.

10 WordPress의 해킹 팁 - 증명 확인하십시오. 궁극 가이드.

English 영어 (변경)
  • Digg
  • Twitter
  • Technorati
  • del.icio.us
  • Facebook
  • MySpace
  • Reddit
  • StumbleUpon
  • LinkedIn
  • email

비디오 방법 WordPress의 해킹을 확인하려면 : 10 팁 - 증거

2월 24일
10 WordPress의 해킹 팁 - 증명 이미지를 만들어

귀하의 블로그를 갖는 해킹 재미, 그리고 표준 WordPress의 설치가 스며들지되지 않습니다. 뿐만 아니라, 동시에 당신이 ISP와 작업 문제를 추적하고 가동 중지 시간에 해킹 결과 않는 블로그가 다시 발생하지 않도록, 그것도 당신이 시간을 의미할 수있다, 예를 들어, 귀하의 이메일 클라이언트가 제대로 한 번 더 해결지고있다. 모두 모두 소중한 시간을 낭비.

치료보다 예방이다. 여기에 10 개의 팁 WordPress의 해킹 증거 확인하십시오.

왜 당신이 필요합니다

당신이 시작하기 전에

  • 백업 파일을 FTP 클라이언트를 사용하여
  • 데이터베이스, WP phpMyAdmin을 사용하여 백업. 만약 당신이하는 방법, 동영상, 여기 Guvnr에서 튜토리얼을이 수표를 어떻게해야할지 모르겠다.

비디오 : 보안, 솔리드, 안전 .. 10 단계이다.

이렇게하는 방법의 더 나은 아이디어를보고, 어, guvideo.

체크 http://youtube.com/guvnrDOTcom에서 the_guv의 YouTube 채널

아니면 만약 네가 그렇게한다면, 또는 심지어 수 있으면, 여기 사소 한거와 귀찮게 할 수 없지 ...

1. WordPress의 업그레이 드하십시오. 최신 버전을하십시오. 경우 2.7 이상을 사용하는거야,이 귀하의 관리 대시보드에서 버튼 클릭시 자동으로 수행할 수있습니다. 그냥 "업그레 이드"버튼을 봐. 경우, 이전 버전을 사용하고있어이 읽기.

2. 업데이트 플러그인. 물론 모든 최신 버전으로 업그레이 드하십시오. 만약 그들이, 당신은 귀하의 플러그인은 관리자 페이지에 통보하지. 이전 버전의 보안 위험을 제시할 수있습니다.

10 WordPress의 해킹 팁 - 증명 이미지를 만들어

3. 변경 "wp_"데이터베이스 테이블 접두사. 내가 WP - 보안, 그 하나의 SEO 팩을 충성 웹 디자인 모두에서 슈퍼 편리한 개발과 같은 친구들 스캔 사용. 일단, 왼쪽 메뉴에서 데이터베이스를 클릭하십시오 "에서" "보안"드롭 다운 메뉴에서 활성화 다운. 페이지로드 접두사를 쉽게 변경할 수있습니다. 만약 문제가 해결되지 않는 대신 이렇게 오류를 던지고 : -

  • 나. 예방 조치로 WordPress의 플러그인을 모두 비활성화합니다.
  • Ⅱ. 백업 데이터베이스로 Guvnr의 비디오 자습서를 설명했다.
  • Ⅲ. 텍스트 편집기는 SQL *. 다운로드한 파일을 여십시오 (여기서 *는 귀하의 데이터베이스의 이름입니다.)
  • Ⅳ. 찾기 및 "wp_"새 접두사 접두사의 모든 인스턴스를 바꿉니다.
  • 대 귀하의 WordPress의 데이터베이스 내의 모든 테이블을 드롭. 떨어뜨만이 테이블을 자체 데이터베이스는 마십시오. WP - phpMyAdmin을 사용하는 좋은 플러그인입니다.
  • 좋아. 귀하의 WordPress의 데이터베이스는 여전히, 보통 수입 새로 - SQL을 파일을 *. 수정, 하나 접두사를 변경하여 편집. WP - phpMyAdmin 또는 유사한 다시.
  • 7 세. 열기 및 폴더를 블로그 WP - config.php 파일을 루트에 편집 = 'table_prefix "$ 변경 wp_';"를 "$ = 'table_prefix yourNewPrefix_';".
  • 8 세. 재활 성화 귀하의 플러그인.

