WordPress is used by nearly 10% of all websites on the Internet. With such a high level of use, there is also a higher level of risk associated with this software. The more a tool or service is utilized, the more likely it is to be attacked by hackers. Don't let your site be compromised! Read through the following articles to become more familiar with what steps you can take to maintain site security!
1. Personal Workstation Security
- Defense starts with your device.
- A good password policy is key.
- Prevent easy access to your user accounts.
4. Keep WordPress (and other applications) Updated
- Updates provide security and functionality patches.
5. Control Sensitive Information
- It's your data, make sure it's safe!
- Make sure the right people have the right access to your files.
7. Avoid Looking Like a "New" WordPress Install
- Newer installs are often easiest to hack, avoid being a target.
8. Disable Custom HTML
- Keep only the necessary customizations active.
If it's not necessary for the form and function of your site, disable it. You can add the following to your wp-config.php file:define( 'DISALLOW_UNFILTERED_HTML', true );
- Use protection, and make sure it's from a good source.
10. Malware Defense
- The best defense is a good offense!
11. Clean Your Site
- Keep your site files like you keep your kitchen, avoid the mess.
- Have a clean copy of your data to quickly recover from any issues.
13. Report Bugs and Vulnerabilities
- WordPress likes to stay secure, as do plugin providers. You can help!
You can send anything you discover to security @ wordpress. org for the application itself. Any plugins that you want to report issues with can be reported through plugins @ WordPress. org
It's best to avoid discussing the vulnerabilities in Social Media, since hackers may be able to pick up on and exploit users before patches can be implemented.
14. Stay Vigilant
- Stay secure through continuous maintenance.
Security is not a one-time task. You cannot just set it and forget it, you must be aware that it is an ever-changing and continuous job.
- Set up a scanning schedule.
- Make sure you analyze your logs and keep copies of them off-site.
- Find and follow WordPress bloggers or security Twitter accounts to stay on top of the game.
- Protecting your site will help prevent harm to your account, your content, your users, and other machines that connect to you throughout the Internet.
More Links
http://codex.wordpress.org/FAQ_Security
http://codex.wordpress.org/Hardening_WordPress