{"id":4976,"date":"2025-12-17T11:24:36","date_gmt":"2025-12-17T11:24:36","guid":{"rendered":"https:\/\/www.airsang.com\/?p=4976"},"modified":"2026-01-05T09:24:19","modified_gmt":"2026-01-05T09:24:19","slug":"cac-cuoc-tan-cong-phat-lai-vao-wordpress-moi-de-doa-thuc-su-hay-chi-la-huyen-thoai-duoc-thoi-phong-qua-muc","status":"publish","type":"post","link":"https:\/\/www.airsang.com\/vi\/cac-cuoc-tan-cong-phat-lai-vao-wordpress-moi-de-doa-thuc-su-hay-chi-la-huyen-thoai-duoc-thoi-phong-qua-muc\/","title":{"rendered":"T\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i tr\u00ean WordPress: M\u1ed1i \u0111e d\u1ecda th\u1ef1c s\u1ef1 hay ch\u1ec9 l\u00e0 huy\u1ec1n tho\u1ea1i \u0111\u01b0\u1ee3c th\u1ed5i ph\u1ed3ng qu\u00e1 m\u1ee9c?"},"content":{"rendered":"<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1-1024x576.png\" alt=\"T\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i tr\u00ean WordPress: M\u1ed1i \u0111e d\u1ecda th\u1ef1c s\u1ef1 hay ch\u1ec9 l\u00e0 huy\u1ec1n tho\u1ea1i \u0111\u01b0\u1ee3c th\u1ed5i ph\u1ed3ng qu\u00e1 m\u1ee9c?\" class=\"wp-image-4981\" srcset=\"https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1-1024x576.png 1024w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1-300x169.png 300w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1-768x432.png 768w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1-1536x864.png 1536w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1-18x10.png 18w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1-1000x563.png 1000w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1-1x1.png 1w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1-10x6.png 10w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/image-7-1.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Tr\u01b0\u1edbc ti\u00ean, ch\u00fang ta c\u1ea7n l\u00e0m r\u00f5 m\u1ed9t s\u1ed1 \u0111i\u1ec1u.<\/p>\n\n\n\n<p>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng b\u1eb1ng c\u00e1ch ph\u00e1t l\u1ea1i d\u1eef li\u1ec7u tr\u00f4ng kh\u00f4ng \u0111\u00e1ng s\u1ee3.<br>H\u1ecd kh\u00f4ng ph\u00e1 m\u1eadt kh\u1ea9u.<br>H\u1ecd kh\u00f4ng ch\u00e8n m\u00e3 \u0111\u1ed9c v\u1edbi nh\u1eefng \u0111o\u1ea1n m\u00e3 hacker m\u00e0u xanh l\u00e1 c\u00e2y bay t\u1ee9 tung kh\u1eafp n\u01a1i.<\/p>\n\n\n\n<p>H\u1ecd x\u1ea3o quy\u1ec7t. L\u1ecbch s\u1ef1. V\u00e0 hi\u1ec7u qu\u1ea3 \u0111\u1ebfn m\u1ee9c kh\u00f3 ch\u1ecbu.<\/p>\n\n\n\n<p>V\u00e0 \u0111\u00fang v\u1eady, ch\u00fang ho\u00e0n to\u00e0n \u00e1p d\u1ee5ng cho <strong><a href=\"https:\/\/wordpress.com\/\" target=\"_blank\" rel=\"noopener\">WordPress<\/a><\/strong> c\u00e1c trang web.<\/p>\n\n\n\n<p>\u0110\u1eb7c bi\u1ec7t n\u1ebfu trang web c\u1ee7a b\u1ea1n x\u1eed l\u00fd \u0111\u0103ng nh\u1eadp, thanh to\u00e1n, bi\u1ec3u m\u1eabu li\u00ean h\u1ec7, y\u00eau c\u1ea7u AJAX ho\u1eb7c b\u1ea5t k\u1ef3 th\u1ee9 g\u00ec li\u00ean quan \u0111\u1ebfn n\u00fat &quot;G\u1eedi&quot;.