help you to restore your site in case you break anything while editing the theme files.
Now you need to add the following code to your theme’s functions.php file or a site-specific plugin:
function wpb_comment_count() { $comments_count = wp_count_comments(); $message = 'There are <strong>'. $comments_count->approved . '</strong> comments posted by our users.'; return $message; } add_shortcode('wpb_total_comments','wpb_comment_count');
This code creates a function that outputs the total number of approved WordPress comments on your site. It also creates a shortcode to display it.
You can now use the shortcode [wpb_total_comments]
in your posts, pages, or a text widget to display the total number of comments on your website.
This is how it looked on our demo site:
We hope this article helped you display the total number of comments on your WordPress site. You may also want to check out our guide on how to prevent comment spam in WordPress and the best WordPress plugins for every website.
If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.
The post How to Display the Total Number of Comments in WordPress appeared first on WPBeginner.
WordPress is one of the best examples of how businesses can thrive in an open source ecosystem. With contributions made by thousands of ingenious developers and entrepreneurs worldwide, WordPress is growing fast by attracting thousands of new users every day.
As of today, WordPress powers more than 34% of all websites on the internet. Many companies make their entire revenue by providing WordPress related products and services. The WordPress business ecosystem generates several billion dollars each year.
Although WordPress itself is free, users need a variety of services to make a website including domain name, web hosting, premium WordPress themes, plugins, maintenance, and more. These are the services top WordPress companies are selling.
In this article, we will highlight some of the most successful WordPress businesses and companies today. Hopefully, this will inspire others to start their own WordPress focused businesses.
Founded by WordPress co-founder, Matt Mullenweg, Automattic is the company behind the popular blog hosting service WordPress.com (See the difference between WordPress.com vs self-hosted WordPress.org).
Automattic is also the parent company of several other popular WordPress products and services like WooCommerce, JetPack, Akismet, VaultPress, and Gravatar.
Here are some stats and facts about top Automattic products.
Automattic heavily contributes to open source WordPress.org, bbPress, and BuddyPress projects. In terms of influence, revenue, and the overall user base, Automattic is definitely among the top WordPress businesses and companies.
WP Engine is the most popular managed WordPress hosting company in the market. It offers hassle-free, fast, and secure web hosting service for WordPress sites of all sizes.
Loved by developers, site owners, and venture capital firms, WP Engine is among the fastest growing companies in WordPress.
Here are some important stats and facts about WP Engine.
Besides hosting services, WP Engine is also the parent company of popular WordPress design and theme company StudioPress (acquired in 2018), and Torque WordPress blog.
WP Engine hosting plans come with the popular Genesis design framework and 35+ premium themes worth $2000 by StudioPress for free.
Awesome Motive is the parent company of WPBeginner, the largest free WordPress resource site. WPBeginner features the most beginner-friendly tutorials and guides for WordPress.
Founded by Syed Balkhi, the company sells several WordPress related products like WPForms, MonsterInsights, SeedProd and the best-selling lead generation software OptinMonster.
Here are some important stats and facts about Awesome Motive and their products:
Besides, it runs IsitWP, a WordPress technology lookup tool and blog, and other free plugins like Insert Headers and Footers.
Started by Joost de Valk, Yoast is the most successful WordPress SEO (Search Engine Optimization) business. It provides a full package of SEO products and services, helping millions of users with the optimization of their WordPress sites.
Yoast is the company behind the immensely popular WordPress SEO by Yoast plugin. In addition to their standard SEO plugin, they offer many related SEO plugins like Local SEO, Video SEO, News SEO, WooCommerce SEO, and other plugins like Yoast Comment Hacks, SlideShare for WordPress, etc.
Here are some important stats and facts about Yoast and their products.
Yoast also offers website SEO, conversion reviews, and auditing services. Their client lists include some of the world’s biggest brands.
Envato runs the popular marketplace websites ThemeForest and CodeCanyon. These are probably the second most popular destination for WordPress themes and plugins.
Despite the license controversies in the past, Envato is one of the most influential WordPress businesses today.
Here’re some important stats and facts about Envato and their products.
In addition to the premium themes and plugins, Envato offers a wide range of web design products, including logo maker, video maker, tutorials, stock photos, and more.
Elegant Themes is one of the most successful WordPress theme development companies in the world. They are the people behind the most popular WordPress theme Divi and the WordPress page builder plugin Divi Builder.
