Lynxbee topic

Web Security

Articles about Web Security.

Move a WordPress Site from HTTP to HTTPS

A WordPress HTTPS migration is more than installing a certificate. Move the site without redirect loops or broken media by validating TLS and proxy behavior, backing up, updating URLs with serialization-aware tools, fixing mixed content, publishing one-hop permanent redirects, and monitoring search and application traffic.

Create Custom Meta Descriptions in Osclass

Osclass already provides a site description and a `meta_description_filter` extension point. Use a plugin to choose concise page-specific text, leave escaping to one known output boundary, and verify the rendered canonical pages instead of editing core files.

WordPress Login Link That Returns to the Current Page

Show a login prompt only when a WordPress visitor is signed out, then return them to the page they were reading. The secure implementation uses core URL helpers, escaped output, local destinations, page exclusions, and cache-aware verification.

Create and Secure a Django Admin Account

Create a Django administrator without leaking credentials or weakening password validation. Then verify the account, recover access safely, understand staff versus superuser privileges, and troubleshoot the admin login in development and production.

Add reCAPTCHA to a Form Without Trusting the Browser

A reCAPTCHA widget is only the browser half of the control. This implementation verifies each short-lived, single-use token on the server, checks the expected hostname, handles failures safely, and layers reCAPTCHA with ordinary anti-abuse controls.

Engineering weekly

Useful technical knowledge, not inbox noise.

Receive verified fixes, references, labs, and tools. Confirm by email; unsubscribe any time.