1️⃣ Browser Cache

Your computer or phone saves little copies of websites so they load faster next time.

Sometimes this causes:

• Old versions of your site to appear
• Changes not showing
• Styles looking “stuck”

Easy Fix:

Clear your browser cache so it shows the new version of your site.

2️⃣ Hosting Cache (Server-Level Cache)

Many hosting providers (such as SiteGround, Bluehost, Hostinger, WP Engine, etc.) use server-level caching to speed up websites automatically.

This caching happens outside of WordPress, so even if you clear your WordPress cache, the old version may still be stored on the server.

Hosting cache can cause:

• Updates not appearing even after clearing WordPress cache
• CSS or JavaScript changes not updating
• Forums or dynamic pages loading outdated content
• Logged-in pages behaving incorrectly

• Your hosting control panel (e.g., cPanel, Site Tools, hPanel, etc.)
• A hosting plugin (e.g., SiteGround Optimizer, LiteSpeed Cache if provided by server)

If you're unsure, ask your hosting support: “Please clear the full server cache for my site.”

3️⃣ WordPress Cache

You should exclude the wpForo forum page from your cache plugin as described here:
https://wpforo.com/community/faq/wpforo-and-cache-plugins/#post-37150

WordPress or your hosting company may save old versions of pages to make things load quickly.

Sometimes this causes:

• Menus not updating
• Pages showing old content
• Your theme not showing changes

Easy Fix:

Use your “Clear Cache” or “Purge Cache” button in the WordPress admin bar or in your caching plugin.

4️⃣ wpForo Cache

wpForo has its own caching system for your forum.

Here’s how to access it:

 Step 1: Click wpForo in the left WordPress menu

 Step 2: You are now on the Overview page

 Step 3: Scroll down until you see the big box called Forum Maintenance

Everything you need is right there — no extra menus, nothing hidden.

Inside the Maintenance box, you will see:

• Delete All Caches → clears old forum data
• Clean Up → removes junk the forum doesn’t need
• Update Forums Statistic → fixes forum-wide numbers
• Update Topics Statistic → fixes topic counts
• Rebuild Phrases → refreshes the words wpForo uses
• Delete Phrase Cache → removes old saved text
• Rebuild Threads → fixes the order of messages

These buttons help your forum show the correct, updated information.

Quick Summary

However, once the user has at least one approved topic or post, the user’s profile fields will be shown in the User Profile Tab.

The following code can be used to disable this function.

add_filter( 'wpforo_profile_field_displaying_restriction', '__return_false' );

Note that this option is not related to Min number of posts to be able to edit profile information option.

How to add PHP to WordPress (quick and easy)

I. Understanding WordPress Vulnerabilities

Before diving into the security checklist, it's crucial to understand the common vulnerabilities that hackers often target in WordPress sites. By having a clear understanding of these vulnerabilities, you can take appropriate measures to mitigate them. Some of the common vulnerabilities include outdated software, weak passwords, insecure hosting environments, unsecured plugins, and themes.

II. Essential WordPress Security Measures

To prevent WordPress site hacking, there are several essential security measures you should implement:

1. Updating WordPress and Plugins Regularly

   • Keeping your WordPress core, themes, and plugins up to date is crucial for maintaining a secure site. Regular updates often include security patches that address known vulnerabilities.

2. Choosing Strong and Unique Passwords

   • Using strong and unique passwords for all user accounts, including your WordPress admin account, is fundamental. Avoid common passwords and consider using a password manager to generate and securely store your passwords.

3. Implementing Two-Factor Authentication

   • Enabling two-factor authentication adds an extra layer of security to your WordPress login process. It requires users to provide an additional verification method, such as a unique code sent to their mobile device, along with their password.

4. Limiting Login Attempts

   • Restricting the number of failed login attempts helps prevent brute force attacks. By implementing login attempt limits, you can block IP addresses or temporarily lock user accounts after a certain number of unsuccessful login attempts.

5. Using Secure Hosting and SSL Certificates

   • Choosing a reputable hosting provider that offers robust security measures is vital. Additionally, using SSL certificates ensures secure data transmission between your site and visitors, protecting sensitive information.

