https://benaissazaki.github.io/blog/Recent content in Blogs on Benaissa ZakiHugo -- gohugo.ioen-usTue, 05 Mar 2024 12:00:00 +0000https://benaissazaki.github.io/blog/wordpress-speed-checklist/Tue, 05 Mar 2024 12:00:00 +0000https://benaissazaki.github.io/blog/wordpress-speed-checklist/Choose a good hosting plan Select the latest PHP version as it is generally faster than the previous ones Select a lightweight theme like Astra or OceanWP Serve images in lightweight formats like WebP using WebP Express Minify CSS and JS files using plugins like LiteSpeed Cache Implement caching also using LiteSpeed Cache Use a Content Delivery Network for a more efficient serving of static files. Cloudflare is a good choice, but QUIC cloud plays really well with LiteSpeed Cache and in my experience causes fewer problems.https://benaissazaki.github.io/blog/django-from-beginner-to-intermediate/Fri, 02 Feb 2024 12:00:00 +0000https://benaissazaki.github.io/blog/django-from-beginner-to-intermediate/Ah Django! My first backend framework and still my favorite. I still remember learning it in 2020 during Covid lockdown to use it for my License project. And because of its simplicity, good organization, and speed of delivery it’s been my go-to framework since then and I have used it on numerous projects. As I was recently cleaning up my Github, I came across some of my old Django code, and I am glad of the progress I made (that’s a euphemism to say that it was garbage).https://benaissazaki.github.io/blog/wordpress-security-checklist/Sun, 14 Jan 2024 12:00:00 +0000https://benaissazaki.github.io/blog/wordpress-security-checklist/Hosting Choose a reputable hosting provider Pick a strong password for your hosting account and enable 2FA if possible Control panel Pick a strong password for your control panel account and enable 2FA if possible Enable an anti-virus software if there is one (cPanel has ClamAV scanner which can be enabled via WHM) WordPress General Enforce HTTPS Install a security plugin (Wordfence is the most popular free option) Schedule regular backups of your website (you can use UpdraftPlus) Authentication Pick a strong password for the admin account Delete unused accounts Enforce strong passwords for users Disable registration if you don't need it (Settings > General > Uncheck 'Anyone can register') Disable XML-RPC if you don't need it (you most likely don't) Regularly change passwords Activate 2FA for admin accounts (can be done with Wordfence) Add a captcha to the admin login page (can be done with Wordfence) Hide the login page (you can use WPS Hide Login) Themes and plugins Don't overload your website with too many plugins/themes Don't use plugins/themes that are not regularly updated NEVER use cracked/nulled plugins/themes Keep your plugins/themes up to datehttps://benaissazaki.github.io/blog/security-strategies-for-your-wordpress-website/Sat, 26 Aug 2023 12:00:00 +0000https://benaissazaki.github.io/blog/security-strategies-for-your-wordpress-website/Introduction Security is the most unforgivable aspect of any website. While people might tolerate a slightly slower website or a somewhat complicated user experience, compromising their data due to negligence in addressing security is a significant blow to your brand reputation and business. This guide will help you understand the primary vulnerabilities that attackers can exploit to compromise your website. It outlines best practices to prevent such breaches and significantly reduce potential risks.https://benaissazaki.github.io/blog/a-better-way-to-watch-movies-on-tv/Sun, 18 Jun 2023 12:00:00 +0000https://benaissazaki.github.io/blog/a-better-way-to-watch-movies-on-tv/I like to watch movies on a big screen. And since my hometown lacks a cinema, that big screen is generally my Smart TV. However, moving my movies around on a USB stick quickly becomes tiring. Surely there is a better way? And yes there is one: Media Servers. In short: A media server is an application that stores and streams media content such as videos, music, and photos to other devices on a network as long as these devices have an internet browser.https://benaissazaki.github.io/blog/hacking-my-childhood-game-dll-injection/Wed, 26 Apr 2023 12:00:00 +0000https://benaissazaki.github.io/blog/hacking-my-childhood-game-dll-injection/Previously, we analyzed The Lord of the Rings: Battle for Middle-Earth II’s code to find a way to allow the Command Point Limit to go beyond 1000. We found that we could achieve that by changing the instruction at the address 0x006A74B9 from: cmovg ebx, esi to nop nop nop Doing that in x32dbg would only work until the game is closed. So now the goal is to make a more persistent solution using a DLL injection.https://benaissazaki.github.io/blog/hacking-my-childhood-game/Sun, 16 Apr 2023 12:00:00 +0000https://benaissazaki.github.io/blog/hacking-my-childhood-game/I recently started to explore Game Hacking, and I find it fascinating. The thought process is quite different from programming since it asks “How was this created?” instead of “How do I create this?”. In this blog post, I will detail the step-by-step process I followed to change the behavior of one of my favorite video games. Tools used Windows 11 Cheat Engine x32dbg The Lord of the Rings: Battle for Middle Earth II The objective One of the games I spent a lot of time on in my childhood was The Lord of the Rings: Battle for Middle Earth II.