ive got an autoblog i built using shez`s video tuts,i havent logged in for about 3 weeks,there abit boring,lol.i tryed to log in today & some f**k has hacked it,fair play i dont really mind,i think its pretty funny really but they`ll probably be back hopefully this will slow them down instead of me bothering to up my security.
Save yourself from getting Hacked !! use these plugins
- Thread starter Rajthepositivelife
- Start date
CrazyEarner
Regular Member
- Mar 2, 2010
- 213
- 201
I personally just keep them in an Excel file and save it in my pen drive.
I also secure my pen drive by a password (you can google it and learn how to do that.)
those plugins won't stop determined hackers from creating accounts with administrator rights on your wp. There was an exploit going around not too long ago where the hacker didn't need to know your password. They could simply create an admin account at will. Happened to me and I had THOUSANDS of cloaked links pointing to parasite hosted pharm blogs.
I only noticed when g_ad_sen$e started showing ads for phentermine!
I only noticed when g_ad_sen$e started showing ads for phentermine!
You can never protect yourself from hackers.
You can just make their lives a bit harder, but they will crank your blog if they really want to.
If your blog pays your bills then backup daily with wp-db-manager and have it sent to your email once a day + Store it locally.
If anything happens you will probably lose nothing.
You can just make their lives a bit harder, but they will crank your blog if they really want to.
If your blog pays your bills then backup daily with wp-db-manager and have it sent to your email once a day + Store it locally.
If anything happens you will probably lose nothing.
fizzik
Registered Member
- Apr 26, 2010
- 61
- 19
A lot of publicly available blog software are constantly prone to other vulnerabilities such as XSS and SQL injection. You only need to find a piece of code that has an SQL injection hole, dump the admin pass hash from the database, and run it through a program such as password pro (yeah it may take getting lucky if you have a generated password). RFI is even worse as a web shell can be used to compromise your site and potentially the server your site is hosted on.
I just make sure my blog software is always up to date and use basic auth protection on my admin directory.
I just make sure my blog software is always up to date and use basic auth protection on my admin directory.
So, as I understand it, the view seems to be you should at least take 'common sense precautions' (such as suggested by the OP), but even with those security measures in place, if a competent hacker wants to gain control of your site one way or another, they probably will eventually.
If which, shouldn't we have a 'plan B'? For example, I heard there are programs out there that can monitor and notify when the pages on a specified website change. Wouldn't something like that be a useful addition to the defenses? You know, the sort of program that will notify a link on your computer (or via email) if / when your WP pages have been altered. I'm new to this area, so please forgive the ignorance.
What I'm wondering is, would such a website-monitoring program pick up that the site's been hacked and altered? A bit like a silent alarm to a security center, as it were. If such a program can indeed do that, can anyone recommend a good one that they've used?
If which, shouldn't we have a 'plan B'? For example, I heard there are programs out there that can monitor and notify when the pages on a specified website change. Wouldn't something like that be a useful addition to the defenses? You know, the sort of program that will notify a link on your computer (or via email) if / when your WP pages have been altered. I'm new to this area, so please forgive the ignorance.
What I'm wondering is, would such a website-monitoring program pick up that the site's been hacked and altered? A bit like a silent alarm to a security center, as it were. If such a program can indeed do that, can anyone recommend a good one that they've used?
It's just 1 email a day at really maximum of 5MB (if you have a 5mb databse, then your blog is huge). 5MB email once a day is nothing.
Besides, Why Hostgator SMTP server? Open an account with Google APPS, have your domain installed and use google's SMTP server from within your wordpress blog.
Steps:
1. Signup with Google APPS for domains hxxp://www.google.com/apps/
2. Download WP-DB-Manager / WP-Mail-SMTP and setup.
As far as CPU resources, this is nothing.
Last edited:
Rajthepositivelife
Elite Member
- Feb 9, 2010
- 1,960
- 481
Well, installing plugins is very easy, you just need to upload them via ftp to your plusins folder
I m using these on my wp3.0 version blog and am not having any trouble in using them
Rajthepositivelife
Elite Member
- Feb 9, 2010
- 1,960
- 481
Yeah, Wp db manager is the third one that I am using for my site's security. and this one really helps since you have the complete database with you, so it becomes easy for you to set up your site back to normal if you are hacked.
buddyduck53
Newbie
- Jan 11, 2008
- 15
- 430
I imagine the concensus here is that there is no foolproof way to stop a determined hacker. Personally, I just back up my blogs regularly and hope for minimum damage control.
carlbraun2
Newbie
- Mar 6, 2010
- 6
- 0
I tried to post links to WP security plugins but i am not allowed to post links !
can also use theses :
wp-security-scan
wordpress-guard-plugin
and some infos at wpsecurity net
can also use theses :
wp-security-scan
wordpress-guard-plugin
and some infos at wpsecurity net
Rajthepositivelife
Elite Member
- Feb 9, 2010
- 1,960
- 481
Its good to see some more useful plugins being added to the discussion!
carlbraun2
Newbie
- Mar 6, 2010
- 6
- 0
Just install a new server last week with plesk and i bought an installatron license.
I installed some new WP sites and when I tried to upload or upgrade plugins WP asked me the USER/PASSWORD for the FTP or SFTP. I have many WP sites and it's the first time I saw that. Didn't have time to check why yet, any ideas ?
It's also the first time I use installatron and it's a very good installer and have a very easy backup/restore system, useful if hacked.
For safety you can also use a admin SSL connection
info here : codex wordpress org/Administration_Over_SSL
I installed some new WP sites and when I tried to upload or upgrade plugins WP asked me the USER/PASSWORD for the FTP or SFTP. I have many WP sites and it's the first time I saw that. Didn't have time to check why yet, any ideas ?
It's also the first time I use installatron and it's a very good installer and have a very easy backup/restore system, useful if hacked.
For safety you can also use a admin SSL connection
info here : codex wordpress org/Administration_Over_SSL