How to fix WordPress locked error from wp-admin login by jetpack plugin?

You should now be able to login again, and this issue shouldn’t repeat itself. Jetpack’s Protect function looks at the incoming IP address when you try to login, and compares it against our network of blocked IPs. This works pretty well, unless Jetpack’s Protect is being told the wrong IP address by your site’s server. In your case, your server was reporting its own IP address to Protect, which is why it was blocked. This meant that every single time someone with a WordPress site on your site’s server entered the wrong password, we thought it was the same person. If your hosting provider has several hundred WordPress sites on the same server/IP, that adds up fast, leading to a ban on the IP.

I’ve made a couple of changes on our side, and Jetpack’s Protect feature will now determine incoming IP addresses a different way. You’re still protected!

– Jeremy Herve (@jeherve) – Plugin author

Solution:

Whitelisting Your IP Address

Whitelisting may be necessary if you’ve made too many failed log in attempts to your site. There are three methods for whitelisting your IP address:

If you have access to your site and you’ve not been blocked, you can enter your IP or IPv6 address(es) by going to Jetpack → Settings → Security → Brute force attack protection.
If you are blocked from entering your site, you can enter the IP or IPv6 address(es) via WordPress.com by visiting My Sites → Settings → Security → Prevent brute force login attacks
You can also whitelist one IP address by setting it as the JETPACK_IP_ADDRESS_OK constant in your wp-config.php like this:

define('JETPACK_IP_ADDRESS_OK', 'X.X.X.X');

You can find your IP by visiting any of the following sites:

www.whatismyip.com
www.whatismyipaddress.com

References:

https://jetpack.com/support/security-features/#unblock
https://wordpress.org/support/topic/jetpack-has-locked-your-sites-login-page/#post-10069377

List of 5 best SEO plugins for WordPress.

Hi Everyone!

I know that you want your sites to rank higher in search engines like Google, Bing, and Yahoo. And the best way to do it is SEO, but as every good thing takes time, so does SEO.

It may take time, but once it starts to yield results you would just skyrocket from nowhere to the top of the search engines.

As a human being, we love things that automate our life and make it easier in any way. That’s why we all are in love with WP plugins. No matter what our need is? First, we look if a plugin is available for it. And in most of the cases, we find it.

So today I am going to present you with a list of Best SEO plugins for WordPress. 

Best SEO plugins for WordPress:

  • WordPress Yoast SEO – 2000000 installs. This goes without saying that it is one of the best SEO plugins available out there. It has gained its popularity because of its features and simplicity to use. yoast seo image

    Key Features of WordPress SEO By Yoast:

    • Breadcrumbs: Allows you to create simple navigation for users and spiders. Great for internal linking.
    • Meta and Title Tag Optimization: Lets you determine what pages will be shown in the search results.
    • Multi-Site Compatibility: XML Sitemaps work in all setups.   Includes the option to copy settings from blog to blog. 
    • Website SEO Analysis: Checks even the smallest items length of content, meta description existence, and focused keyword usage. Simple green light, red light lets you know where you stand.
    • Snippet Preview:  Lets you to observe how your page will look in search results.
    • Social Integration: Includes SEO Friendly Facebook Open Graph to link SEO and social media together.
    • Great for blogging with a simple green and red light interface.
  • All in One SEO Pack – 2500000 installs. Best for both beginners and developers. all in one seo pack

    Features include:

    • Bad Bot Blocker: Prevents harmful bots from decreasing website speeds.
    • File Editor: Manually edit robots.txt and .htaccess.
    • Import/Export: Imports and exports your settings to share with other sites.
    • Robots.txt: Allows more control over how search spiders navigate your site.
    • Social Media Integration: Adds Open Graph to your site to deliver closer integration between your website or blog and social channels like Facebook and Twitter.
    • Video Sitemap (paid version only): Lets you create and manage a Video XML Sitemap and submit it Google and other search engines.
  • Premium SEO Pack – 1000000 installs. It is a paid plugin and designed to work best with other plugins like Woocommerece and WordPress Multisite. It includes both on-page and off-page optimization. premium seo pack

    Key Features:

