{"id":41719,"date":"2015-11-27T02:46:46","date_gmt":"2015-11-27T00:46:46","guid":{"rendered":"https:\/\/coma.lv\/2015\/11\/27\/how-to-protect-your-wordpress-website-from-hacking\/"},"modified":"2015-11-27T02:46:46","modified_gmt":"2015-11-27T00:46:46","slug":"how-to-protect-your-wordpress-website-from-hacking","status":"publish","type":"post","link":"https:\/\/coma.lv\/en\/2015\/11\/27\/how-to-protect-your-wordpress-website-from-hacking\/","title":{"rendered":"How to Protect Your WordPress Website from Hacking"},"content":{"rendered":"\n<p style=\"text-align: left;\">Because of WordPress&#8217;s popularity, the platform and the websites built on it have become a target for hackers and bots. Over the years, as WordPress has grown more popular, an opinion has formed that the platform is unreliable and easy to hack. This opinion is mistaken, because almost all hacks are caused by mistakes and inexperience of the developers who build and configure the website.<\/p>\n<p style=\"text-align: left;\">I will tell you about the techniques and plugins I use when <a href=\"https:\/\/coma.lv\/en\/\" target=\"_blank\" rel=\"noopener\">developing websites<\/a> and which will help protect your website from any hacking attempts.<\/p>\n<h2 id=\"login-page\" style=\"text-align: left;\">Login page<\/h2>\n<p style=\"text-align: left;\"><label><input type=\"checkbox\" \/> Block repeated, unsuccessful attempts to log in to the admin area (<a href=\"https:\/\/wordpress.org\/plugins\/login-lockdown\/\" target=\"_blank\" rel=\"noopener noreferrer\">Login Lockdown<\/a> or <a href=\"https:\/\/wordpress.org\/plugins\/better-wp-security\/\" target=\"_blank\" rel=\"noopener noreferrer\">iThemes Security<\/a>)<\/label><br \/>\n<label><input type=\"checkbox\" \/> Enable two-factor authentication (<a href=\"https:\/\/wordpress.org\/plugins\/wp-google-authenticator\/\" target=\"_blank\" rel=\"noopener noreferrer\">Google Authenticator for WordPress<\/a>)<\/label><br \/>\n<label class=\"\"><input type=\"checkbox\" \/> Use an email address instead of a username to log in (<a href=\"https:\/\/wordpress.org\/plugins\/wp-email-login\/\" target=\"_blank\" rel=\"noopener noreferrer\">WP Email Login<\/a>)<\/label><br \/>\n<label><input type=\"checkbox\" \/> Change the URL of the admin login page (<a href=\"https:\/\/wordpress.org\/plugins\/better-wp-security\/\" target=\"_blank\" rel=\"noopener noreferrer\">iThemes Security<\/a> or in the .htaccess file)<\/label><br \/>\n<label><input type=\"checkbox\" \/> Remove links to the admin login from the front end of the site. Often this link is in the Meta widget<\/label><br \/>\n<label><input type=\"checkbox\" \/> Use a strong password made of upper and lower case letters, digits and at least one special character (<a href=\"https:\/\/passwordsgenerator.net\/\" target=\"_blank\" rel=\"noopener noreferrer\">password generator<\/a> or <a href=\"https:\/\/ru.vpnmentor.com\/tools\/secure-password-generator\/\" target=\"_blank\" rel=\"noopener\">secure password generator<\/a>)<\/label><br \/>\n<label class=\"\"><input type=\"checkbox\" \/> Change your password from time to time<\/label><br \/>\n<label class=\"\"><input type=\"checkbox\" \/> Do not show on the login page what exactly the user entered incorrectly (<a href=\"https:\/\/gist.github.com\/zergiocosta\/72f87176b236ed0c6e13\" target=\"_blank\" rel=\"noopener noreferrer\">guide<\/a>)<\/label><\/p>\n<h2 id=\"administrative-panel\" style=\"text-align: left;\">Admin panel<\/h2>\n<p style=\"text-align: left;\"><label><input type=\"checkbox\" \/> Password-protect the wp-admin folder using .htaccess (<a href=\"https:\/\/gist.github.com\/rafaelfunchal\/f9a41ea72d80600d753a\" target=\"_blank\" rel=\"noopener noreferrer\">leave only the necessary files open<\/a>)<\/label><br \/>\n<label><input type=\"checkbox\" \/> Update WordPress regularly<\/label><br \/>\n<label><input type=\"checkbox\" \/> Do not use the word admin when creating an account. If you already have such an account, create a new account with admin rights and delete the old one<\/label><br \/>\n<label><input type=\"checkbox\" \/> Create an account with the Editor role and use it to publish content<\/label><br \/>\n<label><input type=\"checkbox\" \/> Install an SSL certificate<\/label><br \/>\n<label><input type=\"checkbox\" \/> Install a plugin that monitors file changes (<a href=\"https:\/\/wordpress.org\/plugins\/wp-security-scan\/\" target=\"_blank\" rel=\"noopener noreferrer\">WP Security Scan<\/a>, <a href=\"https:\/\/wordpress.org\/plugins\/wordfence\/\" target=\"_blank\" rel=\"noopener noreferrer\">Wordfence<\/a> or <a href=\"https:\/\/wordpress.org\/plugins\/better-wp-security\/\" target=\"_blank\" rel=\"noopener noreferrer\">iThemes Security<\/a>)<\/label><br \/>\n<label><input type=\"checkbox\" \/> Scan the site for viruses and security holes<\/label><\/p>\n<h2 id=\"themes\" style=\"text-align: left;\">Themes<\/h2>\n<p style=\"text-align: left;\"><label><input type=\"checkbox\" \/> Update your theme regularly<\/label><br \/>\n<label><input type=\"checkbox\" \/> Delete themes you do not use<\/label><br \/>\n<label><input type=\"checkbox\" \/> Download themes only from reliable sources (<a href=\"https:\/\/themeforest.net\/category\/wordpress\" target=\"_blank\" rel=\"noopener noreferrer\">ThemeForest<\/a>, <a href=\"https:\/\/www.elegantthemes.