4. "관리자"사용자 삭제합니다. 해커가 힘들어 그냥 빈이 작업을 확인합니다. , 관리 권한을 가진 새 사용자를 만들고 사용자가 사용자 이름과 동일하지 않습니다 별명을 공개 디스플레이 ()에 대한 포기. 그런 다음 새 사용자, 그리고 "사용자는 원래의"관리자 삭제 다시 로그 아웃 로그인하세요.

5. 강력한 암호를 사용합니다. 비트 뻔한,이 중 하나. 믹스 그것 문자, 숫자 및 특수 문자를 소문자로 상단에있습니다. 저는 (암호화) 내 비밀 번호를 기억 RoboForm을 사용하고 무료입니다.

6. 귀하의 WordPress의 버전을 숨기기. 테마의 폴더를 열고 "header.php"라인에 대한 검색 ... 

 "="생성기 "메타 이름 
 콘텐츠 = "WordPress의"? bloginfo ( '버전의 PHP는');? ""/ "

... 그리고 그것을 삭제할 수있습니다. 아니 유용한 목적으로하고있다.

7. 확인 WordPress의 데이터베이스 오류가 해제됩니다. 최근 WordPress의 버전에서는, 그들은 기본적으로 해제됩니다. 그래서 업그레이 드하십시오.

8. WP ID를 메타 태그를 제거합니다. WordPress의 핵심이 태그를 삭제합니다. 후 정품 인증 및 WP 실행 보안이 자동으로 이루어집니다 검사합니다.

9. . htaccess로 "WP - 관리자 /"파일이 붙여 새 텍스트 파일 열기 만들기 ... 

    # BEGIN WordPress
    RewriteEngine On
    RewriteBase /
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    # END WordPress

... Save the file as .htaccess and upload it to your "wp-admin/" folder, ie, to http://myblog.com/wp-admin/

10. Hide Your Plugins. If you're not sure whether they're hidden or not, navigate to http://myblog.com/wp-content/plugins. If you see a 404 error page, they're hidden. Otherwise, you'll see them listed. In that case, copy the following into a new .htaccess file, adding the file to your wp-content/ folder...

    # BEGIN WordPress
    RewriteEngine On
    RewriteBase /
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    # Prevents directory listing
    IndexIgnore *
    # END WordPress

Some web hosts don't allow you to administer .htaccess files. If that's the case, instead of using an .htaccess file to hide the list of plugins, create an index.html file. You can write something about restricted access in there, if you like. Either way, this file will prevent a plugin listing.

Now navigate to http://myblog.com/wp-content/plugins. They should be hidden.

After You're Done

Just to be thorough, and because a few things have changed...

  • Backup your files again, using your ftp client.
  • Backup your database again, using wp-phpmyadmin.

That's it. Your blog is more secure, and way less hackable. Go make content!

[ad]
If you liked that ...
... maybe you'll like these?

If you liked that ...
... maybe you'll like these?
Posted on Tuesday, February 24th, 2009
Subscribe to Comments by RSS              Trackback from your blog

THE_GUV NEEDS YOU!!

.. to improve this post ..

Please clue me in. What's wrong or missing?

Or, hey, just pile on the praise ;)  Ah, yup, and fix a feed, fella.

Or link the page to your social network!

thank you, thanx, tx, ta, t, tsst, twaddle, cheek, cheers, cheerio



  1. LunarPages suspended.page February 26th, 2009 at 5:12 pm

    [...] you work with your ISP to track the problem and ensure it doesn’t happen again, it… More Categories: [...]

  2. Sarah March 3rd, 2009 at 2:56 pm

    Excellent tutorial. Blog security is one of the main concerns every blogger should know.

  3. JC de Villa March 3rd, 2009 at 2:58 pm

    I read your post, and found item 9 interesting (.htaccess) and its location. You should really put it in your blog root directory (or even your site root), so that indexes wont be visible... I suggest you look at your own directories for indexes, because some are a bit more exposed than they should.

  4. RAzik March 3rd, 2009 at 3:01 pm

    In the tip # 10, u told it will show "404 error page".

    But i think if you disabled directory it will show "403 error page".

