[Aut•ono•mous]

Hello,

I know I know, Wordpress is an incredibly insecure platform, & probably not a good place to host a Cyber-Security related blog, but its a trial & we'll see how it goes.

I'm wondering if anyone here has some additional security tips for Wordpress. I've installed a few basic security plugins for the time being, & removed all excess bloat code, plugins, & themes that may leave any vulnerabilities.

I've got my site backing up often to my in-house server (considering a multi-server backup, but that may be overkill).

I've disabled all code editors in the Admin panel.

All usernames for authors are in a complexity format only we would know. Passwords are set by my, & unable to be changed by authors.

DDoS protection, of course.

The site will be going live tomorrow, so I just wanted any tips before going online.


Also, if anyone would be interested in writing for the blog, please PM me.

[Plexcon]

Make sure everything is updated amd always check for updates daily. For everything so also apache and stuff instead of only wordpress. Dpn't use admin as username and make sure to get a really strong password.


Some links to plugins I saw in an article:


http://wordpress.org/plugins/better-wp-security/ – offers a wide range of security features.
http://wordpress.org/plugins/bulletproof-security/ – protects your site via .htaccess.
http://wordpress.org/plugins/all-in-one-...-firewall/ – adds a firewall to your site.
http://wordpress.org/plugins/sucuri-scanner/ – scans your site for malware etc.
http://wordpress.org/plugins/wordfence/ – full-featured security plugin.
http://wordpress.org/plugins/websitedefe...-security/ – comprehensive security tool.
http://wordpress.org/plugins/exploit-scanner/ – searches your database for any suspicious code.

[SHADOW MAN]

well the hosting is importent as well as the cms is

for firewall report system create a new email dont ask why just dont use your importent emails

[Aut•ono•mous]

well the hosting is importent as well as the cms is

for firewall report system create a new email dont ask why just dont use your importent emails

I'll receive all security notifications on my primary email so I can be attached at all times, the feeding isn't going to be too bad, I just created a rule to filter them all to a separate mailbox.

[SHADOW MAN]

not a good idea i had blog the wordpress firewall plugin crashed and then after few hours(not few realy from noon to night) i got about 6000 mails in my inbox!
(in evrey minute i recived sevral emails)

best way for you is to use a multi yahoo program and login with 2 yahoo ides one your primary and one for firewall (if you usng yahoo as your primary email address)

[Aut•ono•mous]

not a good idea i had blog the wordpress firewall plugin crashed and then after few hours(not few realy from noon to night) i got about 6000 mails in my inbox!
(in evrey minute i recived sevral emails)

best way for you is to use a multi yahoo program and login with 2 yahoo ides one your primary and one for firewall (if you usng yahoo as your primary email address)

Thanks for the suggestion, but my job requires thousands upon thousands of emails a day. I've become a master of organizational rules.