    • Facebook Planner: You can post your content on Facebook with the help of this feature.
    • Monitor 404: Monitors the URLs that are referring your visitors to 404 pages.
    • Page Speed Insights: Monitors the page speed of each of your posts or pages on a desktop or mobile devices.
    • SEO Friendly Images: Automatically refreshes all images with relevant ALT tags and Title Attributes.
    • Backlink Builder: With this feature, you can find similar websites to build links to your website.
    • W3C Validator: It empowers you to check the schema markup of your posts, pages, and custom taxonomies.
    • On-Page SEO: Quickly update pages from the post-preview top bar or admin top bar.
    • Pattern SEO: Set patterns for each post type and custom post types.
    • Social Optimization: Open Graph and Twitter Card support.
  • SEOPressor – 700000 installs. Unlike other plugins, this one always remains updated with Google’s algorithm. With the latest update of Rank Brain. seo pressor

    Key Features:

    • Automatic Smart Internet Linking: Add internal links automatically to keep leads and reduce bounce rate.
    • Dynamic Crawler Control: Complete command over how spiders travel through your site.
    • XML Sitemap generator: Helps make your site SEO Friendly.
    • Keyword SEO Score Checker: Monitors the optimized rate of your primary words, up to 3.
    • LSI keywords: Calculates your site’s LSI usage with a proprietary formula.  Suggests ways to improve your LSI keyword use to rank for more words.
    • Readability Score: Did you know that the readability of your website copy may be a ranking factor?
    • Over Optimization Check: Over-stuffing words is now something that will bring red flags from Google, Bing, Yahoo, etc.  Monitors your keyword use and lets you know if overuse becomes a problem
  • SEO Squirrly – 2100000 installs. Specially designed for non-experts. Write content that is reader-friendly and is effective at ranking your site. squirly seo

    Key features:

    • Green Light Means “Good Job!”: Display turns green when you implement an item correctly.
    • Keyword Headline Suggestions: Give suggestions for headlines based on your primary keywords.
    • Content Strategy Tracking: Tracks all areas content strategies.
    • No Automatic Overwrite: Your current SEO settings stay intact during setup.
    • Social SEO AI:  Updated artificial intelligence aids you in developing high-quality content.
    • Weekly Monitoring: Oversees your progress on a weekly basis.

This was all about the best SEO plugins If you are aware of some other plugins that you think this list should have then please comment below.

I will see you in the next post with an awesome topic to talk about.

Thank You.

[Forgot Password] [Can’t Log In] How to reset WordPress admin password without sending reset email?

So, admit it. We put really strong passwords and then we forget them.
And you end up being locked out of your own website.

So here is how you can reset it quickly.
Go to your hosting control panel and then go to phpMyAdmin if available.

Look into the database which is being used for your wordpress installation and click on Users table

Inside users table, find the row responsible for your admin account. (check the user_nicename column for username match)
and Press edit.

On the editing screen, put your new password again the column password and Choose MD5 in left column FUNCTION

Now scroll down and save this password.

And that’s it. Go to your domain / wp-admin path and login with the new password you just saved.

What to do if you dont have phpMyAdmin?

You gotta have some kind of access to MySQL, so connect to it using the credentials inside wp-config.php file

Use the following command after replacing your details:

UPDATE `wppl_users` SET `user_pass` = 'e0a8aa81eb1762d529783cf587f6f422' WHERE `wppl_users`.`user_nicename` = 'admin';

If you remember the email address only, use:

UPDATE `wppl_users` SET `user_pass` = 'e0a8aa81eb1762d529783cf587f6f422' WHERE `wppl_users`.`user_email` = '[email protected]';

The above command will set your password to [email protected]. After this command you can login to wordpress admin panel and then reset your password to anything you want. Or use md5.cz to generate md5 for any password string and replace it with e0a8aa81eb1762d529783cf587f6f422

Do NOT forget to replace “wppl_” with your table prefix (stored in wp-config.php file)

List of really good and important plugins for WordPress

I am listing a few common yet very useful plugins we can utilize for our WordPress websites:

Limit Login Attempts

Limit the number of login attempts that possible both through the normal login as well as using the auth cookies.
WordPress by default allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be cracked via brute-force relatively easily.
Limit Login Attempts Reloaded blocks an Internet address from making further attempts after a specified limit on retries has been reached, making a brute-force attack difficult or impossible.

Features:

  • Limit the number of retry attempts when logging in (per each IP). This is fully customizable.
  • Limit the number of attempts to log in using authorization cookies in the same way.
  • Informs the user about the remaining retries or lockout time on the login page.
  • Optional logging and optional email notification.
  • Handles server behind the reverse proxy.
  • It is possible to whitelist/blacklist IPs and Usernames.
  • Sucuri Website Firewall compatibility.
  • XMLRPC gateway protection.
  • Woocommerce login page protection.
  • Multi-site compatibility with extra MU settings.
  • GDPR compliant. With this feature turned on, all logged IPs get obfuscated (md5-hashed).