  5. http://grautiger.wordpress.com/2009/03/10/datensicherung-fur-wp-blogs/ March 3rd, 2009 at 7:44 pm

    [...] Wenn ich das mal habe *augenroll* wird DAS hier wohl mal Thema: Blog ein wenig gegen Hacks absichern: http://guvnr.com/web/blogging/10-tips-to-make-wordpress-hack-proof/ [...]

  6. Herrin March 4th, 2009 at 12:17 pm

    Thank you so much for this compact and easy to implement guide to WP security.

    I use 2 plugins that help with security that you did not mention in this article.

    The first is called WP-Optimize - allows you to delete post/page revisions, optimize the database and change the username from admin to anything you like.

    The second is called Secure wordpress and it does some of the things that you mention above. Probably good for clients etc.

    Thanks again and hope this adds something useful to the mix.

    regards

    Herrin

  7. [Video] Ten Steps to Secure WordPress | PAULMYATT.COM March 6th, 2009 at 1:33 pm

    [...] over at guvnr.com has produced a nice video on how to secure your WordPress [...]

  8. Firewalling and Hack Proofing Your WordPress Blog « Lorelle on WordPress March 8th, 2009 at 5:09 am

    [...] is news of a video and blog post by Guvnr called “10 Tips to Make WordPress Hack Proof. The effort involved tips from BlogSecurity’s popular WordPress Security Whitepaper, [...]

  9. George Serradinho March 8th, 2009 at 8:43 am

    Thanks for the tips, the list will definately help us users out there.

  10. Firewalling and Hack Proofing Your WordPress Blog | WORDPRESS KNOWLEDGEBASE-PLUGINS-EXTENSIONS-TEMPLATES March 8th, 2009 at 5:18 am

    [...] is news of a video and blog post by Guvnr called “10 Tips to Make WordPress Hack Proof. The effort involved tips from BlogSecurity’s popular WordPress Security Whitepaper, [...]

  11. [Wordpress] 10 Steps to a Secure WordPress Installation | Technofriends March 8th, 2009 at 12:57 pm

    [...] Guvnr has done an amazing job by bringing out a easy and simple to understand video which illustrates the 10 steps to secure your wordpress installation. [...]

  12. Lonnie A March 9th, 2009 at 2:11 am

    Dear Mr Guvnr,

    Thank you so much for sharing your security blog video. I especially appreciated your tutorial on backing up a database using wp-phpmyadmin. The database is very frightening place to modify if one has no knowledge of navigating phpmyadmin.

    Just to add a little bit of information regarding .htaccess on hosting web servers that enable safe mode on php. Some of us are unable to create and use .htaccess because of their server security policies.

    Therefore here's something that I do to get around this problem. I create a cloaked web page of an affiliate site. If the so called hacker wants to spy my wp-content/plugins directory, they will be surprised to what they will find.

    I simply upload a cloaked index.html page to hide the content of these important folders. So instead of viewing the contents of the folder they might be puzzled as to what they see. A live web site... Huh...?

    I do to same for my themes folder as well. It works well for me and this is generally what I do to hide all my download products I buy and sell online too.

    Again... thanks for your tutorial, it was very well explained and and hugely helpful.

  13. the_guv March 8th, 2009 at 11:24 pm

    @Herrin - WP-Optimize I like too. Need to use it, hmmn, must do that! Secure Wordpress I'll take a look at. Big cheers, appreciate the comment. Mix away m8.
    @Lorrelle - wow, flattery indeed :) getting loved up by Lorelle. Hey, how cool is that, big cheers girl.
    @George - good to hear. mighty pleased.
    @Techno, PaulMyatt & http://planet.wordpress.org/ , you have great taste in content, keep it up.
    //the_guv
    @Sarah - tx tx tx ... sorry, I almost forgot you! tssh.

  14. …on protecting your WordPress Install… « Project:Dark Sky March 9th, 2009 at 4:32 am

    . htaccess로 "WP - 관리자 /"파일이 붙여 새 텍스트 파일 열기 만들기 ... 
        # BEGIN WordPress
    RewriteEngine On
    RewriteBase /
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    # END WordPress

    ... Save the file as .htaccess and upload it to your "wp-admin/" folder, ie, to http://myblog.com/wp-admin/

    10. Hide Your Plugins. If you're not sure whether they're hidden or not, navigate to http://myblog.com/wp-content/plugins. If you see a 404 error page, they're hidden. Otherwise, you'll see them listed. In that case, copy the following into a new .htaccess file, adding the file to your wp-content/ folder...