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">V\u1eady\u2026 T\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i l\u00e0 g\u00ec (theo ng\u00f4n ng\u1eef d\u1ec5 hi\u1ec3u)?<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"683\" src=\"https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/e86d358e-da0c-4e20-8a67-5ce342075455-1024x683.png\" alt=\"T\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i tr\u00ean WordPress: M\u1ed1i \u0111e d\u1ecda th\u1ef1c s\u1ef1 hay ch\u1ec9 l\u00e0 huy\u1ec1n tho\u1ea1i \u0111\u01b0\u1ee3c th\u1ed5i ph\u1ed3ng qu\u00e1 m\u1ee9c? - T\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i l\u00e0 g\u00ec?\" class=\"wp-image-4982\" srcset=\"https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/e86d358e-da0c-4e20-8a67-5ce342075455-1024x683.png 1024w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/e86d358e-da0c-4e20-8a67-5ce342075455-300x200.png 300w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/e86d358e-da0c-4e20-8a67-5ce342075455-768x512.png 768w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/e86d358e-da0c-4e20-8a67-5ce342075455-18x12.png 18w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/e86d358e-da0c-4e20-8a67-5ce342075455-1000x667.png 1000w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/e86d358e-da0c-4e20-8a67-5ce342075455-1x1.png 1w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/e86d358e-da0c-4e20-8a67-5ce342075455-10x7.png 10w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/e86d358e-da0c-4e20-8a67-5ce342075455.png 1536w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>V\u1ec1 c\u01a1 b\u1ea3n, t\u1ea5n c\u00f4ng b\u1eb1ng c\u00e1ch ph\u00e1t l\u1ea1i (replay attack) l\u00e0 nh\u01b0 sau:<\/p>\n\n\n\n<p>K\u1ebb t\u1ea5n c\u00f4ng ghi l\u1ea1i m\u1ed9t y\u00eau c\u1ea7u h\u1ee3p l\u1ec7\u2014nh\u01b0 \u0111\u0103ng nh\u1eadp, \u0111i\u1ec1n bi\u1ec3u m\u1eabu ho\u1eb7c thanh to\u00e1n\u2014r\u1ed3i g\u1eedi l\u1ea1i y\u00eau c\u1ea7u \u0111\u00f3. R\u1ed3i l\u1ea1i g\u1eedi \u0111i g\u1eedi l\u1ea1i nhi\u1ec1u l\u1ea7n.<\/p>\n\n\n\n<p>Kh\u00f4ng c\u1ea7n k\u1ef9 n\u0103ng hack.<br>Ch\u1ec9 c\u1ea7n sao ch\u00e9p \u2192 d\u00e1n \u2192 ki\u1ebfm l\u1eddi.<\/p>\n\n\n\n<p>N\u1ebfu trang web WordPress c\u1ee7a b\u1ea1n kh\u00f4ng ki\u1ec3m tra xem y\u00eau c\u1ea7u \u0111\u00f3 \u0111\u00e3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng hay ch\u01b0a, trang web c\u1ee7a b\u1ea1n s\u1ebd hi\u1ec3n th\u1ecb th\u00f4ng b\u00e1o:<\/p>\n\n\n\n<p>\u201cCh\u1eafc ch\u1eafn r\u1ed3i! Ch\u00fang ta l\u00e0m l\u1ea1i l\u1ea7n n\u1eefa nh\u00e9.\u201d<\/p>\n\n\n\n<p>V\u00e0 \u0111\u00f3 l\u00e0 n\u01a1i r\u1eafc r\u1ed1i b\u1eaft \u0111\u1ea7u.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">V\u00ec sao c\u00e1c trang web WordPress l\u1ea1i l\u00e0 m\u1ee5c ti\u00eau h\u00e0ng \u0111\u1ea7u?