Are you tired of having your Wordpress hacked?

admin

Administrator
Staff member
1. Did you buy plugins to protect Wordpress?

2. Did you spend money and time paying someone to fix your hacked blog?

3. What about lost rankings because a hacker put some secret code on your site?

4. What about lost visitors who no longer trust your site because they received a malware warning?
 

Hazem

New member
One of the websites I did with wordpress got hacked once and it was posting [email protected]@ ads to visitors and regular members
The best cure I found online was to upload a new copy of wordpress , but this did not cure the vulnerability of wordpress itself and I thought this is going to happen again

A secure plugin change admin , wp-content folder , change wp_ in database ,,,, and many other changes is a good start for protection
 

Sander k

New member
My wordpress sites get hacked all the time, most of the time through MYSQL injections, WordFence doesn't help.
 

LiveWire

New member
To secure your wordpress, do following:

1. Don't use admin as a username. Change it to something random like madguyz_rockk.

2. Change Wordpress database table prefix to something random like: hi12wp_

3. Hide username from visitors by changing author slug using this plugin:
http://brandonallen.org/wordpress/plugins/edit-author-slug/

4. Use Theme Authenticity Checker (TAC) plugin to scan any malicious code in your Wordpress themes-plugins.

5. Use Wordpress security plugins : Better WP Security

6. Take regular backups!

Hope it helps! :cool:
 

PeaceSigns

New member
I've only had a wordpress site hacked once - and in that case a spammer injected malware into a template file (likely through FTP through a brute force password attack). After that I started taking backups regularly and used security plugins to lock down the admin panel. Asides from that one time, I've never been hit.
 

cobaltsean99

New member
My business has never been hacked, being that we just started putting our site 'online', we were using wordpress on a local computer, connecting by IP. No one knew the IP, and customers didn't have access to any part of that computer. But now that our business is being put online for customers to search our store, and find things in our library, we are working on securing it.
 
LiveWire said:
To secure your wordpress, do following:

1. Don't use admin as a username. Change it to something random like madguyz_rockk.

2. Change Wordpress database table prefix to something random like: hi12wp_

3. Hide username from visitors by changing author slug using this plugin:
http://brandonallen.org/wordpress/plugins/edit-author-slug/

4. Use Theme Authenticity Checker (TAC) plugin to scan any malicious code in your Wordpress themes-plugins.

5. Use Wordpress security plugins : Better WP Security

6. Take regular backups!

Hope it helps! :cool:

Great tip.
Following these steps will surely keep your wordpress site hacker headache.
Another add-on would be customize your login page or homepage without wordpress trace (e.g removing any wordpress related materials such as logos and images) that will hint them it is a wordpress site.