Wordpress Security

Status
Not open for further replies.

mahaliking901

Newbie
Joined
Dec 16, 2011
Messages
28
Reaction score
2
Hi there,

I want to know how to have wordpress security..

what are the plugins or safety measure to use.
 
For security purpose you can backup your wp sites with backup plugins such as EZPZ one click backup,backupwordpress,backupbuddy,easybackup etc..
 
For security purpose you can backup your wp sites with backup plugins such as EZPZ one click backup,backupwordpress,backupbuddy,easybackup etc..


I know that what I mean for security so that it will not hack...
 
I use Bulletproof Security and Secure Wordpress.
 
Get this plugins:

si captcha anti-spam
admin renamer extended (change your user login details to something cryptic like "sduywqeytgrtngwsegt")
website defender wordpress security
limit login attempts
bulletproof security (activate both root folder and wp-admin htaccess security mode)
Make continuous backup.

And the most important thing. Always have the latest updates installed.
 
Last edited:
Some good advice in this thread, and some good advice in the thread referenced above. Read and apply. And if you want to really kick it up a notch or just have a good read on WP security get a copy of WP Defender.

Oh and on the subject of backups, keep multiple backups - if and when you get hacked, you may not notice it for a bit; and one or more of your backups may also be infected, so restoring it won't get you anything. Having a known clean backup along with fresher backups that may be hacked is a plus.
 
Last edited:
thanks for the advice I will it first then comeback and have some questions again
 
BTW, Are those Caching Plugins safe now? I know the one, what is it called hmm W3C or something had some security holes.
 
Hide plugins, hide footprints in URLs, hide generator, only use plugins and themes from wordpress.org if you don't know how to analyze them for backdoors.
 
http://www.blackhatworld.com/blackhat-seo/templates-themes/374678-amazing-tools-detecting-hacked-themes.html
 
simple ways to protect your admin is to also put a htaccess in the admin folder allowing just your IP. And htaccess in the uploads directory preventing any php to run as well is a good way to stop any unwanted code being run if it makes your way to your box.

Also get your host to run weekly trojan scans, just in case your server isnt fully secured and they find their way in another way
 
Hello Guys,

I am new to this forum. Just wanted to add some insight about wordpress from my own personal experience after a few years. Some business partners and I got down and dirty to do some investigation into the .php and template scripts of wordpress. What we found was astonishing. As you probably are already aware, wordpress has increased their updates to almost an annoying level. This was in an attempt to prevent people from hacking into the system. Well, these updates are actually leaving the door wide open for hackers. It has happened to a couple of my blogs.

What we also found in the scripts was self promotion of the template writers to market their stuff inside your WP site without being detected. I would recommend if you are going to use WP, stay with the twenty-ten template and make sure you review the source code in the template and remove all advertisements that do not belong to you.

To sum it up, I do not trust wordpress at all. The system has become highly unstable to the point where site rankings are getting worse on Alexa.

I hope this helps. I would recommend to stay away from the plugins all together.

Steven Cavan
 
Last edited:
Status
Not open for further replies.
Back
Top