Moreover, it features Bloom email optin plugin, Monarch social sharing plugin, and several other plugins and themes.
Here’re some important stats and facts about Elegant Themes and their products.
Apart from the themes and plugins, Elegant Themes also runs a popular WordPress blog where they publish helpful tutorials and guides.
Caseproof is the parent company behind popular WordPress plugins MemberPress, Pretty Links, and Affiliate Royale.
MemberPress is the best WordPress membership plugin used by thousands of users to create a membership site in WordPress. Pretty Links helps to turn your ugly long affiliate links into short trackable links. And, Affiliate Royale plugin lets you create a complete affiliate program of your own.
Here are some important stats and facts about Caseproof and their products.
Caseproof, with its brilliant products, is the industry leader for membership and affiliate plugin companies.
Note: WPBeginner founder, Syed Balkhi, is an investor in CaseProof.
Modern Tribe is a WordPress design and development agency with a twist. They are a collaborative organization of all freelancers and experts. It is a company of 72 talented teammates in 5 countries and 45 cities.
The company offers a wide range of services, including WordPress expertise, strategy, user experience design, and more. They are also the creators of The Events Calendar plugin.
Here are some important stats and facts about Modern Tribe.
They have designed websites and built software for fortune 500 companies, government institutions, as well as start-up companies. Their clients include Harvard, eBay, Mozilla, MTV, and more.
IncSub is the company behind WPMU DEV, CampusPress, and Edublogs. The WPMU DEV site offers managed WordPress hosting, support, site management, and plugins.
The CampusPress helps universities and other academic institutions build and manage websites in WordPress. And, Edublogs is the blog platform for individual teachers and students.
Here are some important stats and facts about IncSub and its products.
IncSub is one of the most influential companies in WordPress speed optimization and leader in WordPress for education.
SkyeVerge is the company behind over 50 premium extensions for WooCommerce and the Jilt eCommerce email marketing tool.
They are the leading partner developer for WooCommerce.com. They have built 66 free and paid WooCommerce extensions including WooCommerce Memberships, WooCommerce Google Analytics Pro, and more.
Here are some important stats and facts about SkyVerge and their products.
Their other product Jilt is an email marketing and automation tool for the popular eCommerce platforms WooCommerce, Easy Digital Downloads, and Shopify.
Founded by Pippin Williamson, Sandhills Development is the company behind the immensely popular Easy Digital Downloads, AffiliateWP, and Restrict Content Pro plugins. The company was formerly known as Pippin’s Plugins.
In a short period, the company has developed a huge customer base and a strong following among the WordPress community.
Here are some vital stats and facts about Sandhills Development and its products.
Their other plugins are also popular among WordPress users. Restrict Content Pro is one of the best membership plugins for WordPress. AffiliateWP lets you create a full-featured affiliate program (a good alternative to the Affiliate Royale plugin).
WordFence is the global leader in WordPress security. It is the most popular WordPress firewall and malware scanner plugin in the market.
Here are some important stats and facts about WordFence.
It also provides WordPress site cleaning and audit services.
The UK based WordPress design and development agency, Human Made is an official WordPress.com VIP partner. They specialize in enterprise scale development for global brands like News UK, USA Today, TechCrunch, Sony, PayPal, Skype, Airbnb, and many more.
Here are some important stats and facts about Human Made.
They also offer several free and paid WordPress plugins like WPRemote, BackupWordPress, WPThumb, and WordPress Menu Exporter.
Web Dev Studios is one of the leading WordPress design and development agencies. They have authored several books on WordPress and are actively involved in the WordPress community.
They have also contributed to several top-rated WordPress plugins like Custom Post Types UI, CMB2, Automatic Featured Images from Videos and many more.
Here are some important stats and facts about Web Dev Studios and their products.
Their clients include several big name brands like Microsoft, Viacom, Time, MSNBC, NBC, and WPEngine.
WP Media is the company behind the popular caching and speed optimization plugin WP Rocket. They are also the people behind Imagify, online image compression tool.
Here are some important stats and facts about WP Media and their products.
Also, they are the creators of WP Quick Install, which helps you install WordPress, themes, and plugins in an instant.
WPML is the #1 WordPress multilingual plugin, which lets you create multilingual website in WordPress.
Here are some important stats and facts about WPML.
WPML is a product of a company named OnTheGoSystems. Apart from WPML, they run ICanLocalize, a translation service with professional human translators.
