1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Best Security for WordPress?

Discussion in 'Blogging' started by TheOpSec, Dec 12, 2014.

  1. TheOpSec

    TheOpSec Newbie

    Joined:
    Jul 10, 2012
    Messages:
    39
    Likes Received:
    0
    Home Page:
    I am currently using Wordfence, but at my current CW hosting server, they have to disable Varnish Cache because for some reason it conflicts with Wordpress.

    When Varnish is turned on, my site gives 'Forbidden' errors, but the site does load quickly when it does work.

    When Varnish is turned off, my site suffers from extreme slow loading symptoms (takes 20+ seconds to load home page).

    So, I need to find an alternative to Wordfence.

    Any help would be appreciated.

    Thanks,
     
  2. everythingred

    everythingred Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 21, 2010
    Messages:
    1,871
    Likes Received:
    1,234
  3. TheOpSec

    TheOpSec Newbie

    Joined:
    Jul 10, 2012
    Messages:
    39
    Likes Received:
    0
    Home Page:
    Thanks, just installed it!
     
  4. akshayhallur

    akshayhallur Newbie

    Joined:
    Aug 27, 2014
    Messages:
    6
    Likes Received:
    1
    Occupation:
    Student
    Location:
    Shimoga
    Home Page:
    Use Sucuri and IP Based Login WordPress plugin.

    Limit login attempts plugin also works great to prevent Brute force attacks. These are the light-weight yet effective plugins. If you are on a shared server.
     
  5. ID Internet Marketer

    ID Internet Marketer Senior Member

    Joined:
    Jan 22, 2013
    Messages:
    938
    Likes Received:
    1,442
    Occupation:
    Blackhatworld Member
    Location:
    My Private ***
    BulletProof Security?

    Code:
    https://wordpress.org/plugins/bulletproof-security/
     
  6. RWCenter

    RWCenter Junior Member

    Joined:
    Nov 7, 2014
    Messages:
    116
    Likes Received:
    18
    This is a good one, definitely one of the top 5.
     
  7. livingnowhere

    livingnowhere Newbie

    Joined:
    Jun 6, 2011
    Messages:
    33
    Likes Received:
    7
    No need any resources....just 'change permission' your login.php file (from control panel) to 000 when you have entry to your dashboard until logout. No more backdoor. However, when you need to login again, you should start from your control panel and changes back login.php to 644....after that repeat above step.
     
  8. IceHD

    IceHD Jr. VIP Jr. VIP Premium Member

    Joined:
    May 8, 2013
    Messages:
    488
    Likes Received:
    199
    Occupation:
    SEO, SEM, HTML5&CSS3 Coder
    Location:
    Not Romania
    Wordfence, iThemes Security and Sucuri are my main choices for my blogs.
     
  9. Yarosss

    Yarosss Jr. VIP Jr. VIP Premium Member

    Joined:
    Jan 26, 2012
    Messages:
    655
    Likes Received:
    907
    Here's a list of 6 Best Security Plugins to improve your WordPress website's security.
    iTheme Security
    iTheme security formerly known as Better WP security is one of the most popular and the best WordPress security plugin. The plugin provides you 30+ ways to protect your WordPress website from malicious attacks. It strengthens user credentials by fixing common loop holes and automated attacks. The plugin is available in free and premium versions. Both have same feature but premium version include few more features like two-factor authentication, Geo ID banning and user action logging.
    All in one WP security and Firewall
    All in one WP Security and Firewall is the most comprehensive WordPress security plugin. This plugin protects your website by checking vulnerabilities and implementing latest techniques and security measures.
    Wordfence Security
    Wordfence is another leading WordPress security plugin with over 2.5 millions of downloads. The plugin scans for hacked files and monitors the access of visitors to your blog. It includes a firewall, virus scanning and new cache engine that secure your blog from malicious attacks.
    BulletProof Security
    Another popular WordPress plugin to secure your WordPress website is BulletProof Security. This plugin provides 1-click security solution. The plugin allows you to protect wp-admin folder of your WordPress website. This plugin secures your website against RFI, CRLF, XSS, Code injection and SQL injection hackings.
    Authenticator
    Google Authenticator is one of the most popular security plugin for WordPress. It offers you two-step authentication using Google Authenticator app for iPhone, Blackberry and Android. You will need a smartphone or any other device to use Google Authenticator app because this plugin app works on your dashboard and your smartphone simultaneously.
    Sucuri Security
    Sucuri Security is very popular security plugin that offers you website monitoring, malware removal and many mores services to secure your WordPress website. The plugin detects large number of malwares, spams, blacklisting and many other security issues.
     
    • Thanks Thanks x 1