Wordpress Security: Close Every Loophole

<h1>Wordpress Security: Close Every Loophole</h1>Author: <a title="Martin Malden" href="http://www.articlesbase.com/authors/martin-malden/63999.htm">Martin Malden</a> A lot of attention is quite rightly focused on securing your Wordpress installation itself. But, however secure your WP installation is, it counts for nothing if you're leaving other doors open. If a hacker is absolutely determined to get into your site they're probably going to succeed. But you can protect your WP installation from the mass bot hackers with a few common sense precautions. Here are some steps you can take: Firstly, make sure you keep your version of WordPress up to date. In addition to that, I've changed my login name from admin to something else (long and complex), made sure my password is as strong as I can make it, I've put an extra layer of security around the wp-admin directory, created a blank index.html file to hid the plugins I'm using and a few other steps. There are a number of good plugins that will carry out those steps and continuously monitor your blog for security vulnerabilities. I do recommend you install one of these - and keep it up to date! The more users you allow to update your blog the more risk there is. I don't have guest bloggers, but if I did I'd ask them to send me their articles for posting, instead of giving them access rights. I also don't ask people to register. But there are some areas that people often overlook, and which allow hackers to get access to your Wordpress installation via your FTP details. If you're not using SFTP (or Secure Shell Access if your hosting provider doesn't support SFTP) then your FTP login details are being transmitted across the Internet in clear every time you log on and upload/download stuff. I back up my blog system files each week by copying everything back to my PC. Since this takes around an hour there's plenty of opportunity for someone to intercept my FTP details. Also, of course, you could have spyware on your machine which would pick up your FTP logins from there. (Along with all your other logins!). Make sure you include your entire PC environment when you're putting security in place - not just your WP installation. In addition to all those WP specific precautions, make sure your PC is absolutely clean (use a good anti-spyware application and scan it regularly) and use SFTP or Secure Shell Access to upload/download stuff from your server.
About the Author: Martin Malden writes a blog covering tips, techniques and resources for small- or home-business owners. For more information check out his blog here:
<A href="http://www.wealthydragon.com/blog/"><a target="_blank" href="http://www.wealthydragon.com/blog/">http://www.wealthydragon.com/blog/</a></A>
Article Source: <a href="http://www.articlesbase.com/">ArticlesBase.com</a> - <a href="http://www.articlesbase.com/computers-articles/wordpress-security-close-every-loophole-809986.html" title="Wordpress Security: Close Every Loophole">Wordpress Security: Close Every Loophole</a>

A lot of attention is quite rightly focused on securing your Wordpress installation itself. But, however secure your WP installation is, it counts for nothing if you're leaving other doors open. If a hacker is absolutely determined to get into your site they're probably going to succeed. But you can protect your WP installation from the mass bot hackers with a few common sense precautions. Here are some steps you can take: Firstly, make sure you keep your version of WordPress up to date. In addition to that, I've changed my login name from admin to something else (long and complex), made sure my password is as strong as I can make it, I've put an extra layer of security around the wp-admin directory, created a blank index.html file to hid the plugins I'm using and a few other steps. There are a number of good plugins that will carry out those steps and continuously monitor your blog for security vulnerabilities. I do recommend you install one of these - and keep it up to date! The more users you allow to update your blog the more risk there is. I don't have guest bloggers, but if I did I'd ask them to send me their articles for posting, instead of giving them access rights. I also don't ask people to register. But there are some areas that people often overlook, and which allow hackers to get access to your Wordpress installation via your FTP details. If you're not using SFTP (or Secure Shell Access if your hosting provider doesn't support SFTP) then your FTP login details are being transmitted across the Internet in clear every time you log on and upload/download stuff. I back up my blog system files each week by copying everything back to my PC. Since this takes around an hour there's plenty of opportunity for someone to intercept my FTP details. Also, of course, you could have spyware on your machine which would pick up your FTP logins from there. (Along with all your other logins!). Make sure you include your entire PC environment when you're putting security in place - not just your WP installation. In addition to all those WP specific precautions, make sure your PC is absolutely clean (use a good anti-spyware application and scan it regularly) and use SFTP or Secure Shell Access to upload/download stuff from your server.

Martin Malden writes a blog covering tips, techniques and resources for small- or home-business owners. For more information check out his blog here: http://www.wealthydragon.com/blog/

Rate this Article:

0 / 5 stars - 0 vote(s)

Re-Publish

Article Source: http://www.articlesbase.com/computers-articles/wordpress-security-close-every-loophole-809986.html

Article Tags: wordpress security, blog security, security on wordpress blogs, anti-hacking, secure against hacking

Related Videos
Related Articles
Ask / Related Q&A

Play

How to Set Up a Wordpress Blog Through GoDaddy

Play

How to Set Up Your Own Cheap Web Hosting

Play

How to Submit and Publish Your 1st Wordpress Post

Play

Learn about the Dangers of Social Networking

Play

Learn About the Best Anti-Virus Programs)

Latest Computers Articles
More from Martin Malden

Pink Sony Cybershot Reviewed

By: Mirit Webb-Deutscher | 27/12/2009
Should you buy an up to date expensive mobile phone with a high-resolution camera or the phone you really want and a separate 'stand alone' digital camera? Camera phones have improved a lot over the last 5 years, going from small screen blurry images to high resolution and a flash, and...

