Added notes to the SSL check notes
and added zip files to the gitignore for the bundled production zips
This commit is contained in:
1
.gitignore
vendored
1
.gitignore
vendored
@@ -3,3 +3,4 @@
|
||||
.dolt/
|
||||
*.db
|
||||
.beads-credential-key
|
||||
*.zip
|
||||
|
||||
2
steps.md
2
steps.md
@@ -132,7 +132,7 @@ Confirm the site is still verified and Google can crawl/index it.
|
||||
|
||||
### Step 8 — Security Check
|
||||
|
||||
- Confirm the SSL certificate is valid and not expiring within 30 days — flag if so
|
||||
- Confirm the SSL certificate is valid and not expiring within 30 days — flag if so (check the uptime kuma log)
|
||||
- Check the WordPress user list — flag any unfamiliar admin accounts
|
||||
- Check for any recently modified core files if you have file change monitoring in place
|
||||
- Confirm the login URL is not the default /wp-admin if security hardening was previously applied
|
||||
|
||||
Reference in New Issue
Block a user