<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/cee93e44-8ea6-47dc-ba04-382a6c996720.png\" alt=\"T\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i tr\u00ean WordPress: M\u1ed1i \u0111e d\u1ecda th\u1ef1c s\u1ef1 hay ch\u1ec9 l\u00e0 huy\u1ec1n tho\u1ea1i \u0111\u01b0\u1ee3c th\u1ed5i ph\u1ed3ng? - T\u1ea1i sao c\u00e1c trang web WordPress l\u1ea1i l\u00e0 m\u1ee5c ti\u00eau h\u00e0ng \u0111\u1ea7u\" class=\"wp-image-4983\" srcset=\"https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/cee93e44-8ea6-47dc-ba04-382a6c996720.png 1024w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/cee93e44-8ea6-47dc-ba04-382a6c996720-300x169.png 300w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/cee93e44-8ea6-47dc-ba04-382a6c996720-768x432.png 768w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/cee93e44-8ea6-47dc-ba04-382a6c996720-18x10.png 18w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/cee93e44-8ea6-47dc-ba04-382a6c996720-1000x563.png 1000w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/cee93e44-8ea6-47dc-ba04-382a6c996720-1x1.png 1w, https:\/\/www.airsang.com\/wp-content\/uploads\/2025\/12\/cee93e44-8ea6-47dc-ba04-382a6c996720-10x6.png 10w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>WordPress kh\u00f4ng ph\u1ea3i l\u00e0 kh\u00f4ng an to\u00e0n theo m\u1eb7c \u0111\u1ecbnh\u2014nh\u01b0ng n\u00f3 r\u1ea5t linh ho\u1ea1t. V\u00e0 s\u1ef1 linh ho\u1ea1t d\u1ec5 d\u1eabn \u0111\u1ebfn sai s\u00f3t.<\/p>\n\n\n\n<p>\u0110\u00e2y l\u00e0 l\u00fd do t\u1ea1i sao c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i l\u1ea1i \u01b0a th\u00edch WordPress:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>C\u00e1c plugin kh\u00f4ng ph\u1ea3i l\u00fac n\u00e0o c\u0169ng l\u00e0 nh\u1eefng chuy\u00ean gia b\u1ea3o m\u1eadt.<\/strong><br>M\u1ed9t s\u1ed1 b\u1ecf qua b\u01b0\u1edbc ki\u1ec3m tra nonce. M\u1ed9t s\u1ed1 t\u00e1i s\u1eed d\u1ee5ng token. M\u1ed9t s\u1ed1 th\u00ec ch\u1ec9 bi\u1ebft tr\u00f4ng ch\u1edd v\u00e0o may m\u1eafn.<\/li>\n\n\n\n<li><strong>C\u00f3 r\u1ea5t nhi\u1ec1u y\u00eau c\u1ea7u nh\u1ea1y c\u1ea3m \u0111ang \u0111\u01b0\u1ee3c x\u1eed l\u00fd.<\/strong><br>\u0110\u0103ng nh\u1eadp, thanh to\u00e1n, \u0111\u1eb7t l\u1ea1i m\u1eadt kh\u1ea9u, bi\u1ec3u m\u1eabu li\u00ean h\u1ec7\u2014t\u1ea5t c\u1ea3 \u0111\u1ec1u c\u00f3.<\/li>\n\n\n\n<li><strong>API AJAX v\u00e0 REST \u1edf kh\u1eafp m\u1ecdi n\u01a1i<\/strong><br>WordPress hi\u1ec7n \u0111\u1ea1i ho\u1ea1t \u0111\u1ed9ng d\u1ef1a tr\u00ean c\u00e1c y\u00eau c\u1ea7u n\u1ec1n. Tin t\u1eb7c r\u1ea5t th\u00edch c\u00e1c y\u00eau c\u1ea7u n\u1ec1n.<\/li>\n\n\n\n<li><strong>C\u00e1c l\u1ed7i c\u1ea5u h\u00ecnh SSL v\u1eabn c\u00f2n t\u1ed3n t\u1ea1i<\/strong><br>V\u00e2ng, v\u00e0o n\u0103m 2025. Th\u1eadt kh\u00f4ng may.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i tr\u00f4ng nh\u01b0 th\u1ebf n\u00e0o trong th\u1ef1c t\u1ebf?