How to secure your Wordpress installation against hackers

Matt Cutts last day did a post on securing your Wordpress installation from hackers. He had some really nice tips which are highly useful. So I decided to do a reflection here. Here is the link to the original article by Matt Cutts.

What he means basically is that you should not allow the public to see what or plugins are installed and what version of Wordpress you are running. so you need to put a simple index.html file to all the folders of WP install directory that haven’t got one by default. For example visit the plugins directory of this blog . The wordpress version needs to be turned off because if you are using an older version that is prone to attack, it is better not to let the attacker know it directly.

** Caution : Be sure you are running the latest version of WP to avoid risks **

Buy me a cup of hot coffee - help me keep posting all through the night

If you are new here you may want to subscribe to this blogs full feed RSSSubscribe to full feed RSS of this blog
so that you will get the updates automatically to your feed reader.

Tags: ,

You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

RSS feed | Trackback URI

2 Comments »

Comment by NirmalNo Gravatar
2008-01-22 17:11:06

Well I too had blogged about this few days back. One of my friends got his web design ripped after his theme directory was exposed. This method to protect with an index,html file is also not fool proof.

 
Name (required)
E-mail (required - never shown publicly)
URI
Subscribe to comments via email
Your Comment (smaller size | larger size)
You may use <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong> in your comment.

Trackback responses to this post



My Google  Netvibes  My Yahoo!  Windows Live  Bloglines  Newsgator