Malware
-
i have been using WordPress for more than a year already. Lately, i added in a form for people to sign up. Information requested were name and phone #. i need to include privacy policy. So i went to find a privacy policy generator for my site. i came across freeprivacypolicy.com site. i was asked this question about Malware. Does WordPress has its own scan software or users have to install widget? Appreciate if you can advise briefly also on the above-mentioned process. Thanks.
The blog I need help with is: (visible only to logged in users)
-
Hi there,
On WordPress.com we block all types of HTML and JavaScript that can be used to add malware to a site, and sites that are found to link to malware are suspended, so there is no risk of malware here.
As for gathering user information, on that I can’t advise you. I’d recommend you talk to a lawyer that specialises in electronic communication and data privacy to find out what is legal or not in your area and what type of information you’d need on a privacy policy.
Note that WordPress.com contact forms are not encrypted, so shouldn’t be used to gather any sensitive information.
-
Hi Happiness Engineer, thanks for your reply on malware. Appreciated. Noted on contact forms and privacy data.
-
-
Hi there again, i do not understand why wordpress.com has SSL, yet the contact form is not encrypted. Can you explain?
-
-
SSL encrypts traffic to your site. However, when someone submits the contact form, that information is sent to you via email. That email does not form part of traffic to your site, and is not encrypted.
-
What if the email service provider has https ? Like Yahoo Mail.
Does it mean it is secured then? -
No. That only means that when you visit Yahoo’s website your browsing session with them is encrypted, meaning others cannot spy on the information being sent between your browser and the website.
But email itself is not encrypted, not unless you are running your own email server with encryption, and that’s generally something only governments do. There are a few general email providers that offer mail encryption as well, but it’s a premium service – you pay for that level of security because it is an enormous hassle to set up. You can read these articles for some more information on this:
http://www.howtogeek.com/187961/why-no-one-uses-encrypted-email-messages/
http://www.digitaltrends.com/computing/can-email-ever-be-secure/
This is why you should never send your password for any account via email, and why banks never ask for stuff like your credit card number via email – if you do get an email from your bank asking for your CC number or password, it’s almost certain that email isn’t from your bank but is a scam.
-
Once again, thank you very much for your explanation. It has been an informative session.
Pardon me, but i have another question.
Any suggestion to safeguard the information like name and hand phone number(one time) of global participants for a programme that i am going to conduct. Purpose for the information is to contact and sent information.i thought of this: instead of exposing the information from ALL the participants, i expose mine ONLY to the world. so that people can contact me through whatsapp. Is there other safer alternatives that WordPress can help?
By the way are you a staff of WordPress or am i chatting with season user of WordPress? ;-)
-
I am a member of WordPress.com support staff, yes :)
WordPress.com is not designed for the purpose of storing contact information, and displaying contact information of others on a WordPress.com is actually a breach of our terms, so I don’t think we have a solution with you.
Without knowing exactly what you want to do I’m also unable to offer any advice. I’ll repeat my recommendation that you rather contact a lawyer who specialises in these matters for advice as many countries have specific laws regarding the collection, storage and use of contact information of others. Once you know the legal requirements applicable to you you’ll be in a better position to find a solution that will work for you.
-
-
i would like to correct my english: instead of exposing(my meaning unencrypted) the contacts information i don’t mean displaying them but a form with name and phone number fields were created for people to enter and WordPress send them to my email. no one sees their information except me through email. so instead of all the trouble of security of others’ information, i just display mine in my blog for people to contact me, is that allowable?
-
You are welcome to display your own contact information on your site, yes. Just keep in mind anyone who can see your site will see it, including spammers and people you wouldn’t necessarily want to have your phone number.
Phone numbers are not nearly as sensitive as, say, banking details, so collecting them via a form should be fairly safe, but as for the legality of collecting them, you’ll need to consult a lawyer as I’ve already mentioned.
-
Your reply really helped me to understand better about security and legality. Thank you very much!
-
-
Hi
can i add donation widget for my blog? How?is there a way to place the countdown widget at the top rather than at the bottom?
-
You can add a PayPal donation button to your site. Most third-party widgets need JavaScript to work, and that code is not allowed here, but the PayPal button uses plain HTML so you can use it here:
You can try pasting the code of other widgets into a text widget, but I cannot guarantee that it will work.
You can change the order of widgets in the Customizer. Click on My Sites, then click the Customize button next to Themes. Click on Widgets. Select the widget area. You should be able to drag and drop any widgets showing there into the order you want them.
-
Thanks.
i have added the Google translator. It works on my desktop but not on the mobile phone. It appears but no selection. Please help.
-
I don’t see a Google Translate widget anywhere on http://thiswillchangethewayyouthink.wordpress.com/ Are you speaking of a different site?
The Google Translate widget works for me on a different site using Chrome for Android. What mobile browser are you using? It could be that the browser does not support the code that makes that widget work.
- The topic ‘Malware’ is closed to new replies.
WordPress.com Forums 