Number 1 way to increase security for your WP blog?

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Juicy D. Links
    So Fucking Banned
    • Apr 2001
    • 122992
    #1

    Number 1 way to increase security for your WP blog?

    Change the default admin name from ADMIN to something else. Saves so much drama and hassle down the road. Pass it on.
    Tags: None
    • natkejs
      Confirmed User
      • Jan 2003
      • 1640
      #2
      wise words and sigspot

        Comment

        • Juicy D. Links
          So Fucking Banned
          • Apr 2001
          • 122992
          #3
          Originally posted by natkejs
          wise words and sigspot
          Sometimes the most obvious and commonsense ones are the ones most overlooked...

            Comment

            • natkejs
              Confirmed User
              • Jan 2003
              • 1640
              #4
              You're right, I'm hitting myself for not thinking of this earlier

                Comment

                • Machete_
                  WINNING!
                  • Oct 2002
                  • 14579
                  #5
                  Good advice man

                  If you want to take it one step further:

                  Since day #1 in IT infrastructure - Best practice when it comes to any kind of system security, is to demote the admin to a userlvl with no right at all, and use another character as the real admin.

                  This goes for scripts, web or PC useraccounts.. everything.


                  By not removing the character, you have the bruteforce wannabe hackers try and hack a account with no rights instead of trying to find the real sysadmin account
                  Last edited by Machete_; 07-27-2009, 12:26 PM.

                    Comment

                    • Juicy D. Links
                      So Fucking Banned
                      • Apr 2001
                      • 122992
                      #6
                      That would work, too. Hackers + Wasted Effort + getting squat = WIN

                      Originally posted by KrisH
                      If you want to take it one step further

                      Since day #1 in IT infrastructure - Best practice when it comes to any kind of system security, is to demote the admin to a userlvl with no right at all, and use another character as the real admin.

                      This goes for scripts, web or PC useraccounts.. everything.


                      By not removing the character, you have the bruteforce wannabe hackers try and hack a account with no rights instead of trying to find the real sysadmin account

                        Comment

                        • natkejs
                          Confirmed User
                          • Jan 2003
                          • 1640
                          #7
                          Originally posted by KrisH
                          Good advice man

                          If you want to take it one step further:

                          Since day #1 in IT infrastructure - Best practice when it comes to any kind of system security, is to demote the admin to a userlvl with no right at all, and use another character as the real admin.

                          This goes for scripts, web or PC useraccounts.. everything.


                          By not removing the character, you have the bruteforce wannabe hackers try and hack a account with no rights instead of trying to find the real sysadmin account
                          That's very good advise

                            Comment

                            • candyflip
                              Carpe Visio
                              • Jul 2002
                              • 43074
                              #8
                              Check out the WP Security Scan plugin. This does a few things that help too.

                              Spend you some brain.
                              Email Me

                                Comment

                                • Hentaikid
                                  Confirmed User
                                  • Nov 2002
                                  • 1250
                                  #9
                                  Yeah, putting the wp files in a subdirectory not in the root also helps, and a dozen other little things

                                    Comment

                                    Previous template Next
                                    Working...