6. Installing Security Plugins

   • Utilizing security plugins can enhance the overall security of your WordPress site. Plugins such as Wordfence, Sucuri, or iThemes Security provide features like firewall protection, malware scanning, and login lockdowns.

7. Securing the wp-config.php File

   • The wp-config.php file contains critical information about your WordPress site. Protecting this file by moving it to a higher-level directory and restricting its access through server configurations is essential.

8. Disabling File Editing

   • By disabling file editing within the WordPress dashboard, you prevent hackers from modifying critical files like themes and plugins. This adds an extra layer of security by minimizing the risk of unauthorized access.

     9. Protecting Against Brute Force Attacks

        • Brute force attacks involve trying various password combinations until the correct one is found. To protect against these attacks, you can use plugins or server configurations that enforce strong password policies and limit the number of login attempts.

     10. Regularly Backing Up Your WordPress Site

         • Creating regular backups of your WordPress site is crucial for disaster recovery. In the event of a security breach or site compromise, having recent backups allows you to restore your site to a clean state.

     11. Monitoring for Malware and Suspicious Activity

         • Implementing a robust monitoring system helps you detect malware infections and suspicious activity promptly. Utilize security plugins that offer malware scanning features and enable notifications for any detected issues.

     Conclusion

     Securing your WordPress site is a continuous process that requires proactive measures and regular maintenance. By following this step-by-step security checklist, you can significantly reduce the risk of your WordPress site being hacked. Remember to keep your WordPress core, themes, and plugins up to date, choose strong and unique passwords, implement two-factor authentication, and utilize security plugins. Additionally, don't forget to regularly back up your site, monitor for malware, and be vigilant about any suspicious activity. By prioritizing security, you can ensure the long-term success and integrity of your WordPress site.

     FAQs (Frequently Asked Questions)

     1. Can't I just rely on a strong password to secure my WordPress site?

        • While a strong password is essential, implementing additional security measures adds layers of protection against hacking attempts.

     2. How often should I update my WordPress site and plugins?

        • It's recommended to update your WordPress site and plugins as soon as updates are available. Regular updates help patch security vulnerabilities.

     3. What is two-factor authentication, and why is it important?

        • Two-factor authentication adds an extra layer of security by requiring users to provide an additional verification method along with their password, making it harder for hackers to gain unauthorized access.

     4. Should I back up my WordPress site to the same server?

        • It's not recommended to store backups on the same server as your WordPress site. Consider using remote backup services or cloud storage for added security.

     5. What should I do if my WordPress site gets hacked?

        • If your WordPress site is hacked, take immediate action by restoring a clean backup, investigating the source of the breach, and implementing stronger security measures to prevent future attacks.

add_filter( 'wpforo_recent_posts_limit', 'wpforo_custom_recent_posts_limit' );
function wpforo_custom_recent_posts_limit( $limit ) {
    return 365;
}

You can change the 365 to any value you want.
You can add this code in functions.php file of your current active WordPress theme or use a plugin which allow you to add custom PHP code snippets like Code Snippets.

After added the code, do not forget to delete wpForo cache in wpForo > Overview admin page, scroll down, find and click the button. This code is only designed for Recent Posts page, it doesn't work for widgets.

E.g.

The red marked part of the shortcode gets the current object that the field names belong to. Those objects can be:

• user_
• owner_
• forum_
• topic_
• post_

The green part is the field name of the database table of that object. They can be the field names of default table fields, as well as the field names created either by wpForo - User Custom Fields or wpForo - Topic Custom Fields Addons.

Example with the default field.

This shortocde will display the "title" of the "forum_" object in email content. If you check the wp_wpforo_forums table in the database, you'll see there is a "title" filed in this table as well.

Example with a custom field called "website_url".

This shortocde will display the "website_url" custom field of the "topic_" object.

Rule: _url vs _link in shortcodes

The green part of the shortcode can be url or link. E.g.

