From 6e7820630e4a47e973e7fb11edc284b42eaf5da5 Mon Sep 17 00:00:00 2001 From: Steve Hanlon Date: Fri, 17 Jul 2026 10:53:38 +0100 Subject: [PATCH] Added notes to the SSL check notes and added zip files to the gitignore for the bundled production zips --- .gitignore | 1 + steps.md | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index 2a04c86..9c71ff5 100644 --- a/.gitignore +++ b/.gitignore @@ -3,3 +3,4 @@ .dolt/ *.db .beads-credential-key +*.zip diff --git a/steps.md b/steps.md index 4b6ee5a..9cc7d5d 100644 --- a/steps.md +++ b/steps.md @@ -132,7 +132,7 @@ Confirm the site is still verified and Google can crawl/index it. ### Step 8 — Security Check -- Confirm the SSL certificate is valid and not expiring within 30 days — flag if so +- Confirm the SSL certificate is valid and not expiring within 30 days — flag if so (check the uptime kuma log) - Check the WordPress user list — flag any unfamiliar admin accounts - Check for any recently modified core files if you have file change monitoring in place - Confirm the login URL is not the default /wp-admin if security hardening was previously applied