What WordPress Plugins Do You Use To Secure Your Blog?

Dreams · 08-02-2009, 10:39 PM

Hi,

There are so many WP plugins out there. I was hoping to find one plugin. Like an All in One SEO plugin for "securing" your WP blog. Is there such a thing? I just want one plugin that does it all for security. Any recommendations?

Thanks

08-02-2009, 10:42 PM

You do not use any "plug-In" to secure your blog....

James

Dreams · 08-02-2009, 10:44 PM

Hi James,

Can you tell me what you do to secure your blog?

Thanks

Jagged · 08-02-2009, 10:48 PM

<hint> Look in James Signature
One of the best WP / Blog Security Softwares around....

Ken

Dreams · 08-02-2009, 11:21 PM

Duh,

I must be tired. Thanks!

08-02-2009, 11:24 PM

You can mod your .htaccess file to allow admin logins only from your ip / ip range... if you don't know how, ask me.

Dan Grossman · 08-02-2009, 11:46 PM

You secure your blog by always running only the latest version and using as few plugins as absolutely necessary. Each new plugin could add new avenues for attack. Combine that with a strong, unique password and regular backups and there's really nothing to worry about. Anything you do beyond that is kind of like adding extra padlocks to your front door while leaving the windows open -- just being on shared hosting is more risky to a website than whatever else you could "lock down" in WP.

rhj12345 · 08-02-2009, 11:51 PM

Try "WP Security Scan" Plugin, this one is even talked about in Lock it or Lose It Blog Lock Down, by Craig Desorcy.

profitgenie · 08-03-2009, 04:26 AM

WP security Scan have never heard of it but if it can help protect my blog i'm in thankyou very much

jamie

Abledragon · 08-03-2009, 04:45 AM

WP-Security-Scan and Login-Lockdown work well for me.

But I totally support Dan's comments above. And using FTP (instead of SFTP) is another window you're leaving open.

Here's an article on WordPress security that may help:

http://www.wealthydragon.com/blog/20...ten-left-open/

Cheers,

Martin.

NewBeing · 08-03-2009, 05:42 AM

Try Wordpress Firewall Plugin

WordPress Firewall Plugin » SEO Egghead

worlok · 08-03-2009, 08:29 AM

Quote:

Originally Posted by NewBeing

Try Wordpress Firewall Plugin

WordPress Firewall Plugin » SEO Egghead

Thanks. This one doesn't interfere with web spider crawling, right? Looks interesting.

Andy Crofford · 08-03-2009, 08:37 AM

In addition to what everyone else said I also install WordPress into a sub directory of root but configure it so that the blog is accessible at the root domain.

08-03-2009, 09:14 AM

First of all let's get a few things straight here.... I hate bad advice!

1. Wp Security Scan is NOT a security plugin, it does nothing but tell you if you folders permissions are ok and if your admin username is "admin"

2. backup and latest version does not secure you, matter fact you should be running WP before 2.7 (2.6.5 to be exact). Yes you should do backups every night at 12:00AM as you should do with all sites not just WP.

3. locking down the admin username means nothing, blocking the admin to only allow a certain ip means nothing. Hackers do NOT need access to your admin to hack your blog.

FACT! - What does help you be secure is changing the code that hackers have no idea what you changed. WP is open source meaning every single version hackers get ahold of and can see all the coding. If you take and change that coding which is not accessed by hackers then you have 90% greater chance of being secure.

"Plug-Ins" are not going to secure you because the problem is the core coding of WP to begin with.

James

LegitBlogger · 08-03-2009, 09:46 PM

Quote:

Originally Posted by TheRichJerksNet

First of all let's get a few things straight here.... I hate bad advice!

1. Wp Security Scan is NOT a security plugin, it does nothing but tell you if you folders permissions are ok and if your admin username is "admin"

2. backup and latest version does not secure you, matter fact you should be running WP before 2.7 (2.6.5 to be exact). Yes you should do backups every night at 12:00AM as you should do with all sites not just WP.

3. locking down the admin username means nothing, blocking the admin to only allow a certain ip means nothing. Hackers do NOT need access to your admin to hack your blog.

FACT! - What does help you be secure is changing the code that hackers have no idea what you changed. WP is open source meaning every single version hackers get ahold of and can see all the coding. If you take and change that coding which is not accessed by hackers then you have 90% greater chance of being secure.

"Plug-Ins" are not going to secure you because the problem is the core coding of WP to begin with.

James

Interesting, James. I like the way you made your points
very nicely. It's indeed worth investing in your Wordpress
Secured!

.

08-02-2009, 10:39 PM	#1
Dreams Wishing Everyone Success! War Room Member Join Date: May 2009 Location: Canada Posts: 120 Thanks: 37 Thanked 9 Times in 7 Posts	What WordPress Plugins Do You Use To Secure Your Blog? Hi, There are so many WP plugins out there. I was hoping to find one plugin. Like an All in One SEO plugin for "securing" your WP blog. Is there such a thing? I just want one plugin that does it all for security. Any recommendations? Thanks

08-02-2009, 10:42 PM	#2
TheRichJerksNet Guest Posts: n/a	Re: What WordPress Plugins Do You Use To Secure Your Blog? You do not use any "plug-In" to secure your blog.... James
TheRichJerksNet Guest Posts: n/a

08-02-2009, 10:44 PM	#3
Dreams Wishing Everyone Success! War Room Member Join Date: May 2009 Location: Canada Posts: 120 Thanks: 37 Thanked 9 Times in 7 Posts	Re: What WordPress Plugins Do You Use To Secure Your Blog? Hi James, Can you tell me what you do to secure your blog? Thanks

