{"id":1051,"date":"2026-10-30T17:05:44","date_gmt":"2026-10-30T16:05:44","guid":{"rendered":"https:\/\/www.cisilino.com\/?p=1051"},"modified":"2026-10-30T17:06:23","modified_gmt":"2026-10-30T16:06:23","slug":"test-tab-checking-protections-work","status":"publish","type":"post","link":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/","title":{"rendered":"Test tab: checking the protections work"},"content":{"rendered":"<p>A <strong>WordPress security test<\/strong> serves one purpose: to know whether a protection genuinely works, not just whether it&#8217;s switched on. The \u201cTest\u201d tab of the CSDN plugin runs two live checks. It changes no settings at all. It checks the site right now.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/manuale-csdn-test.webp\" alt=\"Diagram of WordPress with the Test tab of the plugin CSDN for a WordPress security test\" width=\"1200\" height=\"630\"\/><\/figure>\n<h2>Where to find the WordPress security test<\/h2>\n<p>Open <strong>Settings &gt; Cisilino Site Defense Network<\/strong> (point 1 in the image). Click the <strong>Test<\/strong> tab (point 2). You&#8217;ll find two boxes:<\/p>\n<ul>\n<li>point 3: \u201cCheck PHP execution block in uploads\u201d.<\/li>\n<li>point 4: \u201cPlugin file integrity\u201d.<\/li>\n<\/ul>\n<p>After each button the site takes you back to the General tab, with a notice at the top. The result, though, is written in the Test tab. Reopen it to read it.<\/p>\n<h2>Check PHP execution block in uploads<\/h2>\n<p>This box tests the \u201cBlock PHP execution in wp-content\/uploads\u201d rule from the Hardening \/ IDS tab, described in the <a href=\"https:\/\/www.cisilino.com\/en\/?p=978\">Hardening \/ IDS<\/a> chapter. The text explains that this is the only way to know whether the rule is genuinely effective on this site. A disabled <code>AllowOverride<\/code>, or a more specific block on the server, could make it useless without telling you.<\/p>\n<h3>How to use it<\/h3>\n<ol>\n<li>In the Hardening \/ IDS tab, turn on the rule and click \u201cSave hardening rules\u201d.<\/li>\n<li>Open the Test tab.<\/li>\n<li>In the \u201cCheck PHP execution block in uploads\u201d box, click \u201cCheck now\u201d.<\/li>\n<li>Go back to the Test tab and read the result, in the \u201cLast test:\u201d row with its date.<\/li>\n<\/ol>\n<p>If the rule isn&#8217;t active and saved, the button is disabled. The box shows: \u201cTurn on and save the &#8220;Block PHP execution in wp-content\/uploads&#8221; rule in the Hardening \/ IDS tab before you can run this test.\u201d.<\/p>\n<h3>What the test does<\/h3>\n<p>The plugin writes a small test <code>.php<\/code> file into uploads. It requests it over HTTP, with a 10-second limit. Then it deletes it straight away, whatever happens. The file contains nothing but a check print statement.<\/p>\n<h3>How to read the result<\/h3>\n<ul>\n<li>Green: \u201cBlock effective: the request to the test file received N.\u201d. The number is 403 or 404.<\/li>\n<li>Red: \u201cWARNING: the test PHP file was EXECUTED (response N).\u201d The rule isn&#8217;t blocking anything. The message suggests checking that <code>AllowOverride<\/code> allows <code>.htaccess<\/code> in that folder, and that there&#8217;s no more specific <code>&lt;Directory&gt;<\/code> block.<\/li>\n<li>Yellow: \u201cUnclear result (response N, body not recognised): check manually with a direct request to the site.\u201d.<\/li>\n<li>Blue: \u201cRule disabled: turn it on and save it before running the test.\u201d.<\/li>\n<li>Red, for errors: \u201cUnable to determine the uploads folder.\u201d, \u201cUnable to write the test file to uploads (permissions?): test not run.\u201d, or \u201cCheck request failed\u201d, with the reason.<\/li>\n<\/ul>\n<p><strong>Warning:<\/strong> if the site can&#8217;t call itself, for instance because of a firewall, an HTTP password or a local DNS setting, the test returns an error or an unclear result. A 404 counts as a block, but it could be caused by something else. The test only checks the standard uploads folder. For a few seconds a <code>.php<\/code> file exists in uploads: if the block doesn&#8217;t work it could be executed, but it only contains a check print statement.<\/p>\n<h2>Plugin file integrity<\/h2>\n<p>This is the second part of the WordPress security test. The second box compares the MD5 hashes of the plugin&#8217;s <code>.php<\/code> files against the ones expected. It looks for files that are changed, missing or added. The check runs on its own once a day. The \u201cCheck now\u201d button runs it immediately.<\/p>\n<p>The box states a fixed limit: anyone who already has write access to the files can also rewrite the hashes or switch off the check. It&#8217;s a tamper detector, not a barrier.<\/p>\n<h3>How to use it<\/h3>\n<ol>\n<li>Open the Test tab.<\/li>\n<li>In the \u201cPlugin file integrity\u201d box, click \u201cCheck now\u201d.<\/li>\n<li>Read the notice: \u201cIntegrity check run: the result is in the &#8220;Plugin file integrity&#8221; box.\u201d.<\/li>\n<li>Reopen the Test tab and read the box.<\/li>\n<\/ol>\n<h3>How to read the result<\/h3>\n<p>Green: \u201cAll N files checked match. Last check: date.