Security

TheGamer

Regular Member

Mar 25, 2013

390

62

• Jan 7, 2014

• #1

Hi all


I am looking for a few pointers on how to really bulletproof my wordpress site. I am a bit worried since I usually hear about wordpress being hacked and shred to pieces quite commonly :O
Does someone know the best security plugin out there and also if any settings needs to be configured for secure wordpress website.

Thanks.

 

Beven

Elite Member

Aug 30, 2011

1,810

938

• Jan 7, 2014

• #2

Unless you're in a super competitive niche like payday loans or weight loss you shouldn't have to worry really.

 

ardley216

Elite Member

Mar 28, 2008

2,389

2,418

• Jan 7, 2014

• #3

I used to get hacked all the time.. And I wasn't in a competitive niche.

I use: All In One WP Security

Very easy to set up, and a nice easy to use interface. Haven't been hacked since.

Just turn everything to max, and you'll be safe as houses.

 

TheGamer

Regular Member

Mar 25, 2013

390

62

• Jan 7, 2014
• Thread Starter Thread Starter

• #4

Beven said:

Unless you're in a super competitive niche like payday loans or weight loss you shouldn't have to worry really.

Click to expand...

Sorry to say but I Strongly disagree. I know someone who hacks for fun. Strange idea of fun but yeah some people just love to destroy other's stuff for no reason!

 

Conor

Elite Member

Nov 7, 2012

3,621

6,217

• Jan 7, 2014

• #5

Beven said:

Unless you're in a super competitive niche like payday loans or weight loss you shouldn't have to worry really.

Click to expand...

Hmm I disagree somewhat. I've been hacked a few times in the past.

Here's some great pointers that should make you a bit less hackable: http://www.tech5.net/make-wordpress-blog-hack-proof-v2/

 

Beven

Elite Member

Aug 30, 2011

1,810

938

• Jan 7, 2014

• #6

Hmm maybe I'm wrong then I've just been lucky enough for it to never happen to me.

 

seeplusplus

Power Member

Aug 18, 2008

525

179

• Jan 7, 2014

• #7

Write your own custom script for the login page, it doesn't have to be mega complex, but many hacks are carried out by automated attacks.

 

ardley216

Elite Member

Mar 28, 2008

2,389

2,418

• Jan 8, 2014

• #8

With the all in one wp security plugin, you can change the login url to something unique, add captcha, instantly lock out IP's, invalid usernames and passwords. And if anyone is trying to get through all that you get email alerts.

 

OldSalt

Supreme Member

Jr. VIP

May 19, 2009

1,294

7,766

• Jan 8, 2014

• #9

seeplusplus said:

Write your own custom script for the login page, it doesn't have to be mega complex, but many hacks are carried out by automated attacks.

Click to expand...

Unless you are very skilled in the scripting, this is a VERY bad idea. HBGary was hacked after they created a custom CMS system. Off-the-shelf products are tested by a broad base of users who will find the holes - where a custom installation is just at your location. A custom job written by one person is dependent solely on that person's skill - but an off-the-shelf system is generally by a team (and generally tested by one as well).

Just my thoughts on the subject...

 

tony_d

Elite Member

Jun 22, 2013

2,673

3,294

• Jan 8, 2014

• #10

I use a web service that, each time I login with my correct credentials, it comes back and says "sorry, wrong username/password" and I need to enter those correct credentials a second time consecutively for the login to work...

I'm not sure if that's a bug or intentional, but I think that's an awesome security feature against brute forcing - even though not many hacks are via brute forcing in this century anymore...

 

K

krnnt

Newbie

Feb 1, 2014

11

0

• Aug 23, 2016

• #11

Hello i'm using this plugin Acunetix WP Security, it's sims good
guud luck