Tips on securing a Wordpress hosted blog needed

submit to reddit

Submit Your Tip

My wordpress blog got hacked yesterday and someone posted spam articles on it. While my hosting company was good enough to help me recover the blog I want tips that give me maximum security. If there are any plugins for this please tell me about them too. I want to make sure my website is unhackable!

Votes

Tips

12
- Vote
Tip 1
Uninstall disabled plugins and unused themes More
Published: 10 years, 9 month(s) ago by Lenny | permalink
Vote
Even if a theme or plugin is disabled it can still be accessed and executed on the main server. If you are not using a plug in or any other software you should uninstall it because hackers are always scanning websites to look for loopholes.

For further reading: http://www.studiopress.com/tips/wordpress-site-security.htm ^[1]

10
- Vote
Tip 2
Change your password every two weeks More
Published: 10 years, 9 month(s) ago by TedJones | permalink
Vote
You should make it a habit to change your passwords every two weeks to ensure safety of your Wordpress blog.

9
- Vote
Tip 3
Keep your core updated More
Published: 10 years, 9 month(s) ago by Jasper | permalink
Vote
Wordpress roles out updates regularly and if you are not keeping your core updated you are inviting trouble. A lot of security breaches are a result of outdated software. Updating your wordpress core barely takes a minute or two and is strongly recommended.

9
- Vote
Tip 4
Restrict access to the wp-config.php file More
Published: 10 years, 9 month(s) ago by Sammy | permalink
Vote
You can modify your htaccess file to hide the wp-config.php file and restrict access to it. Detailed instructions are given in the link I have shared.

For further reading: http://www.1stwebdesigner.com/wordpress/wordpress-security-tips-plugins/ ^[4]

6
- Vote
Tip 5
Use the Limit Login Attemps Plugin More
Published: 10 years, 9 month(s) ago by Tessajones | permalink
Vote
The limit login attempts plugin prevents anyone from trying to hack into your site using brute force methods. Just install this plugin and set the number of incorrect tries you want to allow. This can be very effective against hackers.

For further reading: http://wordpress.org/plugins/limit-login-attempts/ ^[5]

6
- Vote
Tip 6
Don't use 'admin' as your main account More
Published: 10 years, 9 month(s) ago by Riley | permalink
Vote
Most wordpress blogs have 'admin' as the main account which makes it easier for hackers to try passwords. Just change the main account to some other name.

About Author

More by Johnhead

No more topics...

About This Topic

Category: Science & Technology | 10 years, 10 month(s) ago

55.9k+ Reads

6 Tips

52 Votes

25 Likes

30 Saved

Contributors

Lenny, TedJones, Tessajones, Riley, Jasper, Sammy, Barbara Ford, Stephan Katz, Fusto, Frank Allegro, Barbara Shenosky, Erik Salwen, Samarth Kalghatgi, Dustin Possetti, Mark Fallowes, Theuns Koekemoer, Greg amp Tara Flowers, j Moran, Martin Son, sandra ruiz, Giles De Mourot, Nicholette Ross, vinay sharma, abhiruchi gupta, Dan de Grazia, Joshua Rowe, Thomas Nyborg, Joel Ham, Adam Okhai, Greg Brewton, Enderson Ferreira, Angel Shawver, Nikolai Glinkin, Joan Sotkin, svante borjesson, Craig Fine, Hanca Leppink, christopher roberts, Xavier Boidevezi, marcus ramirez, Jason Worrell, Enrique Munoz, Rachel Ross, Albert Alberts, Rutger De Kreij, Carl Chiarenza, Rebecca Bradford, Philippe Collin, Dessy Todorova, Marianne Ketting, Renegade 8821, Norman de Lapouyade

References & Citations

1. http://www.studiopress.com/tips/wordpress-site-security.htm

4. http://www.1stwebdesigner.com/wordpress/wordpress-security-tips-plugins/

5. http://wordpress.org/plugins/limit-login-attempts/