\u201d. If the reference is a snapshot, the box adds that it detects later changes, not a plugin already compromised at installation. Red: \u201cWARNING: the plugin&#8217;s files do not match what is expected.\u201d, with the lists \u201cChanged\u201d, \u201cMissing\u201d and \u201cUnexpected\u201d. Yellow: \u201cNo reference available\u201d. In that case, reactivate the plugin.<\/p>\n<p>The manual button doesn&#8217;t write to the activity log. Only the scheduled check does that, and only if it finds a problem or if the files return to normal after an alert. For the details, read the <a href=\"https:\/\/www.cisilino.com\/en\/?p=979\">Upload monitoring and the integrity check<\/a> chapter.<\/p>\n<p><strong>Warning:<\/strong> if you&#8217;ve edited a plugin file by hand, the red alert is normal. If you haven&#8217;t, treat the site as potentially compromised: reinstall the plugin from a trusted copy and check the rest of the installation.<\/p>\n<h2>If something goes wrong<\/h2>\n<p>Repeat the WordPress security test after every fix. If the PHP test returns red, the rule isn&#8217;t protecting anything. Ask your hosting provider whether <code>.htaccess<\/code> is enabled. If the server doesn&#8217;t read <code>.htaccess<\/code>, nginx for instance, the rule has no effect. Repeat the test after every fix. A 403 is the response you want to see: the page on <a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Reference\/Status\/403\" target=\"_blank\" rel=\"noopener\">status code 403<\/a> on MDN explains what it means.<\/p>\n<p>Previous chapter: <a href=\"https:\/\/www.cisilino.com\/en\/?p=979\">Upload monitoring and the integrity check<\/a>. Next chapter: <a href=\"https:\/\/www.cisilino.com\/en\/?p=981\">Paranoic Hardening: security headers and the admin session<\/a>. For the list of chapters go back to the <a href=\"https:\/\/www.cisilino.com\/en\/?p=972\">introduction to the manual<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Test tab of the plugin CSDN runs two live checks: the PHP block in uploads and the plugin files&#8217; integrity. Here&#8217;s how to use it and read the results.<\/p>\n","protected":false},"author":1,"featured_media":1003,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wpai_generated_summary":"","footnotes":""},"categories":[416],"tags":[164,434,444],"class_list":["post-1051","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-csdn-manual","tag-cisilino-site-defense-network-en","tag-csdn-manual","tag-php-block-check"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"A WordPress security test with the Test tab of CSDN: check whether the PHP block in uploads works, and check the plugin files&#039; integrity.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"matteocisilino\"\/>\n\t<meta name=\"google-site-verification\" content=\"_A-1f0dO30IDVHfP9muflI8kHQs-H4YOi8WLUkYzuLE\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Matteo Cisilino - Guide su WordPress, server e sicurezza\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"WordPress security test: the Test tab of CSDN\" \/>\n\t\t<meta property=\"og:description\" content=\"A WordPress security test with the Test tab of CSDN: check whether the PHP block in uploads works, and check the plugin files&#039; integrity.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/manuale-csdn-test.webp\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/manuale-csdn-test.webp\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-10-30T16:05:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-30T16:06:23+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"WordPress security test: the Test tab of CSDN\" \/>\n\t\t<meta name=\"twitter:description\" content=\"A WordPress security test with the Test tab of CSDN: check whether the PHP block in uploads works, and check the plugin files&#039; integrity.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/manuale-csdn-test.webp\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#blogposting\",\"name\":\"WordPress security test: the Test tab of CSDN\",\"headline\":\"Test tab: checking the protections work\",\"author\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/author\\\/matteocisilino\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.cisilino.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/manuale-csdn-test.webp\",\"width\":1200,\"height\":630,\"caption\":\"Schema di WordPress con la scheda Test del plugin CSDN per il test sicurezza wordpress\"},\"datePublished\":\"2026-10-30T17:05:44+01:00\",\"dateModified\":\"2026-10-30T17:06:23+01:00\",\"inLanguage\":\"en-GB\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#webpage\"},\"articleSection\":\"CSDN manual, Cisilino Site Defense Network, CSDN manual, PHP block check\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/category\\\/csdn-manual\\\/#listItem\",\"name\":\"CSDN manual\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/category\\\/csdn-manual\\\/#listItem\",\"position\":2,\"name\":\"CSDN manual\",\"item\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/category\\\/csdn-manual\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#listItem\",\"name\":\"Test tab: checking the protections work\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#listItem\",\"position\":3,\"name\":\"Test tab: checking the protections work\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/category\\\/csdn-manual\\\/#listItem\",\"name\":\"CSDN manual\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/#organization\",\"name\":\"Matteo Cisilino\",\"description\":\"Guide su WordPress, server e sicurezza\",\"url\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.cisilino.