Website Security Guides
Guides on SSL certificates and keeping a Rwandan website secure.
securityPHP2Shell: CVE-2026-109618 and CVE-2026-109619 Explained
Two critical PHP flaws disclosed on 21 October 2026 let attackers take over web servers without logging in. What they are, who is affected, how to patch, and what Register.rw customers need to do.
· 5 min read
securitySecuring PHP File Uploads: Stop Webshells and Scam Pages
How attackers turn PHP upload forms into webshells and scam pages, and the developer-side defenses that stop them: content validation, blocking execution, safe storage, and permissions.
· 8 min read
securityHardening WordPress: A Developer's Security Checklist
How vulnerable plugins and weak uploads turn WordPress sites into scam hosts, and how to harden wp-config, block PHP in uploads, apply least privilege, and write secure upload code.
· 7 min read
securityWordPress Security Best Practices: A Complete Checklist
The practical, non-technical checklist for keeping a WordPress site secure: updates, passwords, backups, and the habits that actually prevent most hacks.
· 3 min read
securityWordfence and Other WordPress Security Plugins, Explained
What a WordPress security plugin actually does, and how Wordfence, Sucuri, and Kadence Security differ, so you can pick one that fits your site.
· 3 min read
securityHow to Recover a Hacked WordPress Site
What to do, in order, if your WordPress site has been compromised: containing the damage, cleaning up, and making sure it doesn't happen again.
· 3 min read
securitycPanel Security Features Explained: How Your Hosting Account Stays Protected
The security tools built into cPanel and WHM, ModSecurity, cPHulk, two-factor authentication, and more, and how they differ from WordPress-level security.
· 3 min read
securityThe Most Common Website and Server Attacks Explained (and How to Prevent Them)
A plain-language guide to the attacks most small business websites actually face: brute-force logins, SQL injection, malware uploads, DDoS, and more, with practical prevention for each.
· 3 min read
securityBrute-Force Attacks Explained: What They Are and How to Stop Them
How brute-force login attacks actually work, why they target WordPress, cPanel, and email accounts alike, and the layered defenses that stop them.
· 3 min read
securitySSL Certificates Explained: Why Every Rwandan Website Needs HTTPS
What an SSL certificate does, why browsers flag sites without one, and how it's included with Register.rw hosting.
· 2 min read