The Hostlelo Blog

What would you like to solve?

Practical hosting, WordPress and cloud guides. Clear steps, fewer surprises.

Latest practical guides

Disable WordPress XML-RPC Safely Without Breaking Apps

Check whether Jetpack or a mobile app needs xmlrpc.php, then block or rate-limit it at the server and prove the change worked with a single curl command.

October 25, 202617 min read

A DNS network shows one broken cloud target and a separate protected cloud path with a check mark.

DNS & security

Find and Delete Dangling DNS Records Before Attackers Do

An old CNAME pointing at a deleted service can let a stranger claim your subdomain. Export your zone, check every target, and delete the dead records safely.

October 24, 202618 min read

Website folders and configuration files sit behind a central shield, locks and a verification check.

WordPress

Harden WordPress Files After the PHP RCE: 6 Checks

After the October 2026 PHP RCE release, patch PHP, then tighten WordPress permissions, lock wp-config.php, disable the file editor and block include files.

October 24, 202617 min read

New to hosting? Start with the basics