Recently, there have been many hacking attempts on blogs over the internet. A worm also spread in past few weeks, which affected the wordpress installation by installing malicious php codes in the blog header files. Having a secure wordpress blog should be given prime importance by any web master. In this post, we are sharing with you some security tips so that your wordpress blog is never defaced by the bad guys:
# Block everybody from searching your entire server
Searches for a blog means two things. The external and the internal searches. External searches bring traffic to a blog from search engines, while internal searches help users to find the required content within the blog. In either case, DO NOT use
<?php echo $_SERVER[‘PHP_SELF’];?>
in your “search.php” Instead, use:
<?php bloginfo (‘home’);?>
# Do not leave your directories open for public browsing
Very large number of WordPress blogs have Meta tags enabled which make their blogs, prone to hacking attempts. Following tag, in your header.php shows current version of wordpress
<meta content=”WordPress <?php bloginfo(’version’); ? />” name=”generator” />
# Take Regular Backups
Backup is the most important thing for anyone. Popular and big websites take complete backup of their databases, several times a day. We do not recommend you taking backup so frequently, but at least a daily backup should be taken. For making things easier, you can take the help of WordPress Database backup Plugin
# Use SSH/Shell access instead of using FTP
If some hacker triggers a sniffing attacks to your FTP requests, he can manipulate your files and add spam to your side. Using SSH/Shell access is recommended because everything, included file transfers is encrypted in this method.
# Always have a strong admin password
Last, but not the least, you should have a very strong admin password, which is NOT a dictionary word/phrase. Having a strong password is the easiest defense against being hacked.
Related posts:
I use plugin wp-login attemp lock and you can remove username as admin and create a user and grant admin status and delete admin .thats bettet.
thanks for update .
nice post
i will defiantly try this one for my blog