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">ElegantThemes<\/a>)<\/label><br \/>\n<label><input type=\"checkbox\" \/> Remove the WordPress version from the code (<a href=\"https:\/\/www.wpbeginner.com\/wp-tutorials\/the-right-way-to-remove-wordpress-version-number\/\" target=\"_blank\" rel=\"noopener noreferrer\">guide<\/a>)<\/label><\/p>\n<h2 id=\"plugins\" style=\"text-align: left;\">Plugins<\/h2>\n<p style=\"text-align: left;\"><label><input type=\"checkbox\" \/> Update all plugins<\/label><br \/>\n<label><input type=\"checkbox\" \/> Delete plugins you do not use<\/label><br \/>\n<label><input type=\"checkbox\" \/> Download plugins from reliable sources<\/label><br \/>\n<label><input type=\"checkbox\" \/> Replace plugins that have not been updated for too long with more recent alternatives<\/label><br \/>\n<label><input type=\"checkbox\" \/> Do not install too many plugins<\/label><\/p>\n<h2 id=\"database\" style=\"text-align: left;\">Database<\/h2>\n<p style=\"text-align: left;\"><label><input type=\"checkbox\" \/> Change the default database prefix (<a href=\"https:\/\/www.maketecheasier.com\/the-safe-way-to-change-your-wordpress-database-table-prefix\" target=\"_blank\" rel=\"noopener noreferrer\">guide<\/a>)<\/label><br \/>\n<label><input type=\"checkbox\" \/> Set up a schedule of regular backups (<a href=\"https:\/\/wordpress.org\/plugins\/updraftplus\/\" target=\"_blank\" rel=\"noopener noreferrer\">Updraft Plus<\/a>, <a href=\"https:\/\/wordpress.org\/plugins\/wp-db-backup\/\" target=\"_blank\" rel=\"noopener noreferrer\">WP DB Backup<\/a>)<\/label><br \/>\n<label><input type=\"checkbox\" \/> Use a very strong password for the database when you create it (<a href=\"https:\/\/passwordsgenerator.net\/\" target=\"_blank\" rel=\"noopener noreferrer\">password generator<\/a>)<\/label><\/p>\n<h2 id=\"hosting-provider\" style=\"text-align: left;\">Hosting provider<\/h2>\n<p style=\"text-align: left;\"><label><input type=\"checkbox\" \/> Use a reliable company<\/label><br \/>\n<label><input type=\"checkbox\" \/> Connect to the server via SFTP or SSH to upload files<\/label><br \/>\n<label><input type=\"checkbox\" \/> Set folder permissions to 755 and file permissions to 644 (<a href=\"https:\/\/codex.wordpress.org\/Hardening_WordPress#File_Permissions\" target=\"_blank\" rel=\"noopener noreferrer\">Codex recommendations<\/a>)<\/label><br \/>\n<label class=\"\"><input type=\"checkbox\" \/> Make sure nobody has access to wp-config.php<\/label><br \/>\n<label><input type=\"checkbox\" \/> Delete license.txt, wp-config-sample.php and readme.html<\/label><br \/>\n<label class=\"\"><input type=\"checkbox\" \/> Disable file editing via wp-config.php by adding this line: <code>define('DISALLOW_FILE_EDIT',true);<\/code><\/label><br \/>\n<label><input type=\"checkbox\" \/> Disable directory browsing with this code in .htaccess: <code>Options All -Indexes<\/code><\/label><\/p>\n<hr \/>\n<p style=\"text-align: left;\"><em>Our specialization is WordPress website development and maintenance. Contact us for a free consultation \u2014 <a href=\"mailto:vadim@coma.lv\">vadim@coma.lv<\/a>, <a href=\"tel:+37129394520\">+371 29394520<\/a><\/em><\/p>\n<hr \/>\n","protected":false},"excerpt":{"rendered":"<p>Because of WordPress&#8217;s popularity, the platform and the websites built on it have become a target for hackers and bots. Over the years, as WordPress has grown more popular, an opinion has formed that the platform is unreliable and easy to hack. This opinion is mistaken, because almost all hacks are caused by mistakes and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":40843,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1225],"tags":[],"class_list":["post-41719","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wordpress"],"_links":{"self":[{"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/posts\/41719","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/comments?post=41719"}],"version-history":[{"count":0,"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/posts\/41719\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/media\/40843"}],"wp:attachment":[{"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/media?parent=41719"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/categories?post=41719"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coma.lv\/en\/wp-json\/wp\/v2\/tags?post=41719"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}