home_url() and site_url() in WordPress is very simple thing, but could be little bit confusing. Look at the image, then I described below –
From Setting -> General 1) WordPress Address (URL) = site_url() 2) Site Address (URL) = home_url( )
You could force rewrite that from wp-config.php too. Remembering is easy, its just opposite to what is says, so in Setting “Site Address (URL)” is home_url not the site_url as it looks from the words. Savvy?
Heartbleed is probably the worst thing ever happen to internet in whole. Its old news, all server and application should be already updated. If your server is not, here I will share very basic process to fix it, should not have more then 1 min. Yes, just 1 min and your server will be secured from Heartbleed Vulnerability.