11

Three WordPress Security Tips

I came across this post on quickonlinetips who got these tips from Matt Cutts. While some of them I have been following there a few tips that are new to me or can be done in a better way I am listing them all here.

1. Drop the WordPress Meta Tag

By default a large number of WordPress themes have the WordPress Meta Tag which show the version of WordPress that is currently running on the blog. I have even removed the Powered by WordPress links from the footer this has reduced spam by a certain degree.


to block access to the wp-admin directory using htaccess. But this will work only if you browse the net with a Static IP address. Also this is not necessary if you are using the latest version of WordPress.

4. Bonus Point Keep your WordPress Blog upto date using The Wordpress Automatic Upgrade Plugin

7 Comments

Gravatar 1

Awesome tips! Thanks for sharing.

Haris Posted on Wednesday, August 15th, 2007 at 3:41 pm
Gravatar 2

Simple but effective tips for security are always the best.

Jamie

Terinea Weblog Posted on Wednesday, August 15th, 2007 at 4:48 pm
Gravatar 3

Hmm, its Quick Online Tips, not Quick Tips Online :P ! And yes, those tips were really security helpful! :D

Rishi Posted on Wednesday, August 15th, 2007 at 8:07 pm
Gravatar 4

I never know about the problem with Meta tag. Nice article. I think the last link in your post is not correct.

Nirmal Posted on Thursday, August 16th, 2007 at 9:03 pm
Gravatar 5

I never gave a thought to that, these are a must have, i will surely be giving a thought to that.

Vaibhav Posted on Thursday, August 16th, 2007 at 9:19 pm
Gravatar 6

I’m new to wordpress. Had no idea about the /wp-admin/ Thanks!

Is there any way that I can get rid of the meta tags and retain certain content which previously was meta tagged?

web hosting review Posted on Wednesday, November 14th, 2007 at 10:28 am
Gravatar 7

I would add one more tip that I have seen happen to blogs that I host. Don’t use the default table prefix wp_, come up with a difficult to guess one.
If you already have wp_ , it is easy to change through phpmyadmin.

Sherif Elsisi Posted on Thursday, January 17th, 2008 at 4:46 pm

4 Trackbacks/Pingbacks

Pingback on August 19, 2007

[…] Three WordPress Security Tips […]

Pingback on August 20, 2007

[…] Three Wp security tips - By Arpit Jacob […]

Trackback on September 12, 2007

3個 Wordpress 的安全防護叮嚀…

1.刪除Wordpress在meta的版本訊息
大部分使用的樣板,在header.php這個檔案中都會放上一段meta標記.
<meta name=”generator” content=”WordPress <?php bloginfo(’version’); ?>” />
而…

Pingback on September 19, 2007

[…] I haven’t exactly found much reassurance. It seems that SQL injection exploits are common. This post offered some nice tips to help foil worms. I need to research the problem further, to make sure I […]

Leave a comment

- Why ask? This confirms you are a human user!

All Rights Reserved Copyright © 2008, and Design by Arpit Jacob. XML SiteMap, XHTML Sitemap, RSS Entries and Comments