1. PROTECT YO SELF OR WRECK YO SELF WordPress REST API & Security Sean Borsodi | WordCamp Fayetteville 2015

2. TOPICS SECURITYREST APIWORDPRESS

3. What is WordPress?

4. CMSDB WORDPRESS

5. CMSDB WORDPRESS CORE

6. CMSDB WORDPRESS CORE API

7. CMSDB WORDPRESS CORE API REST API

9. What is it good for?

10. REST API Absolutely everything. Say it again y’all!

11. REST API API RESTful Development HTTP Headers Authentication

12. REST API API Application Programming Interface(API) is a set of routines, protocols, and tools for building software.

13. REST API

17. RESTful Development Representational State Transfer(REST) is a software architecture style for building scalable web services.

18. REST API

21. HTTP Headers Hypertext Transfer Protocol(HTTP) headers define the parameters of the HTTP request and response messages.

22. REST API

25. Authentication Method of authenticating the API requests: Cookie, Basic, OAuth, HMAC

26. SECURITY You have been hacked! Cross-site request forgery(CSRF) - uses a trusted users session. Playback Attack - an intercepted request and is resent.

27. SECURITY Cookie Authentication Is the basic authentication included with WordPress. When you log in to your dashboard, this sets up cookies in your browser.

28. SECURITY

29. Basic Authentication Is an optional authentication handler for external clients. Basic authentication requires you to pass the username and password with each request.

30. SECURITY OAuth Authentication Is the main authentication handler for external clients. OAuth uses tokens that enables clients to access the API.

31. SECURITY

34. HMAC Authentication Hash-based Message Authentication Code(HMAC) is a hash function that is considered practically impossible to invert.

35. SECURITY

37. Thank You (Questions || Comments || Suggestions) Sean Borsodi | WordCamp Fayetteville 2015