        # BEGIN WordPress
    RewriteEngine On
    RewriteBase /
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    # Prevents directory listing
    IndexIgnore *
    # END WordPress

    Some web hosts don't allow you to administer .htaccess files. If that's the case, instead of using an .htaccess file to hide the list of plugins, create an index.html file. You can write something about restricted access in there, if you like. Either way, this file will prevent a plugin listing.

    Now navigate to http://myblog.com/wp-content/plugins. They should be hidden.

    After You're Done

    Just to be thorough, and because a few things have changed...

    • Backup your files again, using your ftp client.
    • Backup your database again, using wp-phpmyadmin.

    That's it. Your blog is more secure, and way less hackable. Go make content!

    [ad]
    If you liked that ...
    ... maybe you'll like these?

    If you liked that ...
    ... maybe you'll like these?
    Posted on Tuesday, February 24th, 2009
    Subscribe to Comments by RSS              Trackback from your blog

    THE_GUV NEEDS YOU!!

    .. to improve this post ..

    Please clue me in. What's wrong or missing?

    Or, hey, just pile on the praise ;)  Ah, yup, and fix a feed, fella.

    Or link the page to your social network!

    thank you, thanx, tx, ta, t, tsst, twaddle, cheek, cheers, cheerio



    1. LunarPages suspended.page February 26th, 2009 at 5:12 pm

      [...] you work with your ISP to track the problem and ensure it doesn’t happen again, it… More Categories: [...]

    2. Sarah March 3rd, 2009 at 2:56 pm

      Excellent tutorial. Blog security is one of the main concerns every blogger should know.

    3. JC de Villa March 3rd, 2009 at 2:58 pm

      I read your post, and found item 9 interesting (.htaccess) and its location. You should really put it in your blog root directory (or even your site root), so that indexes wont be visible... I suggest you look at your own directories for indexes, because some are a bit more exposed than they should.

    4. RAzik March 3rd, 2009 at 3:01 pm

      In the tip # 10, u told it will show "404 error page".

      But i think if you disabled directory it will show "403 error page".

    5. http://grautiger.wordpress.com/2009/03/10/datensicherung-fur-wp-blogs/ March 3rd, 2009 at 7:44 pm

      [...] Wenn ich das mal habe *augenroll* wird DAS hier wohl mal Thema: Blog ein wenig gegen Hacks absichern: http://guvnr.com/web/blogging/10-tips-to-make-wordpress-hack-proof/ [...]

    6. Herrin March 4th, 2009 at 12:17 pm

      Thank you so much for this compact and easy to implement guide to WP security.

      I use 2 plugins that help with security that you did not mention in this article.

      The first is called WP-Optimize - allows you to delete post/page revisions, optimize the database and change the username from admin to anything you like.

      The second is called Secure wordpress and it does some of the things that you mention above. Probably good for clients etc.

      Thanks again and hope this adds something useful to the mix.

      regards

      Herrin

    7. [Video] Ten Steps to Secure WordPress | PAULMYATT.COM March 6th, 2009 at 1:33 pm

      [...] over at guvnr.com has produced a nice video on how to secure your WordPress [...]

    8. Firewalling and Hack Proofing Your WordPress Blog « Lorelle on WordPress March 8th, 2009 at 5:09 am

      [...] is news of a video and blog post by Guvnr called “10 Tips to Make WordPress Hack Proof. The effort involved tips from BlogSecurity’s popular WordPress Security Whitepaper, [...]

    9. George Serradinho March 8th, 2009 at 8:43 am

      Thanks for the tips, the list will definately help us users out there.

    10. Firewalling and Hack Proofing Your WordPress Blog | WORDPRESS KNOWLEDGEBASE-PLUGINS-EXTENSIONS-TEMPLATES March 8th, 2009 at 5:18 am

      [...] is news of a video and blog post by Guvnr called “10 Tips to Make WordPress Hack Proof. The effort involved tips from BlogSecurity’s popular WordPress Security Whitepaper, [...]

    11. [Wordpress] 10 Steps to a Secure WordPress Installation | Technofriends March 8th, 2009 at 12:57 pm

      [...] Guvnr has done an amazing job by bringing out a easy and simple to understand video which illustrates the 10 steps to secure your wordpress installation. [...]