<\/h2>\n\n\n\n<p>Kh\u00f4ng ph\u1ea3i l\u00fd thuy\u1ebft su\u00f4ng. R\u1ea5t th\u1ef1c t\u1ebf.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Chi\u1ebfm \u0111o\u1ea1t \u0111\u0103ng nh\u1eadp<\/h3>\n\n\n\n<p>Y\u00eau c\u1ea7u \u0111\u0103ng nh\u1eadp b\u1ecb chi\u1ebfm \u0111o\u1ea1t \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng l\u1ea1i. Phi\u00ean \u0111\u0103ng nh\u1eadp b\u1ecb chi\u1ebfm \u0111o\u1ea1t. Gi\u1edd \u0111\u00e2y, ng\u01b0\u1eddi kh\u00e1c \u0111ang \u0111\u00f3ng vai &quot;b\u1ea1n&quot;.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Thanh to\u00e1n tr\u00f9ng l\u1eb7p<\/h3>\n\n\n\n<p>M\u1ed9t y\u00eau c\u1ea7u thanh to\u00e1n \u2192 \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n l\u1ea1i \u2192 t\u00ednh ph\u00ed g\u1ea5p \u0111\u00f4i (ho\u1eb7c g\u1ea5p ba). Kh\u00e1ch h\u00e0ng ho\u1ea3ng lo\u1ea1n. B\u1ea1n c\u00f2n ho\u1ea3ng lo\u1ea1n h\u01a1n.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Th\u01b0 r\u00e1c d\u1ea1ng bi\u1ec3u m\u1eabu \u0111\u01b0\u1ee3c t\u0103ng c\u01b0\u1eddng s\u1ee9c m\u1ea1nh<\/h3>\n\n\n\n<p>M\u1ed9t bi\u1ec3u m\u1eabu li\u00ean h\u1ec7 \u0111\u01b0\u1ee3c g\u1eedi \u0111i 500 l\u1ea7n. H\u1ed9p th\u01b0 \u0111\u1ebfn c\u1ee7a b\u1ea1n s\u1eafp k\u00eau c\u1ee9u r\u1ed3i.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">C\u00e1c \u0111i\u1ec3m cu\u1ed1i API b\u1ecb l\u1ea1m d\u1ee5ng<\/h3>\n\n\n\n<p>C\u00e1c cu\u1ed9c g\u1ecdi AJAX ho\u1eb7c REST kh\u00f4ng \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 s\u1ebd \u0111\u01b0\u1ee3c ph\u00e1t l\u1ea1i cho \u0111\u1ebfn khi m\u00e1y ch\u1ee7 c\u1ee7a b\u1ea1n c\u1ea7u xin tha th\u1ee9.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">M\u1ee9c \u0111\u1ed9 kh\u00f3 t\u0103ng th\u00eam: HTTP\/3 &amp; 0-RTT l\u00e0m cho vi\u1ec7c n\u00e0y kh\u00f3 h\u01a1n<\/h2>\n\n\n\n<p>M\u1ea1ng internet nhanh h\u01a1n mang \u0111\u1ebfn\u2026 nh\u1eefng b\u1ea5t ng\u1edd th\u00fa v\u1ecb.<\/p>\n\n\n\n<p>TLS 1.3 gi\u1edbi thi\u1ec7u 0-RTT (d\u1eef li\u1ec7u s\u1edbm), \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 c\u00f3 th\u1ec3 ph\u00e1t l\u1ea1i. \u0110\u00f3 kh\u00f4ng ph\u1ea3i l\u00e0 l\u1ed7i m\u00e0 l\u00e0 quy lu\u1eadt v\u1eadt l\u00fd.<\/p>\n\n\n\n<p>N\u1ebfu trang web WordPress c\u1ee7a b\u1ea1n:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>S\u1eed d\u1ee5ng CDN<\/li>\n\n\n\n<li>H\u1ed7 tr\u1ee3 HTTP\/3<\/li>\n\n\n\n<li>Ch\u1ea5p nh\u1eadn d\u1eef li\u1ec7u ban \u0111\u1ea7u m\u00e0 kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c.<\/li>\n<\/ul>\n\n\n\n<p>Ch\u00fac m\u1eebng\u2014b\u1ea1n \u0111\u00e3 m\u1edf r\u1ed9ng c\u1eeda s\u1ed5 ph\u00e1t l\u1ea1i.<\/p>\n\n\n\n<p>N\u1ebfu b\u1ea1n kh\u00f4ng <em>nhu c\u1ea7u<\/em> D\u1eef li\u1ec7u thu th\u1eadp s\u1edbm, h\u00e3y t\u1eaft n\u00f3 \u0111i. T\u1ed1c \u0111\u1ed9 \u0111\u01b0\u1ee3c c\u1ea3i thi\u1ec7n kh\u00f4ng \u0111\u00e1ng \u0111\u1ec3 \u0111\u00e1nh \u0111\u1ed5i v\u1edbi nh\u1eefng r\u1eafc r\u1ed1i v\u1ec1 b\u1ea3o m\u1eadt.