Ensuring a wordpress site

by ArielT
17 replies
Hello, I'm to start a wordpress blog in hostgator and will use the twenty ten or twenty eleven theme, what are the steps I should follow to give security to my wordpress?
#ensuring #site #wordpress
  • Profile picture of the author BrianGroan
    There's a plugin called Better WP security, just search in the 'add new' plugin section.

    The plugin does a lot of different things to enhance security.

    Hope this helps
    {{ DiscussionBoard.errors[7566294].message }}
  • Profile picture of the author charlso1
    Originally Posted by ArielT View Post

    Hello, I'm to start a wordpress blog in hostgator and will use the twenty ten or twenty eleven theme, what are the steps I should follow to give security to my wordpress?

    There are many plugin you can use. All you have to do is to search on plugin section via your dashboard. But if i may ask, Why do you prefer using wordpress theme to having your own customized one?
    Signature

    {{ DiscussionBoard.errors[7567953].message }}
    • Profile picture of the author ArielT
      Originally Posted by charlso1 View Post

      There are many plugin you can use. All you have to do is to search on plugin section via your dashboard. But if i may ask, Why do you prefer using wordpress theme to having your own customized one?
      I think the twenty ten and eleven are simple themes that I could customize making a child theme, but do you advise me a customized?
      {{ DiscussionBoard.errors[7568006].message }}
      • Profile picture of the author markvsc
        Better WP Security plugin is great! I use it on all of my WP sites, especially since one of them that didn't have it was hacked.
        {{ DiscussionBoard.errors[7568020].message }}
        • Profile picture of the author ArielT
          Originally Posted by markvsc View Post

          Better WP Security plugin is great! I use it on all of my WP sites, especially since one of them that didn't have it was hacked.
          That is all what you use about security? and does that plugin need some kind of setup or is just a matter of installing it?
          {{ DiscussionBoard.errors[7568245].message }}
          • Profile picture of the author markvsc
            Once you activate the plugin you can then make the necessary changes. Simply click on the plugin in your dashboard menu and follow the prompts. You will see the areas that need to be changed....red needs to be changed.....yellow should be changed....green is good.
            {{ DiscussionBoard.errors[7570575].message }}
  • Profile picture of the author trevord92
    Don't use "admin" as your login name - that's the default so gets the most security issues.

    Use a strong, random, password from somewhere like here. I use 12 character length and tick all the options.

    Use a plugin like Limit Login Attempts as well.

    Then start writing content and get visitors!
    {{ DiscussionBoard.errors[7570701].message }}
    • Profile picture of the author Alan Ashwood
      Originally Posted by trevord92 View Post

      Don't use "admin" as your login name - that's the default so gets the most security issues.

      Use a strong, random, password from somewhere like here. I use 12 character length and tick all the options.

      Use a plugin like Limit Login Attempts as well.

      Then start writing content and get visitors!
      If you do nothing else - DO THIS!
      It's the first place bots use to invade your site, and the easiest to fix.
      You will see from my sig file why I know about this stuff. Too lat for my sites, but I'm determined it won't happen again.

      I'm writing a series of step by step articles on this very subject, but they're not raedy for publishing yet.
      Signature
      Now where did I put that pencil?

      Time for a cuppa.
      {{ DiscussionBoard.errors[7576956].message }}
      • Profile picture of the author ArielT
        Originally Posted by Alan Ashwood View Post

        If you do nothing else - DO THIS!
        It's the first place bots use to invade your site, and the easiest to fix.
        You will see from my sig file why I know about this stuff. Too lat for my sites, but I'm determined it won't happen again.

        I'm writing a series of step by step articles on this very subject, but they're not raedy for publishing yet.
        Thanks for sharing, and what bad, did you loose your sites or recovered?
        {{ DiscussionBoard.errors[7578027].message }}
        • Profile picture of the author Alan Ashwood
          Originally Posted by ArielT View Post

          Thanks for sharing, and what bad, did you loose your sites or recovered?
          I lost two important sites forever. The hosts weren't at all helpful, and referred me to companies who wanted $300-$350 to take a look; whether successful or not.

          One of these sites was my main money earner too.

          I haven't given up on a third site; the one I've spent the most time working on. Being pretty much non-techie, I'm working with a company who only charges if successful to recover this one.

          I'll update if they're as good as they say.

          In the meantime, I've started two new ones from scratch, but these are too new to publicise.
          Signature
          Now where did I put that pencil?

          Time for a cuppa.
          {{ DiscussionBoard.errors[7581208].message }}
  • Profile picture of the author ArielT
    Thanks people, I got a good guide here

    Anyway if someone thinks would be good to add something, just welcome any other comment
    {{ DiscussionBoard.errors[7572882].message }}
  • Profile picture of the author Evocess
    I would agree, WP Security is a great security plugin for your WordPress site.
    We even use WP Security on our WordPress Site.
    {{ DiscussionBoard.errors[7572893].message }}
  • Profile picture of the author johndetlefs
    WP-Security *thumbs up* - nice, effective and easy to use.

    Also, consider installing the WP files in a sub directory folder to your Public folder and make the folder name random (like "ssdf77asdft").

    That way, in order to find your main files someone also has to guess where the site is installed.

    Adds another nice little layer of security.
    Signature

    You only get one shot at life - make it awesome.

    Everyone else also gets just one crack at it - help make theirs awesome too... or, politely step out of their way.

    {{ DiscussionBoard.errors[7572898].message }}
    • Profile picture of the author ArielT
      Originally Posted by johndetlefs View Post

      WP-Security *thumbs up* - nice, effective and easy to use.

      Also, consider installing the WP files in a sub directory folder to your Public folder and make the folder name random (like "ssdf77asdft").

      That way, in order to find your main files someone also has to guess where the site is installed.

      Adds another nice little layer of security.
      How important would be that of installing the WP files in a sub directory folder? and should I have to do it when intalling wordpress or can be later?
      {{ DiscussionBoard.errors[7573102].message }}
  • Profile picture of the author johndetlefs
    Apart from having a secure password, none of the security measures that you take are really *important* by themselves, or better, they are all important in their own way.

    It's when you take a number of security measures and add them together that it becomes a nice little fortress.

    So how important? About as important as any of the others, it's just another layer of security to have that makes your site a little more difficult to hack.

    As far as when to do it, probably easiest doing it during the install.

    See: Giving WordPress Its Own Directory « WordPress Codex
    Signature

    You only get one shot at life - make it awesome.

    Everyone else also gets just one crack at it - help make theirs awesome too... or, politely step out of their way.

    {{ DiscussionBoard.errors[7573135].message }}
  • Profile picture of the author Troy_Phillips
    I like bullet proof
    Signature

    {{ DiscussionBoard.errors[7576982].message }}
  • Profile picture of the author ArielT
    This thread was very useful, thanks
    {{ DiscussionBoard.errors[7582335].message }}

Trending Topics