How to Protect Wordpress Blog From Hackers
- Thread starter sam2009
- Start date
- Oct 5, 2009
- 2,347
- 1,197
Start with this scanner:
http://wordpress.org/extend/plugins/wp-security-scan/
Then read more here:
http://www.blog.web6.org/secure-wordpress-part-1/
There's lot of other sites about hardening your WP sites.
voxclan
Regular Member
- Feb 11, 2008
- 283
- 288
I posted another tread about this
http://www.blackhatworld.com/blackh...tutorial-protect-your-wp-now.html#post1797487
http://www.blackhatworld.com/blackh...tutorial-protect-your-wp-now.html#post1797487
Dark Knight
Power Member
- Nov 15, 2009
- 752
- 1,245
here is an article about that http://www.saidul.com/blog/16-important-wordpress-plugins-to-protect-your-blog-from-hackers/
hope that will help you guys bit
hope that will help you guys bit
It would be worth it if those blogs you have bring in a decent income. If you have a few that are fairly successful and someone with the knowledge to hack comes across it, they are likely do it. That doesn't mean people won't hack an unsuccessful blog, some people just like to screw with others even if it doesn't benefit themselves.
Here's a paid suite you can install
Code:
http://www.opensource-excellence.com/index.php?page=shop.product_details&flypage=flypage_new.tpl&product_id=2&category_id=6&option=com_virtuemart&Itemid=14&vmcchk=1&Itemid=14
tridgeroy
Regular Member
- Feb 24, 2010
- 205
- 252
You may not have had any problems with your blogs as yet, but who's to say next week or next month your blogs will still be safe?
They didn't develop all those security plugins just for the fun of it; the security plugins are there to protect your blogs.
gundamwing
Supreme Member
- Sep 18, 2008
- 1,294
- 935
monitoring everyday and stay update
SpiderWebMaster
Power Member
- Jan 24, 2009
- 628
- 530
well, to be completely secure there is only one way that i know of...
PUT THE SITE OFFLINE!
j/k but serious at the same time. All you can do is follow some of the advices above, and still you'll have a chance to get hacked.
People already gave you some good advice about security plugins, follow that advice for your own good
PUT THE SITE OFFLINE!
j/k but serious at the same time. All you can do is follow some of the advices above, and still you'll have a chance to get hacked.
People already gave you some good advice about security plugins, follow that advice for your own good
TrafficTiger
Newbie
- Jan 16, 2010
- 28
- 2
One of my blogs just got turned into a phishing machine (C4-Parana). I tried replacing some files but that didn't do the trick. I ended up deleting and recreating the shared server account and restoring the blog from a WP-backup file (my first restore).
So I'm going to add some protection, although I won't do everything listed above. Maybe I'll just add the WP-Secure plugin for now, because I can add that to all my blogs with one stroke (I use WordPress Manager DX).
TT
So I'm going to add some protection, although I won't do everything listed above. Maybe I'll just add the WP-Secure plugin for now, because I can add that to all my blogs with one stroke (I use WordPress Manager DX).
TT
And to add to your list, never create wordpress mysql tables as wp_. Best way to see your entire WP DB go bye bye. Always use a different table prefix if possible.
IMO, the easiest way is to simply lock down the wp-admin folder using .htaccess. Read more here -> http://www.reubenyau.com/protecting-the-wordpress-wp-admin-folder/
cashmoney2009
BANNED
- Dec 31, 2009
- 395
- 77
very nice thank you
Biscut
Regular Member
- Feb 9, 2009
- 331
- 261
The WP Security Scan is great because it will tell you where your blogs are vulnerable. I also use login lockdown to avoid people trying to guess my password.
Like others have said, you may not make your blog 100% safe even some of these measures will help out tremendously!
Like others have said, you may not make your blog 100% safe even some of these measures will help out tremendously!
TrafficTiger
Newbie
- Jan 16, 2010
- 28
- 2
My blog was hacked by C4Parana in order to turn the site into a phishing engine. I was alerted by someone who received a phishing email. Google had spotted it and reported the site generating the email... mine!
TT
TT
blackhattrial
Regular Member
- Jul 22, 2008
- 410
- 132
thanks and rep added.
how do we do that?
and also how do we change wordpress directories/filename (if its possible)
If i modify db/table name, directory, filename then how will my wordpress blog run? it will give error if that name is not there.
how do we do that?
and also how do we change wordpress directories/filename (if its possible)
If i modify db/table name, directory, filename then how will my wordpress blog run? it will give error if that name is not there.
voxclan
Regular Member
- Feb 11, 2008
- 283
- 288