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">C\u00e1ch ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i tr\u00ean WordPress (m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i m\u1ea5t ng\u1ee7)<\/h2>\n\n\n\n<p>Tin vui: WordPress \u0111\u00e3 cung c\u1ea5p s\u1eb5n c\u00e1c c\u00f4ng c\u1ee5. B\u1ea1n ch\u1ec9 c\u1ea7n s\u1eed d\u1ee5ng ch\u00fang.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. H\u00e3y d\u00f9ng t\u1eeb &quot;Nonce&quot; m\u1ed9t c\u00e1ch nghi\u00eam t\u00fac.<\/h3>\n\n\n\n<p>Nonces = \u201cs\u1ed1 ch\u1ec9 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng m\u1ed9t l\u1ea7n.\u201d<br>Ch\u00fang l\u00e0 c\u01a1 ch\u1ebf ph\u00f2ng v\u1ec7 ch\u1ed1ng t\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i t\u00edch h\u1ee3p s\u1eb5n c\u1ee7a WordPress.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>S\u1eed d\u1ee5ng <code>wp_nonce_field()<\/code> d\u01b0\u1edbi d\u1ea1ng<\/li>\n\n\n\n<li>X\u00e1c th\u1ef1c b\u1eb1ng <code>wp_verify_nonce()<\/code><\/li>\n\n\n\n<li>Ki\u1ec3m tra m\u00e3 t\u00f9y ch\u1ec9nh v\u00e0 c\u00e1c plugin c\u0169.<\/li>\n<\/ul>\n\n\n\n<p>N\u1ebfu y\u00eau c\u1ea7u kh\u00f4ng c\u00f3 nonce h\u1ee3p l\u1ec7, n\u00f3 s\u1ebd kh\u00f4ng \u0111\u01b0\u1ee3c ch\u1ea5p nh\u1eadn. \u0110\u01a1n gi\u1ea3n v\u1eady th\u00f4i.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Th\u00eam gi\u1edbi h\u1ea1n th\u1eddi gian<\/h3>\n\n\n\n<p>Ngay c\u1ea3 nh\u1eefng y\u00eau c\u1ea7u t\u1ed1t c\u0169ng kh\u00f4ng n\u00ean t\u1ed3n t\u1ea1i m\u00e3i m\u00e3i.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Th\u00eam d\u1ea5u th\u1eddi gian v\u00e0o c\u00e1c y\u00eau c\u1ea7u<\/li>\n\n\n\n<li>H\u00e3y lo\u1ea1i b\u1ecf b\u1ea5t c\u1ee9 th\u1ee9 g\u00ec c\u0169 h\u01a1n v\u00e0i ph\u00fat.<\/li>\n<\/ul>\n\n\n\n<p>C\u1eeda s\u1ed5 ph\u00e1t l\u1ea1i \u0111\u00e3 \u0111\u00f3ng.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. M\u00e3 th\u00f4ng b\u00e1o d\u00f9ng m\u1ed9t l\u1ea7n cho c\u00e1c h\u00e0nh \u0111\u1ed9ng nh\u1ea1y c\u1ea3m<\/h3>\n\n\n\n<p>\u0110\u1eb7t l\u1ea1i m\u1eadt kh\u1ea9u, li\u00ean k\u1ebft th\u1ea7n k\u1ef3, x\u00e1c nh\u1eadn thanh to\u00e1n\u2014ch\u1ec9 d\u00f9ng m\u1ed9t l\u1ea7n, h\u1ebft h\u1ea1n nhanh ch\u00f3ng.<\/p>\n\n\n\n<p>H\u1ea7u h\u1ebft c\u00e1c plugin chuy\u00ean nghi\u1ec7p \u0111\u1ec1u h\u1ed7 tr\u1ee3 t\u00ednh n\u0103ng n\u00e0y. H\u00e3y b\u1eadt n\u00f3 l\u00ean.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. HTTPS \u1edf m\u1ecdi n\u01a1i (Kh\u00f4ng c\u00f3 ngo\u1ea1i l\u1ec7)<\/h3>\n\n\n\n<p>HTTPS m\u00e3 h\u00f3a l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp, khi\u1ebfn vi\u1ec7c ghi l\u1ea1i qu\u00e1 tr\u00ecnh ph\u00e1t l\u1ea1i tr\u1edf n\u00ean kh\u00f3 kh\u0103n h\u01a1n nhi\u1ec1u.