08-02-2009, 10:48 PM	#4
Jagged Ken Perry War Room Member Join Date: Aug 2008 Location: Tucson, Phoenix AZ Posts: 844 Blog Entries: 11 Thanks: 151 Thanked 406 Times in 197 Posts Social Networking	Re: What WordPress Plugins Do You Use To Secure Your Blog? <hint> Look in James Signature One of the best WP / Blog Security Softwares around.... Ken

08-02-2009, 11:21 PM	#5
Dreams Wishing Everyone Success! War Room Member Join Date: May 2009 Location: Canada Posts: 120 Thanks: 37 Thanked 9 Times in 7 Posts	Re: What WordPress Plugins Do You Use To Secure Your Blog? Duh, I must be tired. Thanks!

08-02-2009, 11:24 PM	#6
Creative Thinker Guest Posts: n/a	Re: What WordPress Plugins Do You Use To Secure Your Blog? You can mod your .htaccess file to allow admin logins only from your ip / ip range... if you don't know how, ask me.
Creative Thinker Guest Posts: n/a

08-02-2009, 11:46 PM	#7
Dan Grossman Happily Self-Employed War Room Member Join Date: Jan 2007 Location: Philadelphia, PA Posts: 797 Thanks: 16 Thanked 345 Times in 53 Posts Social Networking	Re: What WordPress Plugins Do You Use To Secure Your Blog? You secure your blog by always running only the latest version and using as few plugins as absolutely necessary. Each new plugin could add new avenues for attack. Combine that with a strong, unique password and regular backups and there's really nothing to worry about. Anything you do beyond that is kind of like adding extra padlocks to your front door while leaving the windows open -- just being on shared hosting is more risky to a website than whatever else you could "lock down" in WP.
	I'm Dan Grossman. I run Awio Web Services LLC. >> Know which 20% of your advertising generates 80% of your sales <<

08-02-2009, 11:51 PM	#8
rhj12345 The Other Rob Jones War Room Member Join Date: Mar 2009 Location: Arvada, CO Posts: 244 Blog Entries: 3 Thanks: 133 Thanked 54 Times in 39 Posts	Re: What WordPress Plugins Do You Use To Secure Your Blog? Try "WP Security Scan" Plugin, this one is even talked about in Lock it or Lose It Blog Lock Down, by Craig Desorcy.
	Denver Search Engine Marketing

08-03-2009, 04:26 AM	#9
profitgenie Jay thompson Join Date: Sep 2008 Location: Australia Posts: 133 Thanks: 6 Thanked 7 Times in 7 Posts Social Networking Contact Info	Re: What WordPress Plugins Do You Use To Secure Your Blog? WP security Scan have never heard of it but if it can help protect my blog i'm in thankyou very much jamie
	Building Backlinks Cheap Website Promotion Putting Affiliate Income On Autopilot

08-03-2009, 04:45 AM	#10
Abledragon Advanced Warrior Join Date: May 2007 Location: Hong Kong. Posts: 961 Thanks: 3 Thanked 173 Times in 153 Posts Social Networking Contact Info	Re: What WordPress Plugins Do You Use To Secure Your Blog? WP-Security-Scan and Login-Lockdown work well for me. But I totally support Dan's comments above. And using FTP (instead of SFTP) is another window you're leaving open. Here's an article on WordPress security that may help: http://www.wealthydragon.com/blog/20...ten-left-open/ Cheers, Martin.
	Free eBook: How to Start a Business Online

08-03-2009, 05:42 AM	#11
NewBeing HyperActive Warrior War Room Member Join Date: Jan 2007 Location: , , . Posts: 138 Thanks: 45 Thanked 7 Times in 7 Posts	Re: What WordPress Plugins Do You Use To Secure Your Blog? Try Wordpress Firewall Plugin WordPress Firewall Plugin » SEO Egghead

08-03-2009, 08:37 AM	#13
Andy Crofford HyperActive Warrior War Room Member Join Date: Jun 2008 Location: Carl Junction, MO Posts: 302 Thanks: 1 Thanked 59 Times in 44 Posts Social Networking Contact Info	Re: What WordPress Plugins Do You Use To Secure Your Blog? In addition to what everyone else said I also install WordPress into a sub directory of root but configure it so that the blog is accessible at the root domain.
	BUY ONE GET ONE ARTICLE FREE! Top notch, high quality articles. Many satisfied Warriors.

08-03-2009, 09:14 AM	#14
TheRichJerksNet Guest Posts: n/a	Re: What WordPress Plugins Do You Use To Secure Your Blog? First of all let's get a few things straight here.... I hate bad advice! 1. Wp Security Scan is NOT a security plugin, it does nothing but tell you if you folders permissions are ok and if your admin username is "admin" 2. backup and latest version does not secure you, matter fact you should be running WP before 2.7 (2.6.5 to be exact). Yes you should do backups every night at 12:00AM as you should do with all sites not just WP. 3. locking down the admin username means nothing, blocking the admin to only allow a certain ip means nothing. Hackers do NOT need access to your admin to hack your blog. FACT! - What does help you be secure is changing the code that hackers have no idea what you changed. WP is open source meaning every single version hackers get ahold of and can see all the coding. If you take and change that coding which is not accessed by hackers then you have 90% greater chance of being secure. "Plug-Ins" are not going to secure you because the problem is the core coding of WP to begin with. James
TheRichJerksNet Guest Posts: n/a