***Wordpress Security***

1 replies
  • WEB DESIGN
  • |
I wanted to ask some questions about how to protect, scan, monitor your wordpress site (own domain) so you know there is no foreign code, redirect, or javascript hack that is sucking up your traffic and your commissions.

I know im not alone out there. You work hard to get your website optimized, unique, and flowing with traffic and the thought of someone hacking your site and sucking up your revenue is scary.

I have been scanning my wp pages but

A. Im not an expert in PHP and javascript
and
B. There sure are ALOT of pages, images, and other crap that is difficult to scan all through.

Ever try it? It hurts my eyes just thinking about all that scanning.

Anyway,

I have noticed that now the newer free wordpress templates have an encrypted code that ive seen on the footer template page. If you try to remove it, your website goes blank or has a message that says you should tamper with the code.

Anyway, I understand why that is included, but what Ive noticed is that, that type of new code could make it easy for a hacker to use those encrypted style codes to cypher your traffic.


What do you all think?
#security #wordpress
  • Profile picture of the author RemingtonSteele
    Originally Posted by Ricky Richter View Post

    I have noticed that now the newer free wordpress templates have an encrypted code that ive seen on the footer template page. If you try to remove it, your website goes blank or has a message that says you should tamper with the code.

    Anyway, I understand why that is included, but what Ive noticed is that, that type of new code could make it easy for a hacker to use those encrypted style codes to cypher your traffic.
    Any code like that can be removed if you know what to look for. One technique is to first load a page of your blog in your browser and view the source code. Look for the footer, and you should, in most cases, see the unencrypted HTML. Once you have the unecrypted code, you can go to footer.php in your WP theme editor and replace the code with the unencrypted code that you got from the rendered page. Remove the unwanted part(s), being careful not to remove any <div> elements that are necessary to hold the page together, so to speak. If you still get an error (or your blog goes blank as you said), then there's code elsewhere in the theme that needs to be removed. What you can do is a text string search for the exact error message that you get, find out what file(s) contain that message, and edit the code accordingly. This may require some knowledge of PHP, but if you understand how to "comment out" code, you should be able to figure out what you need to do.
    {{ DiscussionBoard.errors[2643440].message }}

Trending Topics