Category: Security

  • Escaping strings in WordPress

    What is escaping, and why escape? Put simply, escaping is making sure that data that is output to end users is rendered securely. Escaped data has had defensive measures applied to it, to prevent injection attacks (see the OWASP for a more in-depth reference here). The reason we have to escape is that we can…

  • Is your WordPress website secure?

    WordPress is a popular CMS and as such it is a target for hackers. There are several steps you can take to ensure your site is as secure as possible.