• - displays not clickable URL
• - displays clickable link
• - displays not clickable URL
• - displays clickable link
• - displays not clickable URL
• - displays clickable link

All the sortcodes mentioned above work with all wpForo email templates.

In case you have some addons or the Go2wpForo plugin installed, the auto-update to wpForo 2.0 will cause errors, and you may not even login to your website. Please note that the old verion of addons are not compatible with wpForo 2.0. You should only use addons with 3.0.x version.

Solution (You do not have access to WordPress Dashboard):

1. In this case, you should use an FTP client or the File manager of your Hosting cPanel and delete addon folders from /wp-content/plugins/ directory. Also, please delete /go2wpforo/ folder if you have installed it, this plugin is only used to migrate from other forum softwares, it's not necessary anymore.
2. Then download new version of addons (3.0.verions) from your account page: https://gvectors.com/my-account/
3. Install addons in Dashboard > Plugins > Add New (use the select file form and upload the installation zip file)
4. And activate all addons with 3.0.x versions
5. Make sure wpForo version is 2.0.x and it's active

Solution (You do have access to WordPress Dashboard):

1. In this case, just delete wpForo addons and Go2wpForo plugin if you've installed it for migration.
2. Then download new version of addons (3.0.verions) from your account page: https://gvectors.com/my-account/
3. Install addons in Dashboard > Plugins > Add New (use the select file form and upload the installation zip file)
4. And activate all addons with 3.0.x versions
5. Make sure wpForo version is 2.0.x, and it's active

In case the auto-update is disabled, and you update wpForo manually

1. Backup your Database

There are many options to backup your database. You can do that using Backup plugins or do that manually as it’s described in WordPress Backing Up Your Database documentation.

2. Loosing old wpForo template customization

If you don’t have wpForo customized template files or custom CSS code, just skip this step.
If you’re updating from wpForo 1.x.x versions to wpForo 2.0.0, you should remove wpForo custom template files from your active theme /wpforo/ folder. We’re really sorry, but you cannot use your front-end customization for wpForo 2, because the old classic theme is no longer supported and the new v2 theme comes with totally different template files. Use some FTP client or hosting service cPanel > File Manager tool to remove old template files. They are located in /wp-content/themes/your-active-theme/wpforo/ folder (if you have any).

3. Deactivating all Old Addons or Updating Addons Prior to Updating wpForo

We’ve released new versions (3.x.x) of wpForo addons to make those compatible with wpForo v2. All old versions of addons are not compatible with wpForo v2, because of new forum layouts and template functions. In order to avoid errors, we recommend updating all addons. If your license key is expired, and you cannot update, please deactivate the old addons before updating wpForo to 2.x.x to avoid Fatal Errors.  You can renew those addons at gVectors Store with 30% discount applied automatically at checkout page. Just make sure you’re logged-in in the store with your customer account. For all customers, there are different Sale Packs (up to 50% discounts) depending on the number of purchased addons.

4. Updating wpForo Plugin

You can do the regular “one click” update in Dashboard > Plugins admin page. The update may take from a few seconds to one or more minutes, please don’t close the browser tab. During the update process, It does lots of changes in wpForo tables.
If the update took a long time and returned a “timeout error”, go to WordPress Dashboard > Forums > Tools > Tables Tab and make sure there is no any database error. If so, just click the button.

Problems During the Update

We’re ready to help you and fix those as soon as possible. Please open a support topic at wpForo Support Forum. Our support team works from 6am till 6pm in GMT+0 timezone. Please be patient when you open a new support topic. We’ll get back to you within 3-12 hours.

Downgrading to previous 1.9.9.1 version

You can downgrade the forum in case you have the database backup file of wpForo v2 version, otherwise it’s not possible. To downgrade wpForo, you should do the following steps:

1. Deactivate and delete wpForo 2 plugin.
2. Deactivate and delete the new 3.x.x version of Addons if you’ve already installed them.
3. Restore the backed-up database (mentioned here).
4. Then download the previous 1.9.9.1 version ZIP file from wpForo plugin page (use dropdown menu in Advanced View page). And install the ZIP file in Dashboard > Plugins > Add Plugin admin page.
5. After all these steps, you can install old version of addons you had for wpForo v1.