Wordfence security

Wordfence includes an endpoint firewall and malware scanner that were built from the ground up to protect WordPress. Our Threat Defense Feed arms Wordfence with the newest firewall rules, malware signatures and malicious IP addresses it needs to keep your website safe. Rounded out by a suite of additional features, Wordfence is the most comprehensive WordPress security solution available.

WORDPRESS FIREWALL

  • Web Application Firewall identifies and blocks malicious traffic. Built and maintained by a large team focused 100% on WordPress security.
  • [Premium] Real-time firewall rule and malware signature updates via the Threat Defense Feed (free version is delayed by 30 days).
  • [Premium] Real-time IP Blacklist blocks all requests from the most malicious IPs, protecting your site while reducing load.
  • Protects your site at the endpoint, enabling deep integration with WordPress. Unlike cloud alternatives does not break encryption, cannot be bypassed and cannot leak data.
  • Integrated malware scanner blocks requests that include malicious code or content.
  • Protection from brute force attacks by limiting login attempts, enforcing strong passwords and other login security measures.

WORDPRESS SECURITY SCANNER

  • Malware scanner checks core files, themes and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects and code injections.
  • [Premium] Real-time malware signature updates via the Threat Defense Feed (free version is delayed by 30 days).
  • Compares your core files, themes and plugins with what is in the WordPress.org repository, checking their integrity and reporting any changes to you.
  • Repair files that have changed by overwriting them with a pristine, original version. Delete any files that don’t belong easily within the Wordfence interface.
  • Checks your site for known security vulnerabilities and alerts you to any issues. Also alerts you to potential security issues when a plugin has been closed or abandoned.
  • Checks your content safety by scanning file contents, posts and comments for dangerous URLs and suspicious content.
  • [Premium] Checks to see if your site or IP have been blacklisted for malicious activity, generating spam or other security issue.

SECURITY TOOLS

  • With Live Traffic, monitor visits and hack attempts not shown in other analytics packages in real time; including origin, their IP address, the time of day and time spent on your site.
  • [Premium] Stop brute force attacks permanently by using two factor authentication, one of the most secure forms of remote system authentication available.
  • Block attackers by IP or build advanced rules based on IP Range, Hostname, User Agent and Referrer.

W3 Total Cache

W3 Total Cache improves the SEO and user experience of your site by increasing website performance, reducing download times via features like content delivery network (CDN) integration.

The only web host agnostic WordPress Performance Optimization (WPO) framework recommended by countless web developers and web hosts. Trusted by numerous companies like: AT&T, stevesouders.com, mattcutts.com, mashable.com, smashingmagazine.com, makeuseof.com, kiss925.com, pearsonified.com, lockergnome.com, johnchow.com, ilovetypography.com, webdesignerdepot.com, css-tricks.com and tens of thousands of others.

An inside look:

BENEFITS

  • Improvements in search engine result page rankings, especially for mobile-friendly websites and sites that use SSL
  • At least 10x improvement in overall site performance (Grade A in WebPagetest or significant Google Page Speed improvements) when fully configured
  • Improved conversion rates and “site performance” which affect your site’s rank on Google.com
  • “Instant” repeat page views: browser caching
  • Optimized progressive render: pages start rendering quickly and can be interacted with more quickly
  • Reduced page load time: increased visitor time on site; visitors view more pages
  • Improved web server performance; sustain high traffic periods
  • Up to 80% bandwidth savings via minify and HTTP compression of HTML, CSS, JavaScript and feeds