UpdraftPlus is the most trusted WordPress backup plugin in the market. It is used by world’s top organizations like Microsoft, NASA, NBA, P&G, Princeton University, and more.
Most popular WordPress blogs like WPBeginner, Torque, WMPU DEV, Elegant Themes recommend UpdraftPlus for creating WordPress backup.
Here are some important stats and facts about UpdraftPlus.
They also offer UpdraftMigrator tool for simple WordPress migration and UpdraftCemtral for backing up multiple websites at one place quickly.
Imagely is the industry-leading provider of WordPress products and services for photographers. They have created many top-selling WordPress photography themes and plugins.
NextGEN Gallery is one of the most popular image gallery plugins for WordPress. The core plugin is free, but you need to buy its paid extensions to get its full features.
Here are some vital stats and facts about Imagely and their products.
Imagely also owns a renowned WordPress theme company Tesla Themes, which features more than 60 professional WordPress themes, used on more than 125,000 websites.
Elementor Ltd is the company behind the popular WordPress page builder, Elementor. Their drag and drop page builder is now powering over 2 million websites, and it is one of the fastest growing plugins in WordPress right now.
Elementor is also behind a popular theme shop called Pojo themes.
Themify is a premium WordPress theme and plugins shop. They are the people behind the powerful drag and drop page builder plugin Themify Builder.
Themify offers WordPress themes in different categories, catering to the needs of various industries.
Here are some important stats and facts about Themify and their products.
Themify also offers a club membership where users can access all their products with a subscription program.
Beaver Builder is the best drag and drop page builder plugin for WordPress. It lets you create stunning WordPress landing pages easily and quickly.
Beaver Builder includes 30+ professional templates for landing pages and content pages. It also includes Beaver Builder theme framework for its Pro plan users.
Here are some important stats and facts about Beaver Builder.
Started in 2014, Beaver Builder is one of the fastest-growing WordPress products in the market.
10up is a web design and consulting firm specializing in open source platforms like WordPress.
10up contributes hours of development back to the WordPress project by submitting patches and employing dedicated staff to work on the WordPress.org project.
Here are some important stats and facts about 10up.
10up is also one of the featured WordPress.com VIP partners. The company has an impressive list of clients with brands like TechCrunch and organizations like the World Economic Forum.
GoDaddy is the world’s largest domain name registrar with more than 78 million domain names under its management. It is also a provider of cheap shared hosting for WordPress.
In addition to the domain and hosting services, GoDaddy also runs popular WordPress products and services like ManageWP, and Sucuri.
Here are some important stats and facts about GoDaddy and their products.
Sucuri is trusted by top WordPress companies like WPBeginner, Yoast, WP Engine, as well as the top organizations like Miami University, HarperCollins, and more.
Bluehost is one of the best WordPress hosting providers in the world. They are an official WordPress.org recommended hosting provider.
Bluehost is one of the subsidiary brands of Endurance International Group. The company is also the parent company of several brands like HostGator, Constant Contact, Domain.com, and many more.
Here are some important stats and facts about Bluehost and other Endurance company products.
Endurance also owns the MOJO Marketplace which features tons of commercial WordPress themes and plugins.
SiteGround is another WordPress hosting company officially recommended by WordPress.org. It offers fast and secure hosting plans for WordPress.
SiteGround also provides managed WooCommerce hosting service for WordPress based online stores. It includes hassle-free WooCommercce integration as well as migration.
Here are some important stats and facts about SiteGround.
SiteGround offers speedy customer service, and it is top rated for customer satisfaction.
The WordPress ecosystem is evolving rapidly, and new companies are appearing regularly. Many of them will soon grow to become an influential WordPress business in their own niches.
There is plenty of room for new businesses to join the WordPress ecosystem, and hopefully, we will see many more new companies rise to the top soon.
We hope this article helped you to find out the most successful WordPress companies and businesses today. You may also want to take a look at our list of the top brands using WordPress.
If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.
The post 25 Most Successful WordPress Businesses and Companies Today appeared first on WPBeginner.
Do you want to embed individual tweets in your WordPress blog posts? Embedding Tweets in your blog posts allows you to easily quote tweets inside your posts as well as make them more engaging.
You may have seen many popular blogs and news websites embedding tweets from organizations and individuals in their articles.
It makes the quotes more authentic while allowing your users to follow the full conversations for more information.
In this article, we will show you how to easily embed tweets in WordPress blog posts and pages.
