This repository is a resource collection for WordpRess sites running on Docker.

• URL works
• Dump pages, posts, images are deleted
• No unused plugins, themes
• No provisions
• Core, plugins are up to date
• No errors in W3C Validator
• No errors in Chrome Developer Tools Console
• Robots are enabled
• Sitemap is generated
• Site is submitted to Goolge
• Site is submitted to Bing
• Analytics plugin runs
• Google Search Console aceppts robots.txt and sitemap.xml
• Bing Webmaster Tool aceppts sitemap.xml
• ReChapcha works on forms
• Forms submits are stored in db
• Automatic backups are seduled in Backup plugin
• Site is able to send emails
• Browser chace is on
• Files are Gzipped
• Chace plugin runs
• Comment blacklist is filled
• Security barricade stands, and site is checked by WPScan

Start bash in container

 docker exec -it ###_wordpress_1 bash 

Fix www-data user (fixes update error after restart the container)

 usermod -u 1000 www-data 

• advanced-custom-fields
• automatic-featured-images-from-videos
• better-delete-revision
• delete-post-revisions-on-single-click
• bootstrap-3-shortcodes
• bootstrap-for-contact-form-7
• breadcrumb-navxt
• broken-link-checker
• contact-form-7
• contact-form-7-to-database-extension
• crayon-syntax-highlighter
• custom-post-type-ui
• custom-post-type-widgets
• easy-responsive-tabs
• google-analyticator
• google-sitemap-generator
• login-lockdown
• related-posts-by-taxonomy
• remove-wordpress-overhead
• sf-adminbar-tools
• shortcode-widget
• tablepress
• the-events-calendar
• the-events-calendar-shortcode
• visual-editor-custom-buttons
• widget-css-classes
• wordpress-23-related-posts-plugin
• wordpress-table-of-contents
• wp-db-backup
• wp-github-sync
• wp-github-sync-meta
• wp-markdown-editor
• wp-members
• wp-meta-seo
• wp-dashboard-notes
• wp-page-numbers
• wp-recaptcha-integration
• wp-super-cache
• wysiwyg-widgets

 <IfModule mod_expires.c> ExpiresActive On ExpiresByType image/jpg "access 1 month" ExpiresByType image/jpeg "access 1 month" ExpiresByType image/gif "access 1 month" ExpiresByType image/png "access 1 month" ExpiresByType text/css "access 1 month" ExpiresByType text/html "access 1 month" ExpiresByType image/x-icon "access 1 month" ExpiresDefault "access 1 month" </IfModule> 

 <IfModule mod_gzip.c> mod_gzip_on Yes mod_gzip_dechunk Yes mod_gzip_item_include file \.(html?|txt|css|js|php|pl)$ mod_gzip_item_include handler ^cgi-script$ mod_gzip_item_include mime ^text/.* mod_gzip_item_include mime ^application/x-javascript.* mod_gzip_item_exclude mime ^image/.* mod_gzip_item_exclude rspheader ^Content-Encoding:.*gzip.* </IfModule> 

 <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteRule ^wp-admin/includes/ - [F,L] RewriteRule !^wp-includes/ - [S=3] RewriteRule ^wp-includes/[^/]+\.php$ - [F,L] RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L] RewriteRule ^wp-includes/theme-compat/ - [F,L] RewriteRule ^.git/ - [F,L] </IfModule> 

 <Files xmlrpc.php> order deny,allow deny from all allow from 123.123.123.123 </Files> 

 sudo chown -R www-data:www-data ./ && sudo find ./ -type d -exec sudo chmod 755 {} \; && sudo find ./ -type f -exec sudo chmod 644 {} \; 

 iptables -A INPUT -i eth0 -p tcp -m tcp --dport 8090 -j ACCEPT 

Fix

 echo "127.0.0.1 noreply.domain.com $(hostname)" >> /etc/hosts 

• Wordpress VS Code Extension Pack
• PHP IntelliSense
• PHP Debug
• phpcs
• WPCS Whitelist Flags
• Wordpress Snippet
• ACF-Snippet
• WooCommerce - Snippets & autocomplete
• Bootstrap 3 Snippets
• Sass Formatter
• jQuery Code Snippets
• Icon Fonts
• Composer
  • Composer
  • PHP Code Sniffer
  • WordPress-Coding-Standards

• Search-Replace-DB
• MYSQL dump splitter

• Theme unit test

• Wordpress comment blacklist

• Docker Wordpress
• Docker MySQL
• Docker PHPMyAdmin
• Docker WP-CLI
• Docker NGINX Proxy

 sudo apt install php-codesniffer 

• PHP CodeSniffer and WordPress Coding Standards with VS Code
• VS Code for WordPress Development
• Setting Up PHP CodeSniffer in Visual Studio Code

• Attacking WordPress

• WPScan

• WPScan docker

• NMPA + http-wordpress-enum

• Has my site been hacked?

• Wordpress-XMLRPC-Brute-Force-Exploit

• Gain Control of WordPress by Exploiting XML-RPC

• Password lists

• Check URL

   sudo apt install nmap zenmap