Skip to content

Instantly share code, notes, and snippets.

View denvers's full-sized avatar
🏎️
Racing

Denver denvers

🏎️
Racing
17 followers · 26 following
View GitHub Profile
@denvers
denvers / .htaccess
Created November 13, 2017 19:27
# Disable direct access to xmlrpc.php to add some security to WordPress site
# Disable direct access to xmlrpc.php to add some security to WordPress site
RewriteRule ^xmlrpc\.php$ - [F]
@denvers
denvers / .htaccess
Created November 13, 2017 19:22
# Disable direct access to *.php in /wp-includes folder to prevent Full Path Disclosure
# Disable direct access to *.php in /wp-includes folder to prevent Full Path Disclosure
RewriteRule ^wp-includes/[^/]+\.php$ - [F]
@denvers
denvers / safe-ssl-www-redirect.nginx
Created September 26, 2017 09:56
Nginx directives to firstly redirect to SSL and redirect to www-version if neccessary
# First redirect to https. Always before every other redirect according to https://internet.nl/test-site/
if ($scheme = http) {
return 301 https://www.$server_name$request_uri;
}
# Non-www to www redirect
if ($host !~* ^www\.) {
rewrite ^(.*)$ https://www.$host$1 permanent;
}
@denvers
denvers / wordpress-asset-browser-cache.php
Created April 20, 2017 08:01
Use this simple WordPress function to avoid browser cache issues after updating your CSS / JS assets. Each time you update your assets the URL will change to force browsers to re-download your asset. Yeah, dab!
<?php
// add to functions.php
/**
* cache_proof_asset_url
* @param string $asset_file (relative, eg: /css/style.css)
* @return string $asset_file_url (absolute, eg: https://www.domain.com/css/style.css?v=123456789)
*/
function cache_proof_asset_url($asset_file) {
$full_asset_url = bloginfo('stylesheet_directory') . $asset_file;
@denvers
denvers / google-apps-script-reset-password.js
Created December 29, 2016 10:55
Force a password reset for G Suite (former Google Apps) users in a group. Also skip (some) user(s) if you want to.
/**
* Periodic reset all user password in a Google Apps (G Suite) group.
* Optional: skip users based on emailaddress
*
* -- You need Google Apps (G Suite) admin rights to run this script. --
* -- Use Google Apps script triggers to force resets periodically. --
*
* @author: Denver Sessink <https://twitter.com/webvakker>
*/
function periodicPasswordReset() {
@denvers
denvers / nginx-directives-ispconfig
Last active July 15, 2022 20:57
Nginx directives for use in ISPConfig - Nginx PHP7 FPM
# Force non-www to www redirect
if ($host !~* ^www\.) {
rewrite ^(.*)$ $scheme://www.$host$1 permanent;
}
# Turn on SSL
# protip: https://mozilla.github.io/server-side-tls/ssl-config-generator/
ssl on;
add_header Strict-Transport-Security max-age=15768000;
@denvers
denvers / ispconfig-dashboard-ssl.sh
Last active October 11, 2023 10:55
ISPConfig Dashboard SSL Certificate using Let's Encrypt
# NOTES
# SSL Key is privkey.pem
# SSL Request does not exist and is not needed (CSR)
# SSL Certificate is cert.pem
# SSL Bundle is chain.pem
# Stop Apache
service apache2 stop
# Create SSL Certificate
@denvers
denvers / Nginx configurations
Created February 16, 2016 13:16
error_page 404 /404.shtml;
if ($host !~* ^www\.) {
rewrite ^(.*)$ http://www.$host$1 permanent;
}
location ~* \.(jpg|jpeg|gif|css|ttf|woff|png|htc|gz|zip|swf|txt|flv|svg|ttf|atom|rss|svgz|cur|js|ico|html)$ {
access_log off;
expires 30d;
add_header Pragma public;
@denvers
denvers / .htaccess
Last active August 29, 2015 14:09
Page Speed Score: enable compression (quick win)
# BEGIN GZIP
<IfModule mod_deflate.c>
AddOutputFilterByType DEFLATE text/text text/html text/plain text/xml text/css application/x-javascript application/javascript text/javascript
</IfModule>
# END GZIP
# BEGIN Expires
<IfModule mod_expires.c>
ExpiresActive On
ExpiresDefault "access plus 1 seconds"
@denvers
denvers / ga-automagic-outgoing-link-tracking.html
Last active August 29, 2015 14:03
Google Analytics - Automatic Outgoing Link Tracking