I have used wordpress for 6 years now, building personal sites and for clients and despite the years of experience, I fall short of knowledge owing to the self learning nature of our Industry. I have 2 major problems and need advice from warriors; security and speed.
1. Wordpress security
Initially, i used no security plugins. My sites ALWAYS got hacked. At least twice every week, i receive an email from my hosting company that one of my site has been reported for hosting phishing content and I should delete the files and change my password. Then in my cpanel, I see sub-domains created by hackers and pointing to sites that steal peoples information (I use a budget shared reseller hosting package with 25 cpanels). This continued for some time and I got sites taken down and lost clients.
The goodnews is I managed to stop this after watching a tutorial on youtube titled: How to virtually bulletproof your wordpress site from hackers Important!
The video dates a year now. I installed all the FREE plug-ins he recommended and never got hacked again.
A. Free Security Plug-ins recommended in the video
- stop spam comments
- rename wp login
- captcha on login
- stop user enumeration
- wp security scan
- block bad queries
- robots meta
- advanced auto updates
B. Other Plug-ins in all my sites
In addition to those above, I will have a plugin for SEO, Cache, Social sharing, Ad display, analytics, comments, sitemap and plug-ins installed with the theme such as visual composer or a slideshow plug-in.
2. Page Speed
The problem of page speed came much after and it's hard to tell if it is because I am using too many plugins or some of the plugins are not supported and causing problems or there are other things I am missing out that warriors can help me understand. The annoying thing is the effect is felt on all my sites as I use almost same plugins throughout. According to gtmetrix. com reports, for my sites, the average index pageload time is 10 seconds for pages below 2mb. My worst site has a pageload of upto 86secs
I will appreciate some kind advice and particularly a list of plug-ins used now that solve these 2 major problems. I have preference for free but will go for a paid option if it's totally worth it.
Thanks for reading through my long post and appreciate your help via comments below.