KEY FEATURES

  • Compatible with shared hosting, virtual private / dedicated servers and dedicated servers / clusters
  • Transparent content delivery network (CDN) management with Media Library, theme files and WordPress itself
  • Mobile support: respective caching of pages by referrer or groups of user agents including theme switching for groups of referrers or user agents
  • Accelerated Mobile Pages (AMP) support
  • Secure Socket Layer (SSL) support
  • Caching of (minified and compressed) pages and posts in memory or on disk or on (FSD) CDN (by user agent group)
  • Caching of (minified and compressed) CSS and JavaScript in memory, on disk or on CDN
  • Caching of feeds (site, categories, tags, comments, search results) in memory or on disk or on CDN
  • Caching of search results pages (i.e. URIs with query string variables) in memory or on disk
  • Caching of database objects in memory or on disk
  • Caching of objects in memory or on disk
  • Caching of fragments in memory or on disk
  • Minification of posts and pages and feeds
  • Minification of inline, embedded or 3rd party JavaScript (with automated updates)
  • Minification of inline, embedded or 3rd party CSS (with automated updates)
  • Browser caching using cache-control, future expire headers and entity tags (ETag) with “cache-busting”
  • JavaScript grouping by template (home page, post page etc) with embed location control
  • Non-blocking JavaScript embedding
  • Import post attachments directly into the Media Library (and CDN)
  • WP-CLI support for cache purging, query string updating and more
  • Various security features
  • Caching statistics for performance insights
  • Extension framework for customization or extensibility e.g. New Relic, Cloudflare, WPML and more
  • Reverse proxy integration via Nginx or Varnish

Improve the user experience for your readers without having to change WordPress, your theme, your plugins or how you produce your content.

Jetpack

Hassle-free design, marketing, and security — all in one place.

DESIGN SERVICES

Create and customize your WordPress site from start to finish. Jetpack helps you with:

  • Hundreds of professional themes for any kind of site
  • Intuitive and powerful customization tools
  • Unlimited and high-speed image and video content delivery network
  • Lazy image loading for a faster mobile experience
  • Integration with the official WordPress mobile apps

MARKETING SERVICES

Measure, promote, and earn money from your site. Jetpack helps you with:

  • Site stats and analytics
  • Automated social media posting and scheduling in advance
  • Elasticsearch-powered related content and site search
  • SEO tools for Google, Bing, Twitter, Facebook, and WordPress.com
  • Advertising program that includes the best of AdSense, Facebook Ads, AOL, Amazon, Google AdX, and Yahoo
  • Simple PayPal payment buttons

SECURITY SERVICES

Stop worrying about data loss, downtime, and hacking. Jetpack helps you with:

  • Brute force attack protection, spam filtering, and downtime monitoring
  • Daily or real-time backups of your entire site
  • Secure logins with optional two-factor authentication
  • Malware scanning, code scanning, and automated threat resolution
  • Fast, priority support from WordPress experts

 

Yoast Seo

Need some help with your search engine optimization? Need an SEO plugin that helps you reach for the stars? Yoast SEO is the original WordPress SEO plugin since 2008. It is the favorite tool of millions of users, ranging from the bakery around the corner to some of the most popular sites on the planet. With Yoast SEO, you get a solid toolset that helps you aim for that number one spot in the search results. Yoast: SEO for everyone.

Yoast SEO does everything in its power to please both visitors and search engine spiders. How? Below you’ll find a small sampling of the powers of Yoast SEO:

TAKING CARE OF YOUR WORDPRESS SEO

  • The most advanced XML Sitemaps functionality at the push of a button.
  • Full control over site breadcrumbs: add a piece of code and you’re good to go.
  • Set canonical URLs to avoid duplicate content. Never have to worry about Google penalties again.
  • Title and meta description templating for better branding and consistent snippets in the search results.

WRITE KILLER CONTENT WITH YOAST SEO

  • Content & SEO analysis: Invaluable tools to write SEO-friendly texts.
  • The snippet preview shows you how your post or page will look in the search results – even on mobile. Yoast SEO Premium even has social media previews!
  • [Premium] The Insights tool shows you what your text focuses on so you can keep your article in line with your keywords.
  • [Premium] Multiple focus keywords: Optimize your article for synonyms and related keywords.
  • [Premium] Automatic internal linking suggestions: write your article and get automatic suggested posts to link to.

KEEP YOUR SITE IN PERFECT SHAPE

  • Yoast SEO tunes the engine of your site so you can work on creating great content.
  • Our cornerstone content and internal linking features help you optimize your site structure in a breeze.
  • Integrates with Google Search Console: See how your site performs in the search engines and fix crawl errors.
  • Manage SEO roles: Give your colleagues access to specific sections of the Yoast SEO plugin.
  • Bulk editor: Make large-scale edits to your site.

Google XMP sitemaps

Use this plugin to greatly improve SEO to create special XML sitemaps which will help search engines like Google, Bing, Yahoo and Ask.com to better index your site.

With such a sitemap, it’s much easier for the crawlers to see the complete structure of your site and retrieve it more efficiently. The plugin supports all kinds of WordPress generated pages as well as custom URLs. Additionally it notifies all major search engines every time you create a post about the new content.

