Wordpress Security

Status
Not open for further replies.
Hello Guys,

I am new to this forum. Just wanted to add some insight about wordpress from my own personal experience after a few years. Some business partners and I got down and dirty to do some investigation into the .php and template scripts of wordpress. What we found was astonishing. As you probably are already aware, wordpress has increased their updates to almost an annoying level. This was in an attempt to prevent people from hacking into the system. Well, these updates are actually leaving the door wide open for hackers. It has happened to a couple of my blogs.

What we also found in the scripts was self promotion of the template writers to market their stuff inside your WP site without being detected. I would recommend if you are going to use WP, stay with the twenty-ten template and make sure you review the source code in the template and remove all advertisements that do not belong to you.

To sum it up, I do not trust wordpress at all. The system has become highly unstable to the point where site rankings are getting worse on Alexa.

I hope this helps. I would recommend to stay away from the plugins all together.

Steven Cavan

I agree and disagree. I agree that you shouldn't just install plugins without checking what they are really doing. If they are adding a link as attribution I think thats fair enough for them releasing a plugin for free.

I disagree on it being 'highly unstable'. It's not perfect, but what do you expect from opensource software that can be highly customised with plugins that often conflict with each other!
 
I have stopped using WordPress altogether. I now build my own blogs with HTML editors and drone templates.

I do not like the fact that other people are promoting their stuff in the background of WordPress. If people enjoy promoting other deals on their website without being compensated for it, more power to to them. As stated in recent post "Do your Homework". WordPress is not what it used to be and Alexa decreases site rankings while using it.

Regards,
Steven Cavan
 
Wordpress is easier to maintain:)

I have stopped using WordPress altogether. I now build my own blogs with HTML editors and drone templates.

I do not like the fact that other people are promoting their stuff in the background of WordPress. If people enjoy promoting other deals on their website without being compensated for it, more power to to them. As stated in recent post "Do your Homework". WordPress is not what it used to be and Alexa decreases site rankings while using it.

Regards,
Steven Cavan
 
Install a plugin to create database and file backups on a regular basis. This may not be directly related to security, but in case you detect intrusion, you will be glad you make a backup.
 
Hide plugins, hide footprints in URLs, hide generator, only use plugins and themes from wordpress.org if you don't know how to analyze them for backdoors.

Would be interested in knowing how to do this; esp hiding the theme & plugins....more from a Google footprint point of view than security.
 
If it's of any help, we just released an upgrade earlier today that includes a new Security Report feature. Checks all you sites every 24 hours against Google Safebrowsing API, and Phishtank blacklists, plus hashes all core WP files and checks for any unauthorized changes.

http://xmarkpro.com/news/version_1_55_03_upgrade
 
This thread has been a learning experience. I got to know few new methods which I was ignorant till date. Thanks all. Cheers :)
 
Give the wordfence plugin a try, i'm using the free version, pretty nifty bit of wordpress security/firewall/anti-virus/malware scanner all in one :)
 
Status
Not open for further replies.
Back
Top