WordPress.org

1. joaoramos
   Member
   Posted 1 year ago #

   Hi,

   I've been coding some security hacks and hiding failed login errors and the WordPress version, forcing SSL on wp-admin, changing the core files to another directory, changing the MySQL table prefix, etc.

   Then I realized that someday security risks will change, as new WordPress releases will have new vulnerabilities and old hacks will deprecate. What do you think about that? Should we use plugins instead of coding specific hacks? Personally I like to manually be in charge of my own stuff, but someday I won't have the time nor the patience to code it by hand. Plus, I run 10+ WordPress blogs, so I'll have 10x the work when updating all my security hacks.

   What do you think? Should we use plugins or handcraft our own security hacks everytime a major release is out? Would you please share your thoughts on this?

   I apologize for my bad english :)
   João

2. James
   Happiness Engineer
   Posted 1 year ago #

   When it comes to security, I will never put my trust in third-party plugins. I mean no offense to the developers who work hard to provide free security plugins to the community, but security is the one thing that I want complete control of, no matter how long it takes to implement.

   If you'd like to implement your own security measures, this article has always featured the most current recommended security measures:

   http://codex.wordpress.org/Hardening_WordPress

Topic Closed

This topic has been closed to new replies.