How to secure your wordpress blog
July 15th, 2008
- Use latest stable version of Wordpress. Don’t use beta version!
- Your database table prefix must be other than default prefix (wp_) - Securing against sql injection.
- Wordpress version must be hidden - Many hackers take this advantage to attack wordpress in version that vulnerable. So, let them know nothing.
- Must be no user “admin” - this should be guested during sql injection. If u used it.. change it now.
- Put .htaccess in yout /wp-admin/ directory. - avoid directory listing.
September 7th, 2008 at 5:08 pm
ada lagi..
1.default login page http://domain.com/wp-login.php tidak di sorok
2.tidak menggunakan captcha pada wp-login.php - allow bruteforce
3.commnet juga tidakk menggunakan captcha - allow DDoS
[Reply]
September 7th, 2008 at 5:35 pm
Tq..
[Reply]