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/logo-cisilino-512.png\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#organizationLogo\",\"width\":512,\"height\":512,\"caption\":\"Logo: un cerchio a sinistra che si divide in cerchi pi\\u00f9 piccoli\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/author\\\/matteocisilino\\\/#author\",\"url\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/author\\\/matteocisilino\\\/\",\"name\":\"matteocisilino\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/639872265f0661e8aee8924ba9d756b00ea816f8286fab99a5116c729d49618f?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"matteocisilino\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#webpage\",\"url\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/\",\"name\":\"WordPress security test: the Test tab of CSDN\",\"description\":\"A WordPress security test with the Test tab of CSDN: check whether the PHP block in uploads works, and check the plugin files' integrity.\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/author\\\/matteocisilino\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/author\\\/matteocisilino\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.cisilino.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/manuale-csdn-test.webp\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#mainImage\",\"width\":1200,\"height\":630,\"caption\":\"Schema di WordPress con la scheda Test del plugin CSDN per il test sicurezza wordpress\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/2026\\\/10\\\/30\\\/test-tab-checking-protections-work\\\/#mainImage\"},\"datePublished\":\"2026-10-30T17:05:44+01:00\",\"dateModified\":\"2026-10-30T17:06:23+01:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/\",\"name\":\"Matteo Cisilino\",\"description\":\"Guide su WordPress, server e sicurezza\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.cisilino.com\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"WordPress security test: the Test tab of CSDN","description":"A WordPress security test with the Test tab of CSDN: check whether the PHP block in uploads works, and check the plugin files' integrity.","canonical_url":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"_A-1f0dO30IDVHfP9muflI8kHQs-H4YOi8WLUkYzuLE","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#blogposting","name":"WordPress security test: the Test tab of CSDN","headline":"Test tab: checking the protections work","author":{"@id":"https:\/\/www.cisilino.com\/en\/author\/matteocisilino\/#author"},"publisher":{"@id":"https:\/\/www.cisilino.com\/en\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/manuale-csdn-test.webp","width":1200,"height":630,"caption":"Schema di WordPress con la scheda Test del plugin CSDN per il test sicurezza wordpress"},"datePublished":"2026-10-30T17:05:44+01:00","dateModified":"2026-10-30T17:06:23+01:00","inLanguage":"en-GB","mainEntityOfPage":{"@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#webpage"},"isPartOf":{"@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#webpage"},"articleSection":"CSDN manual, Cisilino Site Defense Network, CSDN manual, PHP block check"},{"@type":"BreadcrumbList","@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.cisilino.com\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/www.cisilino.com\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.cisilino.com\/en\/category\/csdn-manual\/#listItem","name":"CSDN manual"}},{"@type":"ListItem","@id":"https:\/\/www.cisilino.com\/en\/category\/csdn-manual\/#listItem","position":2,"name":"CSDN manual","item":"https:\/\/www.cisilino.com\/en\/category\/csdn-manual\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#listItem","name":"Test tab: checking the protections work"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.cisilino.com\/en\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#listItem","position":3,"name":"Test tab: checking the protections work","previousItem":{"@type":"ListItem","@id":"https:\/\/www.cisilino.com\/en\/category\/csdn-manual\/#listItem","name":"CSDN manual"}}]},{"@type":"Organization","@id":"https:\/\/www.cisilino.com\/en\/#organization","name":"Matteo Cisilino","description":"Guide su WordPress, server e sicurezza","url":"https:\/\/www.cisilino.com\/en\/","logo":{"@type":"ImageObject","url":"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/logo-cisilino-512.png","@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#organizationLogo","width":512,"height":512,"caption":"Logo: un cerchio a sinistra che si divide in cerchi pi\u00f9 