1. Create the page in WordPress pages admin page, and find the page ID in the address bar:

https://wpforo.com/wp-content/uploads/2022/05/wpForo-find-page-id.png

2. Install the Insert Page plugin

3. Add the following hook code in your current active WordPress theme, or install the Code Snippets plugin and add new PHP code snippets in the plugin admin page:

function wpforo_page_new_page_1( $template ){
    if( $template == 'new-page' ){
        ?>
        <div class="wpforo-page wpforo-page-1 wpforo-text">
            <?php echo do_shortcode(""); ?>
        </div>
        <?php
    }
}
add_action( 'wpforo_page', 'wpforo_page_new_page_1', 10 );

Don't forget to change the 11105 ID to your page ID. Also, you can change the "new-page" slug to any phrase without spaces and special symbols. The new-page slug is used in the custom page URL

4. The new forum page URL will be :

https://example.com/community/?wpforo=page&view=new-page

5. You can add this page to wpForo menu, go to Dashboard > Appearance > Menus admin page, select wpForo Navigation in the drop-down, Use Custom Link to add a new menu item:

• URL: https://example.com/community/?wpforo=page&view=new-page
• Menu Text: New Page

Go to Appearance > Customize > Layout/Design Option > Sticky Sidebar Option, and Uncheck "Enable Sticky Sidebar Loader" option. After disabling the Sticky Sidebar the editor of wpForo forum plugin should work file.

All processes of user registration and email sending belong to WordPress core functions. wpForo only provides a nice registration form, it doesn't have any affection on the whole user registration process.

However, we know lots of cases and solutions that could help you. Please check these points one by one before opening a new support topic:

1. Check your Spam / Junk folder. In most of the cases your website emails go to Spam folders because the "From Email" is not used correctly or your server IP address is listed in email blacklists.

2. Disable all other plugins and test it again. This is the next popular issue. There are lots of plugins which may affect  the email sending process. For example, some SMTP plugins, or antispam plugins like Cleantalk for Anti-Spam can filter outgoing emails.

3. Make sure your server email sender works well. Make sure you receive emails from your WordPress (on registration or on other cases...). You can check it in Dashboard > Forums > Tools > Debug > Errors & issues admin page. If the mail function doesn't work you'll see an error notification.

4. Install SMTP plugin. The new one is Post SMTP. Do a test email sending via Post SMTP. Check the logs of all sent emails. If you see the email is sent, then this is email receiver service issue, use other email address from other providers (gmail.com, yahoo.com, hotmail.com...) to register and test.

5. Some shared hosting services, or some Antispam plugins try to cache emails and those are not being sent immediately. You should wait 1-30 min (e.g.: on some GoDaddy hosting plans you receive emails in 45 min).

6. If you're using GMail Fetch services, go to Gmail Settings > Accounts and Import and click on "Check mail now" link to load all new comments from website email server.

7. Make sure the "Anyone Can Register" option is enabled in WordPress Settings > General page.

8. Make sure the "Enable User Registration email confirmation" option is enabled in Dashboard > wpForo > Settings > Login & Registration admin page.

9. Disable wpForo and use the WordPress native registration form to test. The native registration form can be found with this URL. Make sure you're logged out, this URL is only available for guests:

yourdomain.com/wp-login.php?action=register

After checking all these points, we recommend you contact to your hosting service and ask them check your server email logs. They should check and help you fix this issue.

As an alternative, you always have a chance to change the user registration type and disable the "Email Confirmation" step by disabling the corresponding "Enable User Registration email confirmation" option in Dashboard > wpForo > Settings > Login & Registration admin page. So your users can register without email confirmation. The password fields will be displayed on the registration form. They just need to fill the Username, Email, and Password fields and register. Here is the wpForo user registration form "with email confirmation" and "without email confirmation":

https://wpforo.com/wp-content/uploads/2020/04/wpForo-User-Registration-Form-Email-Confirmation-Enabled-and-Disabled.png