セキュリティとSSL
The security basics every website should have, explained without jargon. We cover SSL certificates and their expiry, HTTPS redirects, security headers and software versions that should not be visible. Articles show what visitors see when something is wrong and how browsers warn them away. Each guide gives clear steps you can hand to your host or developer. We also explain how monitoring catches an expiring certificate before customers notice. A safe site protects both your visitors and your search rankings.
2026/09/29 · 8分で読めますWordPress xmlrpc.php: What It Does and When to Disable It
WordPress xmlrpc.php is an old remote access door often abused for password guessing and pingback attacks. Learn who needs it and how to block…
2026/09/29 · 8分で読めますUploads Folder Security: How to Block PHP Execution
Attackers love hiding scripts in the uploads folder. Learn why, how to block PHP execution there on Apache and Nginx, and how to test…
2026/09/29 · 7分で読めますNulled Themes and Plugins: The Real Cost of Free Premium
Nulled themes and plugins often hide backdoors, spam links and redirects, and never get security updates. Learn the risks, the signs and how to…
2026/09/29 · 7分で読めますTLS 1.3 Explained: Why It Is Faster and How to Enable It
TLS 1.3 makes HTTPS connections faster and removes weak cryptography. Learn what changed, how to check your server and how to enable it safely.
2026/09/28 · 8分で読めますX-Content-Type-Options: nosniff and Safe MIME Types Explained
X-Content-Type-Options: nosniff stops browsers from guessing file types, closing a path for disguised scripts. Learn how MIME sniffing works and how to set it.
2026/09/27 · 7分で読めますWebsite Security Audit Checklist: What to Check and in What Order
A practical website security audit checklist: HTTPS, certificates, headers, software, access, backups, DNS and e-mail, ordered by impact with clear targets.
2026/09/25 · 7分で読めますSSL Certificates Are Moving to 47 Days: What Site Owners Must Do
Maximum SSL certificate lifetimes are falling step by step to 47 days by 2029. Learn the timeline, who is affected and how to prepare…
2026/09/24 · 8分で読めますHow to Automate SSL Renewal With Certbot (and Verify It Works)
Set up Certbot so Let's Encrypt certificates renew automatically: timers, reload hooks, DNS challenges behind CDNs, dry runs and checks for silent failures.
2026/09/23 · 7分で読めますOutdated Plugins and CMS Versions: A Safe Update Strategy
Outdated plugins are the most common way websites get hacked. Learn how to update the CMS, plugins, themes and PHP safely, often, and without…
2026/09/22 · 7分で読めますWebsite Security Checks for Agencies: A Repeatable Client Process
A practical process for agencies to check client website security: baseline audits, monitoring, clear reports, responsibilities and turning findings into work.
2026/09/21 · 7分で読めますDomain Hijacking: How to Protect Your Domain Name and DNS
Losing control of your domain takes down your website and e-mail at once. Learn how domains get hijacked or expire and how to lock…
2026/09/20 · 7分で読めますCertificate Transparency Logs: Every Certificate for Your Domain
Every public SSL certificate is recorded in certificate transparency logs. Learn how to search them, what to look for and how to monitor your…