Wordpress Security - Best Method

HostCheetah

What do you guys think of the best method Wordpress Security, other than just keep up with recent builds and such.

I found this offering (6Scan.com) , which they do offer a free plan where the system will scan and alert , the paid one's will auto fix. Have not tried them but seems like an interesting idea / or perhaps just make sure your builds are up to the most recent is best case?

Dave

nunim

Keep the install up to date, make sure your file permissions are setup correctly, don't install loads of plugins, works for me thus far. Can try securing your WP-Admin directory and not using the default username of admin and only installing one blog per DB.

NickM

rm -rf wordpress

HostCheetah

@nickM hehe

I did find some just "street" smart stuff as you mention nunim

http://codex.wordpress.org/Hardening_WordPress

Tony_offshore

The better approach would be a secure web-server. Running with safe-mod=on, Suexec, and SuPHP might be a good start.

connercg

This is similar in nature to 6Scan --

wordpress.org/extend/plugins/bulletproof-security/

I've not used it a lot as it was installed for a client, I personally use the @nunim method. The only two clients sites I had compromised hadn't updated their WP. YMMV

HostCheetah

@connercg , very cool plugin - Thanks for sharing / looks quite robust , I will for sure share this with our WP Users.

Have a great Holiday Weekend all !

Dave

bdtech

I use bullet proof and limit login attempts for wordpress. Two of the best to have.

budingyun

Better wordpress security?

giang

Because we are on LET so I assume you are running a WP on your LEB :D So let secure your WP-admin by install a free SSL from StartSSL :D

Pats

this is

@connercg said: bulletproof-security

+1 , used this for last 2 clients along with supercache to make things secure & efficient..

similarly there should be topic for joomla - the next popular thing which gives security headaches.. :(

connercg

I caught up with a few folks over the weekend at a local dive and fielded the question to them about security. This plugin was brought up in conversation a few times, I haven't looked at it as of yet.

wordpress.org/extend/plugins/wordfence/