Category: Web

Howto Determine Magento Version

April 21, 2015

Previously we posted an article on how to determine Magento version by checking the app/Mage.php file: Determine Magento Commerce Version Here’s another technique that I like using PHP command line:

cd httpdocs
/httpdocs$ php -a
Interactive shell
 
php > include 'app/Mage.php';
php > echo Mage::getVersion();
1.6.2.0
php >exit();

cd httpdocs

/httpdocs$ php -a

Interactive shell

php > include 'app/Mage.php';

php > echo Mage::getVersion();

1.6.2.0

php >exit();

Credit for this goes to euperia.com.

Multiple Domains One WordPress

February 12, 2015

Let’s say you want to have more then one domain pointing to a WordPress site. Each domain should show the same content but you don’t want to redirect to the primary domain. This is a problem with WordPress because it tries to redirect to a single canonical domain. The solution is the “Any Hostname” plugin: https://wordpress.org/plugins/any-hostname/ After installing the plugin, go to: WordPress Admin -> Settings -> General At the bottom of the screen you’ll find an “Any Hostname” section where you can add additional domain names to the site. So now you can have “www.acme.com” as the primary domain and one or more additional names like “www.acmeinc.com”. The website will be displayed on each domain as if it were the primary with no redirect.

Block wp-login.php On Single Site In WordPress Multisite

April 4, 2014

Take the case where you have a WordPress multi-site with many domains pointing to a single virtual host. When the site gets hit with a wp-login.php attack you want to password protect the wp-login.php script but just for the targeted site … not for every site in the multisite. Here’s the .htaccess rules to accomplish this:

SetEnvIfNoCase Host "acme.com" requireauth=1
SetEnvIfNoCase Host "widgets.com" requireauth=1

<Files ~ "^wp-login.php">
    AuthType Basic
    AuthName "******** ATTENTION - To login please enter username 'admin' and password 'letmein' ********"
    AuthUserFile /etc/httpd/conf/wplogin.htpasswd
    AuthBasicProvider file

    Require valid-user
    Order deny,allow
    Deny from all
    Allow from env=!requireauth
    Satisfy any
</Files>

SetEnvIfNoCase Host "acme.com" requireauth=1

SetEnvIfNoCase Host "widgets.com" requireauth=1

AuthType Basic

AuthName "******** ATTENTION - To login please enter username 'admin' and password 'letmein' ********"

AuthUserFile /etc/httpd/conf/wplogin.htpasswd

AuthBasicProvider file

Require valid-user

Order deny,allow

Deny from all

Allow from env=!requireauth

Satisfy any

</Files>

We set an environment variable based on the Host header and then require login from requests with the matching environment variable.

CentOS / Nginx / PHP-FPM / WordPress

February 13, 2014

Some quick notes on building a CentOS server with Nginx, PHP-FPM and WordPress. First here’s great tutorial that covers the different Fedura / CentOS / RedHat versions: http://www.if-not-true-then-false.com/2011/install-nginx-php-fpm-on-fedora-centos-red-hat-rhel/ To support WordPress I added the following line into /etc/nginx/sites-enabled/acme.com.conf:

location / {
        index index.html index.htm index.php;
        try_files $uri $uri/ /index.php?$args;
}

location / {

index index.html index.htm index.php;

try_files $uri $uri/ /index.php?$args;

}

WordPress Update & Plugin Install Problems

February 6, 2014

Recently has a server that would not run WordPress updates or plugin installs no matter what I did. After extensive troubleshooting, it turned out the server had SELinux enabled which disallows outbound connections from Apache. One useful tool in troubleshooting update problems is the Background Update Tester plugin: http://wordpress.org/plugins/background-update-tester/ It gives some extra detail on why updates can’t run.