+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Wordpress Security (/Thread-Wordpress-Security)
Wordpress Security - Aut•ono•mous - 06-29-2014
Hello,
I know I know, Wordpress is an incredibly insecure platform, & probably not a good place to host a Cyber-Security related blog, but its a trial & we'll see how it goes.
I'm wondering if anyone here has some additional security tips for Wordpress. I've installed a few basic security plugins for the time being, & removed all excess bloat code, plugins, & themes that may leave any vulnerabilities.
I've got my site backing up often to my in-house server (considering a multi-server backup, but that may be overkill).
I've disabled all code editors in the Admin panel.
All usernames for authors are in a complexity format only we would know. Passwords are set by my, & unable to be changed by authors.
DDoS protection, of course.
The site will be going live tomorrow, so I just wanted any tips before going online.
Also, if anyone would be interested in writing for the blog, please PM me.
RE: Wordpress Security - Plexcon - 06-29-2014
Make sure everything is updated amd always check for updates daily. For everything so also apache and stuff instead of only wordpress. Dpn't use admin as username and make sure to get a really strong password.
Some links to plugins I saw in an article:
http://wordpress.org/plugins/better-wp-security/ – offers a wide range of security features.
http://wordpress.org/plugins/bulletproof-security/ – protects your site via .htaccess.
http://wordpress.org/plugins/all-in-one-wp-security-and-firewall/ – adds a firewall to your site.
http://wordpress.org/plugins/sucuri-scanner/ – scans your site for malware etc.
http://wordpress.org/plugins/wordfence/ – full-featured security plugin.
http://wordpress.org/plugins/websitedefender-wordpress-security/ – comprehensive security tool.
http://wordpress.org/plugins/exploit-scanner/ – searches your database for any suspicious code.
RE: Wordpress Security - SHADOW MAN - 06-30-2014
well the hosting is importent as well as the cms is
for firewall report system create a new email dont ask why just dont use your importent emails
RE: Wordpress Security - Aut•ono•mous - 06-30-2014
(06-30-2014, 05:52 AM)SHADOW MAN Wrote: well the hosting is importent as well as the cms is
for firewall report system create a new email dont ask why just dont use your importent emails
I'll receive all security notifications on my primary email so I can be attached at all times, the feeding isn't going to be too bad, I just created a rule to filter them all to a separate mailbox.
RE: Wordpress Security - SHADOW MAN - 06-30-2014
not a good idea i had blog the wordpress firewall plugin crashed and then after few hours(not few realy from noon to night) i got about 6000 mails in my inbox!
(in evrey minute i recived sevral emails)
best way for you is to use a multi yahoo program and login with 2 yahoo ides one your primary and one for firewall (if you usng yahoo as your primary email address)
RE: Wordpress Security - Aut•ono•mous - 07-01-2014
(06-30-2014, 10:42 AM)SHADOW MAN Wrote: not a good idea i had blog the wordpress firewall plugin crashed and then after few hours(not few realy from noon to night) i got about 6000 mails in my inbox!
(in evrey minute i recived sevral emails)
best way for you is to use a multi yahoo program and login with 2 yahoo ides one your primary and one for firewall (if you usng yahoo as your primary email address)
Thanks for the suggestion, but my job requires thousands upon thousands of emails a day. I've become a master of organizational rules.