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Bu\u1ed9c s\u1eed d\u1ee5ng SSL<\/li>\n\n\n\n<li>Kh\u1eafc ph\u1ee5c c\u1ea3nh b\u00e1o n\u1ed9i dung h\u1ed7n h\u1ee3p<\/li>\n\n\n\n<li>\u0110\u1eebng gi\u1ea3 v\u1edd r\u1eb1ng HTTP &quot;c\u00f3 l\u1ebd v\u1eabn \u1ed5n&quot; n\u1eefa.\u201c<\/li>\n<\/ul>\n\n\n\n<p>Kh\u00f4ng ph\u1ea3i v\u1eady.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. B\u1ea3o m\u1eadt API AJAX &amp; REST<\/h3>\n\n\n\n<p>\u0110\u1eebng bao gi\u1edd tin t\u01b0\u1edfng m\u1ed9t y\u00eau c\u1ea7u ch\u1ec9 v\u00ec n\u00f3 &quot;\u0111\u1ebfn t\u1eeb trang web c\u1ee7a b\u1ea1n&quot;.\u201c<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Y\u00eau c\u1ea7u tr\u1ea1ng th\u00e1i \u0111\u0103ng nh\u1eadp<\/li>\n\n\n\n<li>X\u00e1c th\u1ef1c nonce<\/li>\n\n\n\n<li>Ki\u1ec3m tra quy\u1ec1n ng\u01b0\u1eddi d\u00f9ng \u1edf ph\u00eda m\u00e1y ch\u1ee7<\/li>\n<\/ul>\n\n\n\n<p>M\u1ed7i h\u00e0nh \u0111\u1ed9ng n\u00ean t\u1ef1 h\u1ecfi: B\u1ea1n th\u1ef1c s\u1ef1 l\u00e0 ai?<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">6. Gi\u00e1m s\u00e1t nh\u01b0 m\u1ed9t chuy\u00ean gia \u0111a nghi<\/h3>\n\n\n\n<p>B\u1ea1n kh\u00f4ng c\u1ea7n n\u1ed7i s\u1ee3 h\u00e3i\u2014b\u1ea1n c\u1ea7n s\u1ef1 hi\u1ec7n di\u1ec7n.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Gi\u1edbi h\u1ea1n t\u1ed1c \u0111\u1ed9<\/li>\n\n\n\n<li>Ph\u00e1t hi\u1ec7n y\u00eau c\u1ea7u l\u1eb7p l\u1ea1i<\/li>\n\n\n\n<li>C\u00e1c plugin b\u1ea3o m\u1eadt c\u00f3 ch\u1ee9c n\u0103ng ghi nh\u1eadt k\u00fd y\u00eau c\u1ea7u.<\/li>\n<\/ul>\n\n\n\n<p>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ph\u00e1t l\u1ea1i c\u00f3 t\u00ednh ch\u1ea5t l\u1eb7p \u0111i l\u1eb7p l\u1ea1i. \u0110i\u1ec1u \u0111\u00f3 khi\u1ebfn ch\u00fang d\u1ec5 b\u1ecb ph\u00e1t hi\u1ec7n.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">D\u00e0nh cho c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n plugin (ho\u1eb7c c\u00e1c l\u1eadp tr\u00ecnh vi\u00ean t\u00f9y ch\u1ec9nh t\u00e0i ba)<\/h2>\n\n\n\n<p>\u0110i\u1ec3m c\u1ed9ng th\u00eam n\u1ebfu b\u1ea1n:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ki\u1ec3m tra vai tr\u00f2 ng\u01b0\u1eddi d\u00f9ng, kh\u00f4ng ch\u1ec9 s\u1ed1 ng\u1eabu nhi\u00ean.<\/li>\n\n\n\n<li>Tr\u00e1nh l\u01b0u tr\u1eef c\u00e1c bi\u1ec3u m\u1eabu \u0111\u1ed9ng v\u00e0o b\u1ed9 nh\u1edb cache.<\/li>\n\n\n\n<li>\u0110\u1ea3m b\u1ea3o logic thanh to\u00e1n c\u00f3 t\u00ednh ch\u1ea5t b\u1ea5t bi\u1ebfn (x\u1eed l\u00fd l\u1ed7i khi c\u00f3 giao d\u1ecbch tr\u00f9ng l\u1eb7p m\u1ed9t c\u00e1ch an to\u00e0n).<\/li>\n\n\n\n<li>Ch\u1eef k\u00fd v\u00e0 d\u1ea5u th\u1eddi gian webhook an to\u00e0n<\/li>\n<\/ul>\n\n\n\n<p>B\u1ea1n c\u1ee7a t\u01b0\u01a1ng lai s\u1ebd bi\u1ebft \u01a1n \u0111i\u1ec1u n\u00e0y.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">T\u00f3m l\u1ea1i: T\u1ea5n c\u00f4ng b\u1eb1ng c\u00e1ch xem l\u1ea1i video r\u1ea5t nh\u00e0m ch\u00e1n\u2014nh\u01b0ng nguy hi\u1ec3m.