How to keep WordPress site protected?

palashtd · May 14, 2016

Hi, you know WordPress is the largest CMS(Content Managment System) which is the most usable CMS platform for creating a blog or website. But We don't know how to keep WordPress Site protected. That's why I have written a blog post regarding WordPress site protected.

But I could not include enough information to my blog post. So If you have any idea about Wordpress security, please reply this question answer. I will try to add your answer in my blog post.

Imhan · May 17, 2016

you could use some security plugin
like all-in-one wp security and firewall

hfsyou · May 17, 2016

wp bullet is good too!

lancis · May 17, 2016

OP, look here: https://www.google.com/#q=%22ways+to+secure+your+wordpress%22

Are you sure, we need another article on that topic?

Well, coming to think of it, most of the articles in the search results should be called "ways to pseudo secure your wordpress", because with all these tips implemented you'll still get hacked. So if you intend to mention words like "firewall", "nginx", "ssl", "fail2ban" in your article you'll definitely stand out among the competitors.

wayne fenton · May 17, 2016

You can install word press login secure plugins

thespecialist1337 · Jul 12, 2016

wordfence is best

SirLemon · Jul 12, 2016

Just change your .hta file path and wp-config path.

iwebsocial · Jul 13, 2016

A security plugin is very necessary to run a WordPress site. However there are some additional work which you can do to minimize the risk. For example Don't use admin as your WordPress username. Change the WP-admin URL, Watermark your images, Disable the right click option, Choose complex passwords and change them frequently. Always update your WordPress, also update your themes and plugins to prevent any security vulnerability. Hope this will help you.

RuthSam · Jul 13, 2016

Search BHW and Google for securing WordPress. You can post a link to your website at the Warrier forum they badly need it over there, you can be a millionair tomorrow if you hurry.

Deleted member 657006 · Jul 13, 2016

You can get a plugin that protects the sign in page of wordpress , it ask for image match before allowing you to login.

This stops people/bots trying to force your username and password .

But you need to think of a proper username and password to redurce risks

I suggest the way microsoft show users how to set a password is best pratice.

TRUE Media Partner · Jul 13, 2016

There are a lot of security plugins for WP.
Or you can manually set password on system folders and change default service urls via .htaccess.
For example:

Code:

# BEGIN Hide console URL
<IfModulemod_rewrite.c>
RewriteEngineOn

RewriteRule^custom_admin_url/?$/wp-login.php?your_secret_key[R,L]

RewriteCond%{HTTP_COOKIE}!^.*wordpress_logged_in_.*$
RewriteRule^custom_admin_url/?$/wp-login.php?your_secret_key&redirect_to=/wp-admin/[R,L]

RewriteRule^custom_admin_url/?$/wp-admin/?your_secret_key[R,L]

RewriteCond%{SCRIPT_FILENAME}!^(.*)admin-ajax\.php
RewriteCond%{HTTP_REFERER}!^(.*)yoursite.c.o.m/wp-admin
RewriteCond%{HTTP_REFERER}!^(.*)yoursite.c.o.m/wp-login\.php
RewriteCond%{HTTP_REFERER}!^(.*)yoursite.c.o.m/custom_admin_url
RewriteCond%{QUERY_STRING}!^your_secret_key
RewriteCond%{QUERY_STRING}!^action=logout
RewriteCond%{QUERY_STRING}!^action=rp
RewriteCond%{QUERY_STRING}!^action=postpass
RewriteCond%{HTTP_COOKIE}!^.*wordpress_logged_in_.*$
RewriteRule^.*wp-admin/?|^.*wp-login\.php/not_found[R,L]

RewriteCond%{QUERY_STRING}^loggedout=true
RewriteRule^.*$/wp-login.php?your_secret_key[R,L]
</IfModule>
# END Hide console URL

Where
custom_admin_url - new admin panel url
yoursite.c.o.m - your site domain (without http)
your_secret_key - secret key (like password, "sd782kjds")

After applying all changes the new admin panel url will be "yoursite.c.o.m/custom_admin_url"

kiyuri · Jul 21, 2016

I recommend Shield (IThemes security). Wordfence has failed me (not to mention a big performance hog either

). It has the basic login protection, firewall, wp core file scanner, yada yada

lancis said:
OP, look here: https://www.google.com/#q=%22ways+to+secure+your+wordpress%22

Are you sure, we need another article on that topic?

Well, coming to think of it, most of the articles in the search results should be called "ways to pseudo secure your wordpress", because with all these tips implemented you'll still get hacked. So if you intend to mention words like "firewall", "nginx", "ssl", "fail2ban" in your article you'll definitely stand out among the competitors.

Yep.....that's painfully true for the pseudo part

MrPRinson · Jul 26, 2016

palashtd said:
Hi, you know WordPress is the largest CMS(Content Managment System) which is the most usable CMS platform for creating a blog or website. But We don't know how to keep WordPress Site protected. That's why I have written a blog post regarding WordPress site protected.

But I could not include enough information to my blog post. So If you have any idea about Wordpress security, please reply this question answer. I will try to add your answer in my blog post.

There are all kind of security plugins, I'm currently using Hide my WordPress plugin.
but I'm sure that there are better

How to keep WordPress site protected?

palashtd

Newbie

Imhan

Junior Member

hfsyou

Junior Member

lancis

Elite Member

wayne fenton

BANNED

thespecialist1337

Registered Member

SirLemon

Newbie

iwebsocial

BANNED

RuthSam

BANNED

Deleted member 657006

Guest

TRUE Media Partner

Registered Member

kiyuri

Newbie

MrPRinson

Registered Member

Main Menu

Marketplace

Making Money

BlackHat World