WordPress makes it easy to embed third-party services in your blog posts. This includes YouTube videos, Facebook updates, Tweets, and many more items.
This feature uses a method called oEmbed. Basically, you can just add the URL of a third-party website, and WordPress will request an embed code from them.
You can only add whitelisted oEmbed services in WordPress, and Twitter is one of those services.
The new WordPress block editor has added even more user-friendly options to embed tweets in WordPress.
It comes with a built-in Twitter embed block to let you easily insert tweets in your posts and pages.
Let’s take a look at how to embed tweets in WordPress blog posts.
First, you need to go to Twitter and find the tweet that you want to embed.
Next, click on the down arrow icon on the right, and then select ‘Copy link to Tweet’ option.
After that, you will see ‘Link copied.’ message on the top. Now you need to paste the link in your WordPress editor.
Create a new post or open an existing post from your WordPress dashboard, and then click ‘Add New Block’ button. Next, you will need to choose the ‘Twitter’ block under ‘Embeds’ section.
You’ll now see the Twitter Embed block added into the post edit area. You need to paste the Twitter URL that you copied earlier in the block settings.
WordPress will now automatically fetch and display the actual tweet in your post content.
You can save your post or publish it to see a live preview.
This is how it looked on our demo website.
Pro Tip: You can also paste the Tweet URL in a paragraph block and WordPress will automatically convert it into a Twitter embed block.
If you are still using the old WordPress classic editor, then you will need to copy and paste the tweet link directly in the post editor.
Unlike the block editor, the classic editor is a single text box for your whole content.
That’s why you need to paste the tweet URL in a separate line in the editor.
Once done, it will immediately load the actual tweet in your post editor.
Now you can save and preview your post.
That’s it! It’s pretty simple and quick.
We hope this article helped you to learn how to embed actual tweet in WordPress blog posts. You may also want to see our guide on how to easily embed videos in WordPress blog posts.
If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.
The post How to Embed Actual Tweets in WordPress Blog Posts appeared first on WPBeginner.
By default, WordPress makes certain directories writeable so that you and other authorized users on your website can easily upload themes, plugins, images, and videos to your website.
However this capability can be abused if it gets in the wrong hand such as hackers who can use it to upload backdoor access files or malware to your website.
These malicious files are often disguised as core WordPress files. They are mostly written in PHP and can run in the background to gain full access to every aspect of your website.
Sounds scary, right?
Don’t worry there is an easy fix for that. Basically, you’d simply disable PHP execution in certain directories where you don’t need it. Doing so, any PHP files will not run inside those directories.
In this article, we will show you how to disable PHP execution in WordPress using the .htaccess file.
Most WordPress sites have a .htaccess file in the root folder. This is a powerful configuration file used to password protect admin area, disable directory browsing, generate SEO friendly URL structure, and more.
By default, the .htaccess file located in your WordPress website’s root folder, but you can also create and use it inside your inner WordPress directories.
To protect your website from backdoor access files, you need to create a .htaccess file and upload it to your site’s /wp-includes/ and /wp-content/uploads/ directories.
Simply create a blank file on your computer by using a text editor like Notepad (TextEdit on Mac). Save the file as .htaccess and paste the following code inside it.
<Files *.php> deny from all </Files>
Now save the file on your computer.
Next, you need to upload this file to /wp-includes/ and /wp-content/uploads/ folders on your WordPress hosting server.
You can upload it by using an FTP client or via File Manager app in your hosting account’s cPanel dashboard.
Once the .htaccess file with the above code is added, it will stop any PHP file to run in these directories.
Using this .htaccess trick helps you harden your WordPress security, but it is not a FIX for an already hacked WordPress site.
Backdoors are cleverly disguised and can already be hidden in plain sight.
If you want to check for possible backdoors on your website, then you need to activate Sucuri on your website.
Sucuri is the best WordPress security plugin on the market. It scans your website for possible threats, suspicious code, malware, and vulnerabilities.
It also effectively blocks most hacking attempts to even reach your website by adding a firewall between your site and suspicious traffic.
Most importantly, if your WordPress site gets hacked, then they will clean it up for you. To learn more, you can check our Sucuri review because we have been using their service for years.
We hope this article helped you to learn how to disable PHP execution in certain WordPress directories to harden your website security. If you are looking for a complete guide, check out our ultimate WordPress security guide.
If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.
The post How to Disable PHP Execution in Certain WordPress Directories appeared first on WPBeginner.