Differences

This shows you the differences between two versions of the page.

--- projects:todo [2026/09/27 22:03] – ToDo checked: Advertise Alt-Svc support for HTTP/2 and HTTP/3. BLUG Admin
+++ projects:todo [2026/10/14 21:46] (current) – ToDo checked: WordPress's MySQL user should have reduced privileges, not a "allow everything for this database". BLUG Admin
@@ Line 33: / Line 33: @@
 ==== PHP ====
-  * <todo>Completely reinstall WordPress as a Trojan precaution.</todo>
+  * <todo #shenmedouxing:2026-10-14>Completely reinstall WordPress as a Trojan precaution.</todo>
-  * <todo>Run WordPress with read-only</todo> ''/var/www'' (''wordpress:www-data'' with mode ''750'' and ''640''), with out-of-band auto upgrade via ''wp-cli''via cron. This simulates ''W^X'' at the PHP level with Unix permissions to harden WordPress from PHP Trojans.
+  * <todo #shenmedouxing:2026-10-14>Run WordPress with read-only</todo> ''/var/www'' (''wordpress:www-data'' with mode ''750'' and ''640''), with out-of-band auto upgrade via ''wp-cli''via cron. This simulates ''W^X'' at the PHP level with Unix permissions to harden WordPress from PHP Trojans.
   * <todo>Separate the webroot and PHP basepath of WordPress and DokuWiki, with no symlinks between them.</todo>
   * <todo #shenmedouxing:2026-09-26>WordPress should use a Unix domain socket to talk MariaDB, disable TCP/IP on MariaDB.</todo>
-  * <todo>WordPress's MySQL user should have reduced privileges, not a "allow everything for this database".</todo>
+  * <todo #shenmedouxing:2026-10-14>WordPress's MySQL user should have reduced privileges, not a "allow everything for this database".</todo>
   * <todo>WordPress and DokuWiki accounts should have password resets.</todo>
   * <todo>Inactive historical accounts should be disabled or deleted.</todo>

BLUG Wiki

User Tools

Site Tools

Differences

Page Tools