<\/h2>\n\n\n\n<p>C\u00e1c v\u1ee5 t\u1ea5n c\u00f4ng b\u1eb1ng c\u00e1ch xem l\u1ea1i video s\u1ebd kh\u00f4ng g\u00e2y ch\u00fa \u00fd tr\u00ean b\u00e1o ch\u00ed.<br>Nh\u01b0ng h\u1ecd s\u1ebd l\u00e0m \u0111i\u1ec1u \u0111\u00f3 m\u1ed9t c\u00e1ch l\u1eb7ng l\u1ebd:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ti\u00eau h\u1ebft ti\u1ec1n<\/li>\n\n\n\n<li>H\u1ec7 th\u1ed1ng th\u01b0 r\u00e1c<\/li>\n\n\n\n<li>Ph\u00e1 ho\u1ea1i l\u00f2ng tin<\/li>\n<\/ul>\n\n\n\n<p>V\u00e0 c\u00e1c trang web WordPress n\u00e0o b\u1ecf qua nh\u1eefng \u0111i\u1ec1u n\u00e0y cu\u1ed1i c\u00f9ng s\u1ebd ph\u1ea3i tr\u1ea3 gi\u00e1 \u0111\u1eaft.<\/p>\n\n\n\n<p>T\u1ea1i <strong><a href=\"https:\/\/www.airsang.com\/vi\/\" target=\"_blank\" rel=\"noopener\">AIRSANG<\/a><\/strong>, L\u1ed1i suy ngh\u0129 n\u00e0y \u0111\u00e3 \u0103n s\u00e2u v\u00e0o c\u00e1ch ch\u00fang ta l\u00e0m vi\u1ec7c.<br>Ch\u00fang t\u00f4i t\u1eadp trung v\u00e0o c\u00e1c trang web xuy\u00ean bi\u00ean gi\u1edbi., <strong><a href=\"https:\/\/wordpress.com\/\" target=\"_blank\" rel=\"noopener\">WordPress<\/a><\/strong> &amp; <strong><a href=\"https:\/\/www.shopify.com\/\" target=\"_blank\" rel=\"noopener\">Shopify<\/a><\/strong> Thi\u1ebft k\u1ebf v\u00e0 t\u00ednh \u1ed5n \u0111\u1ecbnh l\u00e2u d\u00e0i c\u1ee7a n\u1ec1n t\u1ea3ng\u2014kh\u00f4ng ch\u1ec9 l\u00e0 giao di\u1ec7n trang web v\u00e0o ng\u00e0y ra m\u1eaft.<\/p>\n\n\n\n<p>N\u1ebfu b\u1ea1n \u0111ang x\u00e2y d\u1ef1ng m\u1ed9t trang web qu\u1ed1c t\u1ebf v\u00e0 m\u1edf r\u1ed9ng quy m\u00f4 th\u01b0\u01a1ng m\u1ea1i \u0111i\u1ec7n t\u1eed, h\u00e3y theo d\u00f5i AIRSANG.<\/p>","protected":false},"excerpt":{"rendered":"<p>Let\u2019s clear something up first. Replay attacks don\u2019t look scary.They don\u2019t smash passwords.They don\u2019t inject evil code with green hacker text flying everywhere. They\u2019re sneaky&#8230;.<\/p>","protected":false},"author":2,"featured_media":4982,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20,1],"tags":[],"class_list":["post-4976","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-insights","category-web-knowledge"],"_links":{"self":[{"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/posts\/4976","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/comments?post=4976"}],"version-history":[{"count":1,"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/posts\/4976\/revisions"}],"predecessor-version":[{"id":5840,"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/posts\/4976\/revisions\/5840"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/media\/4982"}],"wp:attachment":[{"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/media?parent=4976"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/categories?post=4976"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.airsang.com\/vi\/wp-json\/wp\/v2\/tags?post=4976"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}