Author: Anthony M

The CleanTalk company informs you, our clients, that starting on December 12, 2022, we will stop providing and supporting the Anti-Spam service for Shopify.

The CleanTalk Anti-Spam service for Shopify was launched for testing the anti-spam protection features for free. To our regret we can not provide our full protection because of technical limitations.

The Shopify system limits app developers and there are no tools to use our own JavaScript code as well as no access to receive other technical parameters of websites. This is the reason why our service can not collect necessary parameters for the full protection from spam so the CleanTalk service works only partially and for now it’s impossible to implement the anti-spam protection for some website forms.

On December 12, 2022 our Anti-Spam plugin for Shopify will stop functioning, therefore we recommend deleting it and installing another app.

We hope for your understanding and if situation changes then we will come back to developing and supporting our fully functional protection from spam for Shopify.

We appreciate that you were with us and trusted us to protect your websites!

If you have any questions, please send us a ticket.

Website Security plugin now automatically scans your WordPress files and folders for unsafe permissions and recommends how to change them if necessary.

What are WordPress File Permissions

WordPress file permissions protect your site’s files and directories from unauthorized access by hackers. Securing the proper permissions adds security to your site and makes it less vulnerable.

There are 3 types of file permissions in WordPress: read, write, and execute and are denoted in 2 ways. One of them is numerical.

Permission	What it means	Denotion
Read	User can view the contents of a file or directory, but not change anything	4
Write	User allowed to modify the contents of a file or directory, but not execute it	2
Execute	User allowed to run script files, or run scripts inside a directory	1
No permission	User has no access to the file or directory	0

Also, there are 3 categories of roles: user owner (single account), group owner (a set of users), and world (every other user). So, in the numeric schema, the permission number is a sum of all available permissions for each role.  And here are 4 examples of how a file or folder permission is recognized by WordPress:

	User			Group			World
777	Read	Write	Execute	Read	Write	Execute	Read	Write	Execute
644	Read	Write	–	Read	–	–	Read	–	–
755	Read	Write	Execute	Read	–	Execute	Read	–	Execute
440	Read	–	–	Read	–	–	–	–	–

While 000 or 440 seem to be the safest file permissions, they are impractical. And as you can see 777 is very dangerous as it leaves the file or directory open to modification by any user.

How to scan my website for unsafe permissions

The Website Security plugin automatically scans your website every 24 hours and checks all the permissions of the files and folders. Here is a list of all the files the plugin checks.

/.htaccess
/index.php
/wp-config.php
/wp-admin
/wp-includes
/wp-content
/wp-content/themes
/wp-content/plugins
/wp-content/uploads

You can see the results of your last scan on the main page of the plugin: go to Settings → Security by CleanTalk in your side menu. When you enter this page, a scan is immediately started to give you the most up-to-date information about your site’s security.

If there are some unsafe permissions you will see the message:

Permissions for files and directories from the list are unsafe. We recommend change it to 755 for each file and 644 for each directory from the list.

In that case, follow the instructions in the message. It is always recommended 755 for files and 644 for directories.

How to change access rights (using Linux as an example)

The Linux permissions for all files in your WordPress base directory should be set to readable and writable by the owning user (you), and readable only by everyone else. This creates a baseline where the web server can read all files. It will need read access in order to serve static content like images, CSS and Javascript files. Unlike the method above we will be adjusting script permissions to be more stringent later on.

find </path/to/wordpress> -type f \-exec chmod 644 {} \;

If possible, the permissions for all files should be set to read and writable to your user, readable by the group, and no permissions for others. In some instances this may cause issues with other software or plugins, but it is possible to restrict these permissions in some instances.

Lockdown permissions for all PHP scripts so that only your user can read them. This is ideal because only your user should need to know the contents of scripts.

find </path/to/wordpress> -type f -name "*.php" \-exec chmod 640 {} \;

Also, feel free to use Security by CleanTalk plugin to check wp-content automatically on a daily basis.

CleanTalk added spam protection for Easy Digital Downloads Forms using direct form integration. So in case, you prefer using Easy Digital Downloads Forms be sure to use the most effective Anti-Spam plugin. Read the guide below and learn 4 steps to protect your Easy Digital Downloads Forms from spam.

Once the CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be Easy Digital Downloads forms but also many others.

Download CleanTalk Anti-Spam plugin | Download Easy Digital Downloads 

How to install CleanTalk Anti-Spam plugin

To install the Anti-Spam plugin, go to your WordPress admin panel → Plugins → Add New.

Then enter «СleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

After installing the plugin, click the «Activate»‎ button.

After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

That’s it! From now you How to completely protect your СonvertKit Forms from spam.

How to check spam protection for Easy Digital Downloads Forms

You can test the work of Anti-Spam protection for your СonvertKit Forms by using a test email s @ cleantalk.org (without spaces). First, open the form in an Incognito browser tab. Fill in all the required form fields and send a form. After submitting the form, you will see a block message about the block on the form submission.

If you have any questions, add a comment and we will be happy to help you.

Create your CleanTalk account – Register now and protect your СonvertKit Forms from spam in 5 minutes

Update

The protection works only for website visitors, not for website admins. Be sure to test the form protection using Incognito mode.

Additional features

• CleanTalk protects all forms at once: comments, registrations, feedbacks, contacts, reviews.
• Installation takes about 1-2 minutes.
• Smart 99% protection against spambots.
• Always online – 24/7 technical support.
• Logs, SpamFireWall, personal lists, country filters, stop-words, and many others.

Discover the complete list of CleanTalk Anti-Spam plugin features here.