Added notes to the SSL check notes

and added zip files to the gitignore for the bundled production zips
This commit is contained in:
2026-07-17 10:53:38 +01:00
parent 3159ca7999
commit 6e7820630e
2 changed files with 2 additions and 1 deletions

1
.gitignore vendored
View File

@@ -3,3 +3,4 @@
.dolt/ .dolt/
*.db *.db
.beads-credential-key .beads-credential-key
*.zip

View File

@@ -132,7 +132,7 @@ Confirm the site is still verified and Google can crawl/index it.
### Step 8 — Security Check ### Step 8 — Security Check
- Confirm the SSL certificate is valid and not expiring within 30 days — flag if so - Confirm the SSL certificate is valid and not expiring within 30 days — flag if so (check the uptime kuma log)
- Check the WordPress user list — flag any unfamiliar admin accounts - Check the WordPress user list — flag any unfamiliar admin accounts
- Check for any recently modified core files if you have file change monitoring in place - Check for any recently modified core files if you have file change monitoring in place
- Confirm the login URL is not the default /wp-admin if security hardening was previously applied - Confirm the login URL is not the default /wp-admin if security hardening was previously applied