Added notes to the SSL check notes
and added zip files to the gitignore for the bundled production zips
This commit is contained in:
1
.gitignore
vendored
1
.gitignore
vendored
@@ -3,3 +3,4 @@
|
|||||||
.dolt/
|
.dolt/
|
||||||
*.db
|
*.db
|
||||||
.beads-credential-key
|
.beads-credential-key
|
||||||
|
*.zip
|
||||||
|
|||||||
2
steps.md
2
steps.md
@@ -132,7 +132,7 @@ Confirm the site is still verified and Google can crawl/index it.
|
|||||||
|
|
||||||
### Step 8 — Security Check
|
### Step 8 — Security Check
|
||||||
|
|
||||||
- Confirm the SSL certificate is valid and not expiring within 30 days — flag if so
|
- Confirm the SSL certificate is valid and not expiring within 30 days — flag if so (check the uptime kuma log)
|
||||||
- Check the WordPress user list — flag any unfamiliar admin accounts
|
- Check the WordPress user list — flag any unfamiliar admin accounts
|
||||||
- Check for any recently modified core files if you have file change monitoring in place
|
- Check for any recently modified core files if you have file change monitoring in place
|
||||||
- Confirm the login URL is not the default /wp-admin if security hardening was previously applied
|
- Confirm the login URL is not the default /wp-admin if security hardening was previously applied
|
||||||
|
|||||||
Reference in New Issue
Block a user