    12. Lonnie A March 9th, 2009 at 2:11 am

      Dear Mr Guvnr,

      Thank you so much for sharing your security blog video. I especially appreciated your tutorial on backing up a database using wp-phpmyadmin. The database is very frightening place to modify if one has no knowledge of navigating phpmyadmin.

      Just to add a little bit of information regarding .htaccess on hosting web servers that enable safe mode on php. Some of us are unable to create and use .htaccess because of their server security policies.

      Therefore here's something that I do to get around this problem. I create a cloaked web page of an affiliate site. If the so called hacker wants to spy my wp-content/plugins directory, they will be surprised to what they will find.

      I simply upload a cloaked index.html page to hide the content of these important folders. So instead of viewing the contents of the folder they might be puzzled as to what they see. A live web site... Huh...?

      I do to same for my themes folder as well. It works well for me and this is generally what I do to hide all my download products I buy and sell online too.

      Again... thanks for your tutorial, it was very well explained and and hugely helpful.

    13. the_guv March 8th, 2009 at 11:24 pm

      @Herrin - WP-Optimize I like too. Need to use it, hmmn, must do that! Secure Wordpress I'll take a look at. Big cheers, appreciate the comment. Mix away m8.
      @Lorrelle - wow, flattery indeed :) getting loved up by Lorelle. Hey, how cool is that, big cheers girl.
      @George - good to hear. mighty pleased.
      @Techno, PaulMyatt & http://planet.wordpress.org/ , you have great taste in content, keep it up.
      //the_guv
      @Sarah - tx tx tx ... sorry, I almost forgot you! tssh.

    14. …on protecting your WordPress Install… « Project:Dark Sky March 9th, 2009 at 4:32 am

      [...] read this post about protecting your wordpress install and found item 9 interesting. To quote: Create an .htaccess [...]

    15. Koichi Paxton March 9th, 2009 at 7:25 am

      This is an amazing resource for anyone who is trying to secure your wordpress. I learned many tips for making my WP better protected from hackers. I will now make sure that all of my plugins are well hidden so that they can't access them.

    16. Risorse per migliorare la sicurezza di WordPress | Bloggare March 9th, 2009 at 2:14 pm

      [...] consigliata anche la visione di questo video che illustra come procedere alla messa in sicurezza del [...]

    17. Dispelled.ca » links for 2009-03-14 March 14th, 2009 at 10:01 pm

      [...] 10 Tips To Make WordPress Hack-Proof [...]

    18. purosangue March 23rd, 2009 at 6:52 pm

      great job with the video, thank you for taking the time and to post it for everyone!!

    19. the_guv March 24th, 2009 at 4:32 am

      cheers Purosangue, lovely to hear. and you Koichi, top notch m8.

      Lonnie, big tx for that. you throw up some cracking ideas there...hmmn, i feel another tutorial coming on!

      **************************************

      UPDATE TO THIS POST: I've had a few interesting emails about this tutorial, with yet more ways to secure a wordpress blog. Right now I'm working on a few other things but, in a couple of weeks, I'll update this post and the video to accomodate even more security tips.

      If you've got something to throw into the mix, let me know and it'll help me to create the most comprehensive, cross-web server guide possible.

      the_guv

    20. papa April 8th, 2009 at 10:39 am

      Thanks very much for the tutorial, it's been really informative for a newbie like myself.

      I'm having trouble with the .htaccess file though and I'm wondering if it relates to what Lonnie A was having trouble with? When I upload the .htaccess file to the correct directory and then refresh my security scan plugin I get an error page reading 'Internal Server Error - The server encountered an internal error or misconfiguration and was unable to complete your request.' and I can't access my WP site at all unless I delete the file.

      Thanks for any help you can give!

    21. bob April 9th, 2009 at 2:19 am

      Hi Need help i made a .htaccess page and it is uploaded to the wp-admin area and it is not stopping my plug-ins from showing up.
      How can i fix this.
      Thanks

      # BEGIN WordPress

      RewriteEngine On
      RewriteBase /
      RewriteCond %{REQUEST_FILENAME} !-f
      RewriteCond %{REQUEST_FILENAME} !-d
      RewriteRule . /index.php [L]

      # Prevents directory listing
      Options -Indexes
      # END WordPress

    22. E-TARD April 11th, 2009 at 1:49 pm

      thanks for the tips

    23. the_guv April 11th, 2009 at 9:27 pm

      @papa & @bob
      - hey guys, tx for that. i've UPDATED "10. Hide Your Plugins" to reflect some problems a few folks have had, and hope that helps.

