Thread: 7 Tips to secure your wordpress blogs

Just stumbled onto this article, I thought I'd share it with you guys.

I had a worm in a theme I downloaded a long time ago, it created a backdoor entry into my blog and suddenly bits of the website started shutting down as the script started placing illegal backlinks onto my blog.

And every time I removed the backlink, it kept reappearing over and over again, and then I had to do a clean install of wordpress, to this day I never found out what was the cause.

But if this article is anything to go by, it's always good practice to lock down your blogs as much as possible.

http://w3c-compliant.com/2011/01/7-t...ordpress-blog/

Very good article Karim, thanks for the share!

From the link
"Tip 4: Lock down your sensitive folders
Secure your wp-includes folder

If your server allows directory listings then all the contents of this folder will be visible to prying eyes check by browsing to yourdomain.com/wp-includes"

Wow didn't know that! Thanks for this article, I locked down that folder on all my sites!

Very useful article Karim, thanks for sharing!

I have been looking for WP security guidelines for a while, so I'm happy I found your tips.

Neo

Thanxs Karim for sharing this info. This is very useful info for all of us.

thanks for posting it

No software system is immune to bugs and vulnerabilities. Security holes will be discovered and bad guys will do their best to exploit them. Keeping your software up-to-date is a good way to stave off attacks, because reliable software vendors will fix their products once security holes are found.

such a great article.

I also recommend this: Tip 1: Always keep wordpress updated

because, some wordpress blogs are easily hacked when they are not updated regularly

Thanks Karim for sharing the article. Its a must read.

Nice article - Nice to share it with the community.

Thank you for sharing the link.

Nice tips. I didn't know about such tricks but now will surely gonna secure my blog. Thanks for sharing.

Thanks for this great tips , now a days we need a tight security

Great article. I have read some articles that warn about free themes that are injected with malicious codes that can reek havoc on your blog/website. Always download WP themes from original the source.

If your server allows directory listings then all the contents of this folder will be visible to prying eyes check by browsing to your domain"

Thanks dear. i like your knowledge and experience.

Cool! Thanks for sharing!! There are all sorts of neat wordpress plugins that add an extra layer of security.

The best tip I can offer is dont use 3rd party plugins. But even better, dont use Wordpress. Open source software is always going to be vulnerable, its the nature of the beast.

Originally Posted by WebArena

The best tip I can offer is dont use 3rd party plugins. But even better, dont use Wordpress. Open source software is always going to be vulnerable, its the nature of the beast.

Any software, whether proprietary or open source, will always have vulnerabilities.

Originally Posted by WebArena

The best tip I can offer is dont use 3rd party plugins. But even better, dont use Wordpress. Open source software is always going to be vulnerable, its the nature of the beast.

That's absolutely absurd, The benfits of wordpress far outweigh the cons. If you take precautions wordpress is completely safe, and is the best website building/blogging platform bar none.

Thank you for sharing, nice article.

A worm on the WP theme. Hmm, that's not nice. anyway, nice read!