PSP Go Games - Where to Get UNLIMITED Downloads For Free?

By: Sarah Brown | 27/12/2009
There are spaces to grab PSP Go games downloads. Don't run out and buy games for $40 each anymore. I'm ready to expose to you how to find and get PSP Go games downloads. I'm going to reveal a site to you that is going to put a collection of games in your hands and money back in your pockets. It's a very trouble-free process to download PSP Go games. Once you grab a membership at the website I'm going to show you, you'll get a complimentary guide on how to download the games and put them on your

Download Music to PSP Go - Places to Get PSP Go Music Downloads!

By: Sarah Brown | 27/12/2009
You've got your new PSP Go, but no music. You want to download music to PSP Go but don't know where to get it. Lucky for you I'm going to show you places to get PSP Go music downloads. Everyone loves to be able to carry around their MP3 player, or in this case, their mobile game system and have the ability to listen to their favorite music on it.

PSP Go Download Center - PSP Go Downloads

By: Sarah Brown | 27/12/2009
If you’re looking for games for your brand new PSP Go or maybe even just movies or music, you should hold off until you know this.. Downloading PSP Go games from the official Playstation store can end up costing you a FORTUNE. Most games are between $10 and $40 EACH. But you DON’T have to pay that much. You can get UNLIMITED PSP Go downloads of games, movies, music & much more for just $39! That is PSP Go Download Center.

PSP Go - Download Games for PSP Go - Unlimited PSP Go Games, Movies, Music, Software

By: Sarah Brown | 27/12/2009
The PSP Go download games can be somewhat pricey if you get them from the Playstation store. But you don't have to pay $10 to $40 for each game you want if you don't want to. You're about to learn where to get PSP Go game downloads and where to get them unlimited for cheap, too. It's a very simple process to put PSP Go game downloads on your system and the download site I'm going to reveal to you gives you a free step-by-step guide on how to with your membership. So don't worry about that.

PSP Go Download Center – Is PSP Go Download Center A Scam or Real Deal

By: Sarah Brown | 27/12/2009
Do you want to get free PSP GO games? Have you heard of a website called PSP Go Download Center? Are you wondering is if PSP Go Download Center is a scam or real deal? Does the program really offer what they claimed on the website? Can you really access to unlimited download and get your favorite game? Is PSP Go Download Center legal? This article will provide everything you want to know about the website.

PSP GO Download Center - How To Download Sony PSP GO Games Legally?

By: Sarah Brown | 27/12/2009
If you have come across many illegal websites and programs such as emulator, roms and bit-torrent these sites and programs lure innocent gamers to download Sony PSP GO games illegally from them, in fact these software and games that downloaded contain malicious stuffs such as malware and virus intended to hijack your password to various websites and destroy your computer without you realizing it.

DSi Download Center - How To Download Nintendo DSi Games Legally?

By: Sarah Brown | 27/12/2009
If you have come across many illegal websites and programs such as emulator, roms and bit-torrent these sites and programs lure innocent gamers to download Nintendo DSi games illegally from them, in fact these software and games that downloaded contain malicious stuffs such as malware and virus intended to hijack your password to various websites and destroy your computer without you realizing it.

10 Easy Steps to Succeeding Online

By: Martin Malden | 06/02/2009 | Internet
Here are 10 steps to help you get your expectations set correctly and acquire a mindset that will dramatically improve your chances of succeeding in your Internet Marketing business.

Get Your Site Indexed in 4 Easy Steps

By: Martin Malden | 02/01/2009 | Internet
4 simple steps you can take that will ensure your new website is indexed by Google as quickly as possible.

Basics of SEO

By: Martin Malden | 27/09/2008 | Internet
A simple explanation of the basics of SEO that will be enough for most people to improve their search engine placements.

5 Steps to Success

By: Martin Malden | 18/09/2008 | Internet
A description of 5 steps you can take to get yourself into a successful mindset. Although this is written for people who are in Internet Marketing these steps can be applied to any situation.

How to Promote Your Website for Free

By: Martin Malden | 11/09/2008 | Internet
5 Steps you can take to make your site easily visible to the search engines and enable them to find out what it's all about. Essential prerequisites to attracting free search engine traffic.

Good Reasons for Hosting Your Own Blog

By: Martin Malden | 21/08/2008 | Internet
A review of the benefits of hosting your own blog, with a brief description of how to set it up and the reason why I set up my first self-hosted blog.

5 Ways to Avoid the Effects of Recession

By: Martin Malden | 13/08/2008 | Business
Here are 5 things you can do to prepare your self for the recession. Following these steps will mean that of you are downsized you have something to fall back on and if you're not you'll have gained knowledge that will make you eve more valuable to your employer.