      If you've still got problems, pls let me know.

      @E-TARD. You're welcome :)

    24. Grigoriy April 23rd, 2009 at 11:12 pm

      Dear author,
      Thank you very much for these useful tips collected in one place.

    25. the_guv April 24th, 2009 at 1:10 pm

      @Grigoriy - you are most splendidly welcome, and a big tx :)

    26. Sicurezza Wordpress: 10 passi per renderlo a prova di Hacker | MarinoMichele.it April 30th, 2009 at 4:21 pm

      [...] blog di Guvnr è stato pubblicato pochi mesi fa un articolo intitolato “10 Tips To Make WordPress Hack-Proof” (10 consigli per rendere WordPress a prova [...]

    27. Sara May 6th, 2009 at 12:23 am

      Thanks for this. I just spent $22.00 lastnight on an eBook that was probably a waste of money since the information is easily available online and less hassle with some of these wordpress plug-ins.

    28. the_guv May 7th, 2009 at 6:29 am

      @Sara - you're welcome. Damn, you actually spent money on an ebook! : P는

    29. Jessicalip May 10th, 2009 at 5:08 pm

      I will leave a reply as soon as I try it Thank you

    30. the_guv May 11th, 2009 at 1:46 am

      @Jessicalip - hope it helps out. thanks to you.

    31. ArianaBels May 13th, 2009 at 12:12 pm

      Wow! Thank you! I always wanted to write in my blog something like that. Can I take part of your post to my site? Of course, I will add backlink?

    32. the_guv May 13th, 2009 at 7:55 pm

      @ArianaBels - pleased you like. Sure you can summarise and link to this post, and embed the video if you wish. Thank you for asking.

    33. Cris May 18th, 2009 at 7:25 pm

      I change from blogger to word press a week ago , since then i had to malware attacks. One was the famous gumblar.cn and another that I didn't even tried to figure out.

      So Google banned me from the listings and I'm setting up all security measures this time.

      Because I'm new at blogging, your tutorial (specially the video) was very useful.

      Thank you!

    34. the_guv May 19th, 2009 at 11:48 am

      @Cris - sorry to hear that - sounds like a right nightmare you've had. Pleased to help and all the best with Pinche Pelicula.

    35. Sicherheit von WordPress verbessern | Webseiten-Infos.de May 23rd, 2009 at 12:45 am

      [...] zudem auf dieses Video “10 Tips To Make WordPress Hack-Proof” zu diesem Whitepaper auf guvnr.com aufmerksam [...]

    36. Forbedre sikkerheden i WordPress - Hack-Proof « Tech.BusinessClass.dk June 13th, 2009 at 3:42 am

      [...] http://www.guvnr.com/web/blogging/10-tips-to-make-wordpress-hack-proof/ [...]

    37. akis June 14th, 2009 at 1:51 am

      One of the best guides to create our wordpress hack proof...Bravo!!!Thumbs up!!

    38. the_guv June 14th, 2009 at 6:45 am

      big cheers akis - much appreciated

    39. Deep Jive Interests » Security Updates-a-Plenty June 14th, 2009 at 5:29 pm

      [...] http://www.guvnr.com/web/blogging/10-tips-to-make-wordpress-hack-proof/ [...]

    40. johnstevens June 22nd, 2009 at 7:15 pm

      п»ї
      Hello,
      Can I put this article to my site?
      Thanks for the information

    41. the_guv June 26th, 2009 at 6:25 am

      @john - you're welcome to embed the video, intro the piece and link to the bulk, else buy me a fine single malt whiskey and I'll doubtless change my mind and you can have the lot. tx to you.

    42. 10 tips för att säkra din WordPress installation | June 29th, 2009 at 4:50 pm

      [...] Guvnr kan man läsa om ett något äldre inlägg som ger 10 tips för att göra din WordPress [...]

    43. Y094 July 15th, 2009 at 8:06 am

      Thanks : D 조

    44. the_guv July 15th, 2009 at 11:53 am

      @Y094 hey, thank yo .. thank yo! .. geddit .. sorry, many thanks, Y094, appreciated.

