Website fix guides
Plain-English, step-by-step fixes for every problem our website checker and PHP vulnerability checker report, grouped the way the report is.
Every problem our free checkers report has a fix guide here. Each guide explains what the problem means, why it matters to a business, the exact steps to fix it on common hosts (WordPress, cPanel, Cloudflare, nginx, Apache), and how to confirm the fix worked.
Not sure where to start? Run the website checker on your site: it scores it out of 100 and links each finding to the right section below.
Security
HTTPS and SSL certificates
No HTTPS, invalid or expiring certificates, missing redirects, mixed content and insecure forms.
Security headers
HSTS, X-Content-Type-Options, clickjacking protection, Content Security Policy, Permissions-Policy and cookie flags.
Hide your server and PHP version
Stop the Server and X-Powered-By headers announcing your software versions.
Outdated website software
Old jQuery, unsupported WordPress versions and Flash, and how to update safely.
PHP2Shell: is your PHP affected?
The October 2026 PHP flaw, which versions are fixed, and the question to ask your host.
Speed and mobile
Website speed
Slow pages, heavy markup, render-blocking scripts, autoplaying media and Core Web Vitals.
Image optimization
Image dimensions, lazy loading, WebP and AVIF, and alt text.
Mobile-friendly websites
The viewport tag and responsive layouts, and why Google indexes your mobile site.
Search (SEO)
Title tags and meta descriptions
Missing, weak or too-long titles and thin descriptions.
On-page SEO basics
Headings, thin content, placeholder text, page language, old markup and internal links.
Indexing, robots.txt and sitemaps
noindex tags, robots.txt that blocks everything, missing sitemaps and canonical URLs.
Structured data (schema)
LocalBusiness markup, broken JSON-LD, opening hours and sameAs links.
Social share previews
Open Graph tags, share images, Twitter/X cards and favicons.
AI search
Email and domain
SPF, DKIM and DMARC
Stop people sending email that pretends to be you, and keep your own mail out of spam.
Domain expiration
What happens when a domain lapses, and how to make sure yours never does.
Contact and trust
Checklists and explainers
How the health score works
Exactly how the website checker scores a site out of 100, with a worked example.
Website maintenance checklist
What to check weekly, monthly, quarterly and yearly on a business website.
Google Business Profile checklist
Categories, hours, photos, reviews and the rest of a complete local listing.
Report: 10,226 New York business websites
Our own data on how many business sites run PHP and how many reported an affected version.
How we write these guides
Each guide cites its primary sources (standards bodies, vendor documentation, Google Search Central) and shows when it was published and last updated. If something has changed, or a step doesn't match what you see, tell us at [email protected] and we'll correct it.
Common questions
Can I fix these problems myself?
Most of them, yes. Many are a single setting in your hosting control panel or website builder, and each guide gives the steps for common setups. A few, such as changing server configuration on shared hosting, need your host to do it; the guides include what to ask them.
Which problems should I fix first?
Start with anything the checker marks red (serious): no HTTPS, an invalid certificate, PHP at risk from PHP2Shell, a page blocked from Google, or a domain about to expire. Yellow items cost you trust, rankings or email delivery over time and can follow.
How do I know a fix worked?
Every guide ends each problem with a "how to check it's fixed" step. The quickest is to run the website checker again: a fixed problem disappears from the report.
Are these guides free?
Yes, as are both checkers. If you'd rather have someone handle the fixes and keep the site maintained, that's what Remidiy's website maintenance covers.
Rather not do it yourself? Fixing these is what we do every month for the sites we manage. Book a free discovery call.