Google Analytics for WordPress by MonsterInsights

We believe that you shouldn’t have to hire a developer to add Google Analytics to your website. That’s why we built MonsterInsights, a complete Google Analytics for WordPress plugin that’s EASY and POWERFUL.

MonsterInsights allow you to connect your WordPress website with Google Analytics, so you can see how visitors find and use your website, so you can keep them coming back. Simply put, we show you the stats that matter.

With almost 15 million downloads, MonsterInsights is the most popular Google Analytics plugin for WordPress.

At MonsterInsights, user experience is our #1 priority. That’s why we make it extremely easy for you to connect and view your Google Analytics reports from inside your WordPress dashboard. Our tracking settings and workflows make MonsterInsights the most beginner friendly google analytics plugin in the market.

WordPress Hierarchy – Important Files and Directories

wp-config.php file contains all information about your database connection and some salts which are used for password generation
index.php handles all the requests on your wordpress blog
wp-content/themes contains all the themes installed in your blog
wp-content/plugins contains all the plugins installed in your blog
yourblog.com/wp-login.php or yourblog.com/wp-admin/ can be used for logging into wordpress backend
wp-content/uploads contains all your file uploads including all the images in media. They are usually categorized in folders like 2018/month_number (08 09 etc)
users table is used for storing all your user details like username, first name, last name, email and password
other details about users are generally stored in usermeta table
options table is used for storing all the blog settings. generally first and second row in this table contain the url of your wordpress blog.

WordPress Dashboard – Introduction by newbie

Dashboard Panel

When you will log into the administration area of your blog, you’ll see the WordPress Dashboard which will display the overview of the whole website.  You can customize your needs by using some quick links such as writing quick draft, replying to latest comment, etc.

Dashboard Menu

The WordPress Dashboard provides a navigation menu that contains some menu options such as posts, media library, pages, comments, appearance options, plugins, users, tools and settings on the left side.

Welcome Section

It includes the “Customize Your Site” button which allows customizing your WordPress theme. The center column provides some of the useful links such as creating a blog post, creating a page and view the front end of your website.

Quick Draft

The Quick Draft is a mini post editor which allows writing, saving and publishing a post from the admin dashboard. It includes the title for the draft, some notes about the draft and save it as a Draft.

WordPress News

The WordPress News widget displays the latest news such as latest software version, updates, alerts, news regarding the software etc. from the official WordPress blog.

Activity

The Activity widget includes latest comments on your blog, recent posts and recently published posts. It allows you to approve, disapprove, reply, edit, or delete a comment. It also allows you to move a comment to spam.

At a Glance

This section gives an overview of your blog’s posts, number of published posts and pages, and number of comments. When you click on these links, you will be taken to the respective screen. It displays the current version of running WordPress along with the currently running theme on the site.


How to install a new theme in WordPress using a compressed theme file

Follow these steps to install a new WordPress theme to your website using a compressed theme file(.zip,.tar,.rar etc):

Step 1: Open the wp-content folder in the root directory of WordPress and go to the themes folder.

Step 2: Upload the zip(or any other compressed file) theme file inside the theme folder.

Step 3: Go back to the theme folder, select the compressed theme file and click on extract.

Step 4: After the file is extracted you may still not see the extracted folder, so click on reload. Also, delete the zip file as it obsolete now.

Step 5: Now, go to the WordPress dashboard of your website and click on Appearance>Themes.

Step 6: You can now see your new theme in the installed themes section. Hover on your new theme and click Activate to activate the theme.

Congratulations you have finally installed and activated a new theme!

How to install wordpress on cPanel

WordPress is a free and open-source content management system (CMS) based on PHP and MySQL.Features include a plugin architecture and a template system.

Follow these steps to install WordPress:

Download WordPress

Download WordPress from this link:  https://wordpress.org/download/

Create Database

Create an empty database for WordPress and specify it’s username and password.

Set up Wizard

  • Step 1: Upload the downloaded compressed file on your website root directory and extract it.

  • Step 2: Open the url of your website and install WordPress.

 

  • Step 3: Specify the  Database Name, Username, Password and Database Host.

  • Step 4:  A confirmation message will appear after the database settings are validated. Click on ‘Run the Installation’ button.

  • Step 5:  Provide the administrative information needed for your WordPress website and Install WordPress.

  • Step 6: You have successfully installed WordPress and the final step is to log in, for which you will use the username and password entered at step 5.