    45. john.conner July 16th, 2009 at 2:46 pm

      Mostly I have Seen Only articles Its Good That you have included Video,
      I would even Like To See Some SEO Guides

    46. Méldodie July 18th, 2009 at 3:56 pm

      Hello,

      I join lots of thanks to all the preceeding ones.

      I'll add a question you may find interesting, because all of my blogs aren't using Apachee as a server, but Lighttpd, so the .htaccess there has no effect (unless I install empty ones, thus making the plugin wp-security-scan content to see there is one where it seeks for it, otherwise comes the red warnings sent by the plugin).

      Lighttpd not using .htaccess, as far as the blogs I have under this server are concerned, I followed thoses of your advices that were relevant. My question would be : is there anything else that's relevant, that could be done or checked when using Lighty ?

      Thanks again : D 조

    47. the_guv July 19th, 2009 at 11:16 am

      @ Méldodie .. Good question. No idea 'cos I don't use Lighty with WP. I do use Nginx though and it's the same deal with that .. htaccess is irrelevant, so don't bother.

      ?? Anyone using non-Apache web servers that know of other tips ??

    48. Protect your wordpress blog from hackers, secure your website | Hen Design Studio July 20th, 2009 at 7:11 am

      [...] 10 Tips To Make WordPress Hack-Proof [...]

    49. Brian July 21st, 2009 at 7:18 pm

      After doing Step 9, my blogs got Internal Server Error 500. Deleting the .htaccess file fixed the problem. Is there something I'm missing?

      I copied that text, pasted it into Notepad++, made sure there were no extra characters at the beginning or ends of all lines, saved as a normal text file. Uploaded to the wp-admin directory, and then renamed to .htaccess

      At that point, I started getting the Internal Server Errors. When I deleted the .htaccess file from the wp-admin directory everything worked fine again.

      I had 644 permissions which is the same as the .htaccess file already in the directory above.

      Thoughts?

    50. the_guv July 22nd, 2009 at 10:04 pm

      @Brian .. hmmn, could be an issue with your httpd.conf, on the server. What does that say?

    51. LauraManick July 23rd, 2009 at 11:56 pm

      I cannot believe this will work!

    52. the_guv July 25th, 2009 at 11:27 am

      @LauraManick .. ye have little faith ;)

    53. FH August 7th, 2009 at 5:17 am

      Great post.. I hope my blog never gets hacked.. thanks for the info :)

    54. 10 Tips To Make WordPress Hack-Proof. The Ultimate Guide. – GUVNR August 8th, 2009 at 9:40 am

      [...] the original here: 10 Tips To Make WordPress Hack-Proof. The Ultimate Guide. – GUVNR Comments0 Leave a Reply Click here to cancel [...]

    55. mugger August 15th, 2009 at 6:55 pm

      I think there is still an exposure to malware, namely injection of at the bottom of root index.*, a file which even WP needs to start.

    56. 4 security links: Why you better secure your blog | STL Social Media Guy August 24th, 2009 at 2:16 pm

      [...] 10 Tips To Make WordPress Hack-Proof. The Ultimate Guide guvnr.com | February 24, 2009 This is a must-read for keeping your blog safe, especially if you’re blogging in WordPress. I followed this one almost point-by-point. Complete with videos. [...]

    57. debbie T September 1st, 2009 at 12:04 am

      Hello! Thank you for this wonderful article.

      I think I might have found the answer to Brian's problem, as I had the same issues with accessing my admin area after I created the new .htaccess file.

      Anyway, I took another look at the code in the file, and I realized I copied the text from your article, but the code had line numbers in it.

      ie: 7.# END WordPress

      I deleted all the line numbers and now it works fine! Thanks!

      Hope that helps Brian too!

    58. the_guv September 1st, 2009 at 5:59 pm

      @Debbie .. hey girl, good to hear.

      Now look everyone, don't copy the ruddy line numbers! Top right of the code boxes there's an option to open the plain text .. so do, then copy from there. I know, easy when you know how.

      Hey, Debbie, on your site .. beaut pic of that frog and the key. What a thing. Quite humbling.

    59. joejonns September 2nd, 2009 at 3:29 am

      txxx - keep up the good work.

