.png)
How to Secure WordPress in under 10 minutes
With nearly over 60 million websites running WordPress, it is undoubtedly one of the most popular blogging systems today. Like any other blogging platform in the market, WordPress comes with it’s fair share of vulnerabilities. Don’t fret. Czar Securities has prepared a quick guide to harden your WordPress Website’s security in under 10 minutes!
# Install a Comprehensive Security Plugin – Wordfence
There are numerous plugins which give you a wide array of security options for your WordPress website. I recommend Wordfence Security plugin, because it is by far the simplest security plugin to use. Wordfence claims to provide Enterprise class security and is yet 100% free.Some of the key features -
- Protection against Attacks like SQL Injection, XSS, base64, CRLF, CSRF, RFI etc.
- Firewall
- Anti-virus/Malware Scanning
- Real-time blocking of known attackers / Rate Limit
- Enhanced Login Security
# Protect your .htaccess File
As you know .htaccess files play an important role in the functioning and security of your WordPress website. It is crucial that you also take measures to protect your sites .htaccess files.Just copy and paste the below code in your domain’s root .htaccess file to prevent the external access to any file with .hta.
# STRONG HTACCESS PROTECTION <Files ~ "^.*\.([Hh][Tt][Aa])"> order allow,deny deny from all satisfy all </Files>
# Install Theme Authenticity Checker (TAC)
Beware of free third party WordPress themes which come with some malicious code embedded into them. Theme Authenticity Checker or TAC is a solid plugin that scans all of your theme files for potentially malicious or unwanted code. It’s a must have!# Disable File Editing via Dashboard
Let’s say a hacker manages to gain access to your WordPress Dashboard, he could execute whatever code he wants to and can gain complete control over your website.Therefore, it’s a good idea to disable file editing via Dashboard. You can do so by adding the following line to your wp-config.php file:
1 | define( ‘DISALLOW_FILE_EDIT’, true ); |
# Limit Login Attempts
By default WordPress allows unlimited login attempts which allows hackers to brute-force passwords (or hashes) with relative ease. The Limit Login Attempts plugin lets you limit the rate of login attempts made on your WordPress website.# Hide your Username from the Author Archive URL
It is highly advisable that you hide your username from appearing in the authors archive URL. This will make things difficult for a brute force hacking attempt on your website.You can update this by following these simple steps -
- Login to your Hosting Account
- Open phpMyAdmin to view the Database Linked to your WordPress Install
- Select the wp_users table.
- Change the value in the user_nicename column to something you want to be displayed in the URL (preferably the value in display_name column). Make it different from the value in the user_login column.
Thanks for any other informative blog. Where else may, I am getting that type of info written in such an ideal way? I've an undertaking that I am just now running on, and I've been on the glance out for such info. Description: How To Learn To Password Protect Folder In 1 Hour.
ReplyDelete