how to improve word press security

Techastro,

There are a variety of plugins available for Wordpress that enhance its security by design. Many of them use directives in .htaccess to protect the CMS from common exploits. I would also suggest reading the tips in the Wordpress codex about keeping your site secure. Many of them are simple things like keeping WP updated and reducing the chance that vulnerabilities could be exploited.

Here is a link to a security plugin,

WordPress › BulletProof Security « WordPress Plugins

This WP documentation is helpful,

Hardening WordPress « WordPress Codex

Hope that helps,

Shawn

If your WordPress is like Blog Make sure you have CAPTCHA in the comment field.

* Make sure your cms is up to date. Apply security updates frequetly. * if you've money, then use Web app firewall , cloudflare..

Secure WordPress is a good, free, all in one security plugin.

I've had a lot of issues with WP hacking in the past, but I've managed to eliminate them (for now ) by keeping to a security-pattern for my sites:

1.) use complicated MYSQL username/password combination (always use password generator if possible inside your server's control panel)

2.) Fill the WP Secret Keys (within wp-config.php file) - find the generator of these values here.

3.) Avoid using generic "admin" "administrator" usernames (and create solid password, indeed).

4.) At the beginning (when you have no content yet) create ANOTHER user (and set him as an admin with solid username/pass combination), re-login with new user and DELETE the default user with ID #1. Many of my sites were hacked that way.

5.) ALWAYS keep your WordPress CMS updated to the latest version, the same goes with all the plugins that are active on your site.

6.) Install BulletProof Security Plugin - of all the security plugins I've tested (and there were many), this one is hands-down THE BEST. And it's FREE!

7.) If you don't want your header/index/footer files of the active-template get injected with malware codes, perhaps setting the CHMOD 444 on the template files (you do that either via FTP or via FileManager inside your Control Panel) would do no harm


There you go, I wrote down stuff I now do at all my new sites, and I haven't had a single hacking case since then.

Hopefully you'll fix your hacking issues also

actually you can check my WSO from signature