Blogging | Forum « How do you protect your WordPress site from hacking?

How do you protect your WordPress site from hacking? (8 posts)

Topic tags: protection, Wordpress

Alicia Searfoss said
1 year, 4 months ago:
I have never had an issue with anyone hacking into our WordPress site, but want to make sure that we are protected.
Does anyone have advice for locking it down effectively?
Thanks in advance!
Alicia
@asearfoss | # | Top
Stewart Kelly said
1 year, 4 months ago:
I’m sure the experts have other ways, but two easily implemented strategies I use are: never use “admin” for your user name and use a password generator to get a really tough password (one containing special characters etc and is thirteen characters long) Of course make sure to save this information!
One other strategy I am not completely sure about is to log on and create a new administrator profile and then delete the previous one. Maybe somebody else here will shed more light on this?
@stewkelly | # | Top
Kristi Hines said
1 year, 4 months ago:
@asearfoss @stewkelly WordPress offers a guide on hardening their platform’s security using file permissions, better passwords, and more.
http://codex.wordpress.org/Hardening_WordPress
@kristi-hines | # | Top
Stewart Kelly said
1 year, 4 months ago:
@kristi-hines
Thanks for the link
@stewkelly | # | Top
Alicia Searfoss said
1 year, 4 months ago:
Thanks for the info @kristi-hines!
@asearfoss | # | Top
Alicia Searfoss said
1 year, 4 months ago:
Thanks @stewkelly! I believe our password is pretty strong, but will look at making it better.
@asearfoss | # | Top
Janet Fouts said
1 year, 4 months ago:
I signed up for service on Sucuri.net, a security consulting firm that scans and restores sites that have been attacked with Malware, well worth the tiny fee.
A few other tips:
- Login Lock down Keeps somebody rom trying to login until they guess your password. 3 tries and it locks them out.
- Secure WordPress PluginThis plugin removes code that is easy for a bot to find and link to WordPress. They also have a website that does a free security scan.
- Never name your databases with WP in the name. Too easy for spiders to find
- Don’t put your admin panel in the root of the website. Even mysite/blog/wp-admin is better.
- Add a robots.txt file so search robots don’t index folders they don’t need to.
  Here’s an example:
  User-agent: * Disallow: /spamming/ Disallow: /wp-content/ Disallow: /wp-includes/
- Most important, BACKUP. WP S3 Backups backs your data up to Amazons
@jfouts | # | Top
Alicia Searfoss said
1 year, 4 months ago:
Thanks for the great links, Janet!
@asearfoss | # | Top