Ngigi Nyoro
All work
  • DevOps & Infrastructure
  • Web Development

WordPress hardening for an education website

A high-traffic education website made safer, more stable and easier to maintain.

Client
Tech training institution, East Africa
My role
Tech lead
Stack
Certbot Tailwind CSS WordPress

This project was delivered for a confidential client. Names, data and identifying screens have been removed or recreated.

The problem

The public website had security gaps common to WordPress sites, and its SSL certificate was not renewing reliably.

What I did

  • Closed REST API user enumeration

    Anyone could list the site's user accounts. Now they can't.

  • Blocked access to wp-config.php

    The file that holds database credentials is no longer reachable from the web.

  • Fixed certificate renewal

    Let's Encrypt renewal with Certbot now runs automatically, so the certificate no longer risks expiring.

  • Fixed responsive layouts

    Resolved layout issues in the Tailwind CSS front end on smaller screens.