piccoli"},"image":{"@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/www.cisilino.com\/en\/author\/matteocisilino\/#author","url":"https:\/\/www.cisilino.com\/en\/author\/matteocisilino\/","name":"matteocisilino","image":{"@type":"ImageObject","@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/639872265f0661e8aee8924ba9d756b00ea816f8286fab99a5116c729d49618f?s=96&d=mm&r=g","width":96,"height":96,"caption":"matteocisilino"}},{"@type":"WebPage","@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#webpage","url":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/","name":"WordPress security test: the Test tab of CSDN","description":"A WordPress security test with the Test tab of CSDN: check whether the PHP block in uploads works, and check the plugin files' integrity.","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/www.cisilino.com\/en\/#website"},"breadcrumb":{"@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#breadcrumblist"},"author":{"@id":"https:\/\/www.cisilino.com\/en\/author\/matteocisilino\/#author"},"creator":{"@id":"https:\/\/www.cisilino.com\/en\/author\/matteocisilino\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/manuale-csdn-test.webp","@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#mainImage","width":1200,"height":630,"caption":"Schema di WordPress con la scheda Test del plugin CSDN per il test sicurezza wordpress"},"primaryImageOfPage":{"@id":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/#mainImage"},"datePublished":"2026-10-30T17:05:44+01:00","dateModified":"2026-10-30T17:06:23+01:00"},{"@type":"WebSite","@id":"https:\/\/www.cisilino.com\/en\/#website","url":"https:\/\/www.cisilino.com\/en\/","name":"Matteo Cisilino","description":"Guide su WordPress, server e sicurezza","inLanguage":"en-GB","publisher":{"@id":"https:\/\/www.cisilino.com\/en\/#organization"}}]},"og:locale":"en_GB","og:site_name":"Matteo Cisilino - Guide su WordPress, server e sicurezza","og:type":"article","og:title":"WordPress security test: the Test tab of CSDN","og:description":"A WordPress security test with the Test tab of CSDN: check whether the PHP block in uploads works, and check the plugin files' integrity.","og:url":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/","og:image":"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/manuale-csdn-test.webp","og:image:secure_url":"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/manuale-csdn-test.webp","og:image:width":1200,"og:image:height":630,"article:published_time":"2026-10-30T16:05:44+00:00","article:modified_time":"2026-10-30T16:06:23+00:00","twitter:card":"summary_large_image","twitter:title":"WordPress security test: the Test tab of CSDN","twitter:description":"A WordPress security test with the Test tab of CSDN: check whether the PHP block in uploads works, and check the plugin files' integrity.","twitter:image":"https:\/\/www.cisilino.com\/wp-content\/uploads\/2026\/10\/manuale-csdn-test.webp"},"aioseo_meta_data":{"post_id":"1051","title":"WordPress security test: the Test tab of CSDN","description":"A WordPress security test with the Test tab of CSDN: check whether the PHP block in uploads works, and check the plugin files' integrity.","keywords":null,"keyphrases":{"focus":{"keyphrase":"wordpress security test"}},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_custom_url":null,"og_image_custom_fields":null,"og_image_url":null,"og_image_width":null,"og_image_height":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_image_url":null,"twitter_title":null,"twitter_description":null,"schema_type":"default","schema_type_options":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"limit_modified_date":false,"ai":null,"breadcrumb_settings":null,"seo_analyzer_scan_date":null,"created":"2026-10-30 07:39:23","updated":"2026-10-30 07:42:26","focus_keyword":"wordpress security test","additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.cisilino.com\/en\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.cisilino.com\/en\/category\/csdn-manual\/\" title=\"CSDN manual\">CSDN manual<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tTest tab: checking the protections work\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.cisilino.com\/en\/"},{"label":"CSDN manual","link":"https:\/\/www.cisilino.com\/en\/category\/csdn-manual\/"},{"label":"Test tab: checking the protections work","link":"https:\/\/www.cisilino.com\/en\/2026\/10\/30\/test-tab-checking-protections-work\/"}],"_links":{"self":[{"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/posts\/1051","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/comments?post=1051"}],"version-history":[{"count":2,"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/posts\/1051\/revisions"}],"predecessor-version":[{"id":1326,"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/posts\/1051\/revisions\/1326"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/media\/1003"}],"wp:attachment":[{"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/media?parent=1051"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/categories?post=1051"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cisilino.com\/en\/wp-json\/wp\/v2\/tags?post=1051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}