12

Three WordPress Security Tips

I came across this post on quickonlinetips who got these tips from Matt Cutts. While some of them I have been following there a few tips that are new to me or can be done in a better way I am listing them all here.

1. Drop the WordPress Meta Tag

By default a large number of WordPress themes have the WordPress Meta Tag which show the version of WordPress that is currently running on the blog. I have even removed the Powered by WordPress links from the footer this has reduced spam by a certain degree.


to block access to the wp-admin directory using htaccess. But this will work only if you browse the net with a Static IP address. Also this is not necessary if you are using the latest version of WordPress.

4. Bonus Point Keep your WordPress Blog upto date using The Wordpress Automatic Upgrade Plugin

8 Comments

Gravatar 1

Awesome tips! Thanks for sharing.

Haris Posted on Wednesday, August 15th, 2007 at 3:41 pm
Gravatar 2

Simple but effective tips for security are always the best.

Jamie

Terinea Weblog Posted on Wednesday, August 15th, 2007 at 4:48 pm
Gravatar 3

Hmm, its Quick Online Tips, not Quick Tips Online :P ! And yes, those tips were really security helpful! :D

Rishi Posted on Wednesday, August 15th, 2007 at 8:07 pm
Gravatar 4

I never know about the problem with Meta tag. Nice article. I think the last link in your post is not correct.

Nirmal Posted on Thursday, August 16th, 2007 at 9:03 pm
Gravatar 5

I never gave a thought to that, these are a must have, i will surely be giving a thought to that.

Vaibhav Posted on Thursday, August 16th, 2007 at 9:19 pm
Gravatar 6

I’m new to wordpress. Had no idea about the /wp-admin/ Thanks!

Is there any way that I can get rid of the meta tags and retain certain content which previously was meta tagged?

web hosting review Posted on Wednesday, November 14th, 2007 at 10:28 am
Gravatar 7

I would add one more tip that I have seen happen to blogs that I host. Don’t use the default table prefix wp_, come up with a difficult to guess one.
If you already have wp_ , it is easy to change through phpmyadmin.

Sherif Elsisi Posted on Thursday, January 17th, 2008 at 4:46 pm
Gravatar 8

1. Why would this IP restriction be more effective than a password protection using the similar .htaccess and .htpasswd method which offers the same level of protection sans the changing of IPs when you move/travel. And let your browser/keychain remember you password so you can just hit enter when prompted.

2. I’m pretty sure most web host have directory browsing turn-off by default and in that case, won’t it show a 404 page thus going to that location makes no sense. However for those not doing that, I’m pretty sure they have a reason and if they’re to follow your steps, they must have been smart enough to do a directory browsing off through their Web Host Panel or through .htaccess.

3. This is the least updated feed and we’re talking about Wordpress, you’ll definitely hear about new releases within days unless you’re on an extended vacation.

tips blog Posted on Saturday, September 6th, 2008 at 3:00 pm

4 Trackbacks/Pingbacks

Pingback on August 19, 2007

[…] Three WordPress Security Tips […]

Pingback on August 20, 2007

[…] Three Wp security tips - By Arpit Jacob […]

Trackback on September 12, 2007

3個 Wordpress 的安全防護叮嚀…

1.刪除Wordpress在meta的版本訊息
大部分使用的樣板,在header.php這個檔案中都會放上一段meta標記.
<meta name=”generator” content=”WordPress <?php bloginfo(’version’); ?>” />
而…

Pingback on September 19, 2007

[…] I haven’t exactly found much reassurance. It seems that SQL injection exploits are common. This post offered some nice tips to help foil worms. I need to research the problem further, to make sure I […]

Sorry, comments for this entry are closed at this time.

All Rights Reserved Copyright © 2009, and Design by Arpit Jacob. XML SiteMap, XHTML Sitemap, RSS Entries and Comments