TimThumb Critical Vulnerability Fixed on SiteGround Servers

header

Another serious security issue was reported earlier today within one of the popular WordPress plugins for managing thumbnails – TimThumb. This plugin already has a history of causing security issues in the past with which we dealt with. The current vulnerability allows the attacker to gain unauthorised access to your hosting account and even execute shell commands on it. Needless to say, this is not something we can allow to happen.

Our security team has reacted immediatelly after the vulnerability was disclosed. We have applied a patch in our in-house system to protect all our customers from getting hacked through TimThumb. Currently, if you’re hosted on SiteGround, you will be protected against hacking attempts that try to utilise this problem.

However, we strongly recommend that you switch plugins or update TimThumb as soon as new version is released.

[subscribe_cta]

SiteGround SMS Notifications now Help you Sleep Better!

sms

It is very stressful to receive a call while on a vacation by a customer, asking if you have any idea why his site is down. It is even more unpleasant to realize that the reason is something so simple, as a failed renewal, or something else, that you could have easily prevented, if you knew about it on time. To minimize the chance for such situations we have launched a brand new SMS notification system.

Continue reading “SiteGround SMS Notifications now Help you Sleep Better!”

Our Affiliates’ Verdict: Quality Matters!

new4-new

When we launched our new affiliate program almost 2 years ago we aimed to increase the number of people who recommend us by providing very competitive payout terms. However, we did not want to diminish the importance of our service quality and our goal was to keep it the number one reason for people to endorse us. The ever growing numbers of affiliate sales over the last 2 years showed that we were on the right track in attracting more affiliates, but we were not so sure about their motivation to join the program and recommend us. That, combined with our wish to gather more information about who our affiliates are, how they rate the different aspects of the program, and what we can do to make things better for them, made us conduct a survey among our affiliates and the results are summarized below. Continue reading “Our Affiliates’ Verdict: Quality Matters!”

Student Web Hosting – A look at Product Management at SiteGround

marketing-process

Sharing knowledge is one of the main moving forces at SiteGround and our technical tutorials, webinars, and resources are well-known to people building on Joomla, WordPress, and other platforms. Today, we would like to test sharing knowledge a different area – how we approach marketing and product management at the company. Six months have passed since the improved Student Hosting Program was introduced and this gives me a good opportunity to tell you about the process of launching new products that we apply. Continue reading “Student Web Hosting – A look at Product Management at SiteGround”

Hangout About the New Joomla and WordPress Toolkits – Full Record and Answers

As promised, we’re adding the full recording of the hangout we had on Tuesday on our new Joomla and WordPress toolkits. We’d like to thank all of you who joined us live! We have received some questions regarding the tool after the hangout ended, so we’re going to answer them in this blog post.

Continue reading “Hangout About the New Joomla and WordPress Toolkits – Full Record and Answers”

Jetpack Critical Vulnerability Fixed on SiteGround Servers

jetpack

Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an official statement by the Jetpack developers. If the vulnerability was exploited, an attacker could publish new posts in any WordPress installation using Jetpack and possibly get even more access to that site. Although we did not detect any hacked sites through that exploit on our servers, that was a critical security hole and we took several actions to patch it.

Continue reading “Jetpack Critical Vulnerability Fixed on SiteGround Servers”

SSL HeartBleed Vulnerability Patched

heartbleed1

As some of you already know, a major vulnerability in some versions of the OpenSSL software libraries was announced two days ago. It got the fancy name “HeartBleed” and in short, allows anyone on the Internet to read the server memory protected by the vulnerable versions of the OpenSSL software and hijack your SSL’s private key. The interesting information is that not all old versions of the software are affected and there are some older and some newer ones that have it.
Continue reading “SSL HeartBleed Vulnerability Patched”

How to Bring Our Client Meetups to the Next Level?

header

After the success of our first Open Bar initiative in Orlando last year,  last week Tina, Daniel and I hosted the second SiteGround Open Bar in London. We were incredibly happy to see all the people that showed up to chat and have a drink with us. The fact that so many of you said that our support is second to none definitely made our evening and we got back home happy and more motivated to work even harder to keep that same level of highest quality of service. Besides the motivational boost, this event also made us think how to improve the client meetups.

Continue reading “How to Bring Our Client Meetups to the Next Level?”

Introducing Staging Version 2.0

v2

Last year we launched our Staging service to make it easier for our users to follow the best site development practices. The tool was received very well by our users and we have gathered some invaluable feedback. Based on the way people were using the tool, we now add few more great new features to it. The new SiteGround Staging version currently released will provide our advanced users with more flexibility and control over the staging copies, while keeping the current basic and easy-to-use functionality intact. Read on to find out more about the new features you have at your disposal!

UPDATE:If you add media to your staging copy via the WordPress admin area, some full URLs may remain like this: stage1.yourdomain.com/image.jpg thus failing to render on your live site. We’re aware of that bug and it will be fixed in the next tool update. If you experience such problems, you can either fix the URLs yourself or contact our support team to fix that for you.

Continue reading “Introducing Staging Version 2.0”