    60. Old WordPress Versions Under Attack « Lorelle on WordPress September 5th, 2009 at 12:34 am

      [...] Guvnr – 10 Tips to Make WordPress Hack Proof [...]

    61. ALERT: Old WordPress Blogs Under Attack | Zemalf September 5th, 2009 at 10:23 am

      [...] Guvnr – 10 Tips to Make WordPress Hack Proof [...]

    62. Oude WordPress installaties worden aangevallen : WordPress Dimensie September 5th, 2009 at 10:42 am

      [...] Guvnr – 10 Tips to Make WordPress Hack Proof [...]

    63. 10 Tips To Make WordPress Hack-Proof. The Ultimate Guide. – GUVNR | WpMash - WordPress News September 5th, 2009 at 8:11 pm

      [...] Follow this link: 10 Tips To Make WordPress Hack-Proof. The Ultimate Guide. – GUVNR [...]

    64. Old WordPress Versions (prior to 2.8.4) Under Attack :: HTML Websites, Web Design, Splash Pages, Blog Headers, Wordpress Blogs, Blog Sites September 6th, 2009 at 3:58 am

      [...] Guvnr – 10 Tips to Make WordPress Hack Proof [...]

    65. Bill Bennett September 6th, 2009 at 5:41 am

      I was going to work through this, but I fell at the first hurdle.

      wp-phpmyadmin is only compatible up to Wordpress version 2.2.2

      I'm running 2.8.4. Is there a workaround?

    66. Bill Bartmann September 7th, 2009 at 12:45 pm

      Cool site, love the info.

    67. Defeating the Wordpress attacks « Tips from Idea15 Web Design September 8th, 2009 at 11:31 am

      [...] 9 tips to make WordPress hack-proof (guvnr) [...]

    68. the_guv September 16th, 2009 at 5:43 pm

      @joejonns & @Bill Bartman .. many tx

      @Bill Bennett .. sorry for delay, was on hols.

      As I understand it, wp-phpmyadmin does work with WP, up to 2.8.4, despite saying it's compatible only up to 2.2.2.

      Seems that the developers haven't upgraded the stylesheet yet, so it may look a bit odd, is all. When they do that, I guess they'll update the compatibility officially.

      Alternatively, I've heard some good things about Adminer .. http://www.adminer.org/en/ , which entails uploading a single file to your server before having a php tool very like phpmyadmin. OK, yes, I know, that's not *quite* so handy as having a WP plugin version, as is the case with wp-phpwhatnot.

    69. 30 Incredibly Useful WordPress Hacks | Tutorial9 September 24th, 2009 at 3:04 pm

      [...] Video How-to: 10 Tips To Make WordPress Hack-Proof [...]

    70. NamrouD | Upgrade Your Mind ! » 30 Incredibly Useful WordPress Hacks October 6th, 2009 at 1:28 am

      [...] Video How-to: 10 Tips To Make WordPress Hack-Proof [...]

    71. Sorry for the Recent Downtime October 14th, 2009 at 5:24 pm

      [...] you’ve never before given your WordPress-security much thought, check out the video here and install WP-DBManager and WP Security Scan. There are numerous resources on increasing the [...]

    72. tomorrowland.com » tomorrowland virus killed October 16th, 2009 at 11:34 am

      [...] I’ve wiped out the virus and cleaned up the database.  I also implemented guvnr’s 10 tips to make wordpress hackproof.  (Ok if that’s not offering a challenge to all the hackers out [...]

    73. Install/Upgrade WORDPRESS with SUBVERSION - VPS Bible #15 - GUVNR November 7th, 2009 at 7:41 am

      [...] 10 Tips To Make WordPress Hack-Proof. The Ultimate Guide. - GUVNR June 9th, 2009 at 11:37 am [...]

    74. The 5 Minute Wordpress Security Audit « Tips from Idea15 Web Design November 23rd, 2009 at 6:15 pm

      [...] 9 tips to make WordPress hack-proof (guvnr) [...]

    75. UPDATE: How-to Install/Upgrade Nginx to 0.7.62 - VPS Bible - GUVNR November 25th, 2009 at 10:42 am

      [...] may like to read my Video How-to: 10 Tips To Make WordPress Hack-Proof, which gives some WP-endorsed security tips. Specifically on a note about upgrading, you may also [...]

    Say Something


.