14 {{ upvoteCount | shortNum }}
14 {{ upvoteCount | shortNum }}

WordPress Security Question

by James Liberty
12 replies
I am trying to install WordPress using Softaculous but I am not sure how
to fill in the following fields. Should I just use the defaults? Or would it
be better if I changed them for security reasons?

There is also a field named "Enter Multisite (WPMU)" that I don't fully
understand.

Any help you can give would be much appreciated.


#question #security #wordpress
  • Profile picture of the author jeffreyhuan
    Multisite allows you to set up multiple blogs within the same database.

    If you just want to run a single blog, uncheck the box and ignore this setting.
    {{ DiscussionBoard.errors[7848357].message }}
    • Profile picture of the author mikeb1
      for security reasons don't use any automatic data base building, they are easily hacked...learn to build your data base manually, it is not difficult and 1000 times safer
      Signature
      Affiliate links are not allowed.
      {{ DiscussionBoard.errors[7848633].message }}
      • Profile picture of the author so11
        Hello,

        it is not the way your database build that exposes you to risks. It is the way its secured.

        here is some info : Editing wp-config.php « WordPress Codex

        Make sure that you change and secure your Accounts and passwords.
        When all is done, a good security scan (free or paid) might give you more clues on how to go further into securing your configurations.

        good luck
        Signature
        www.groupesoloviev.com
        We help businesses manage cyber risk and compliance requirements.
        {{ DiscussionBoard.errors[7850600].message }}
  • Profile picture of the author williams5678
    This is not a good idea of installing WordPress using Softaculous or any other automated software. I always do it manually.
    {{ DiscussionBoard.errors[7851036].message }}
    • Profile picture of the author mrsray
      agreed, it's an easy 5 min install and much more secure

      https://www.youtube.com/watch?v=-Ssqm3ZGMD0

      Originally Posted by williams5678 View Post

      This is not a good idea of installing WordPress using Softaculous or any other automated software. I always do it manually.
      Signature
      >>> no cost website hosting, ad free, for life <<<
      StartYourOwnOnlineBusiness.com
      {{ DiscussionBoard.errors[7852504].message }}
    • Profile picture of the author Alex Mensah
      Originally Posted by williams5678 View Post

      This is not a good idea of installing WordPress using Softaculous or any other automated software. I always do it manually.
      yea for sure, why not do it manually so you can set it up
      right the first time. Trust me lots of headaches follow later
      when you dont set it up right the first time.
      Signature
      {{ DiscussionBoard.errors[7852638].message }}
  • Profile picture of the author Dan Riffle
    James:

    Absolutely change everything now since you posted the screen grab. You should change everything anyway.

    Remember this name: Istvan Horvath

    He's the Warrior WP Guru Extraordinaire. Do a search for him here and check out his sig link.
    Signature

    Raising a child is akin to knowing you're getting fired in 18 years and having to train your replacement without actively sabotaging them.

    {{ DiscussionBoard.errors[7851822].message }}
    • Profile picture of the author Walter Parrish
      if you want it to resolve to yourdomainname.com leave the
      directory section Blank.

      Always choose your own database name.
      Always change your prefix to one you like yourprefix_

      To the user talking security the most secure would be from a prompt yes, but to date I haven't run into any security problems with the sites i installed using Softaculous. I definitely consider it more secure than fantastico.
      Signature
      Use Feeder Sites, Articles, And Social Media Sites To Generate Unstoppable Traffic, FREE! Click Here Now To Get It For FREE
      {{ DiscussionBoard.errors[7852454].message }}
  • Profile picture of the author sbucciarel
    Banned
    First two are fine.

    In Directory:
    Normally, you don't want it in a directory, so leave that blank. You want it in the domain folder, which is not a directory. Let's say you have a landing page in the main domain folder and want a blog in a directory under that, it would be maindomain.com/blog, so the directory would be blog.

    Database name is fine.

    Many people recommend using a different prefix other than wp for security reasons. Up to you.
    {{ DiscussionBoard.errors[7852691].message }}
  • Profile picture of the author ArielT
    For those who said a manual instalation is better, I'd like to know why

    Thanks
    {{ DiscussionBoard.errors[7853503].message }}
    • Profile picture of the author Walter Parrish
      Originally Posted by ArielT View Post

      For those who said a manual instalation is better, I'd like to know why

      Thanks
      well, it will create a user and a password out the box. that's going to make it a little less secure. If you ask me it doesn't really matter as long as you're using the Softaculous install and make the basic changes I mentioned earlier.

      I'm pretty sure that it's not a major concern, because you can always change the user later.
      Signature
      Use Feeder Sites, Articles, And Social Media Sites To Generate Unstoppable Traffic, FREE! Click Here Now To Get It For FREE
      {{ DiscussionBoard.errors[7853761].message }}
      • Profile picture of the author ArielT
        Originally Posted by Walter Parrish View Post

        well, it will create a user and a password out the box. that's going to make it a little less secure. If you ask me it doesn't really matter as long as you're using the Softaculous install and make the basic changes I mentioned earlier.

        I'm pretty sure that it's not a major concern, because you can always change the user later.
        Thanks, very appreciated, however I have a doubt, in the case of using fantastico and then take security measures will be the same or anyway manually is better?
        {{ DiscussionBoard.errors[7862105].message }}

Trending Topics