WordPress.org

Ready to get started?Download WordPress

Forums

This helps on security? (4 posts)

  1. ioallennesimapotenza
    Member
    Posted 6 years ago #

    Hi,
    I need a WP installation only to show a theme I builded and so I want to improve the security of WP. Since I do not add posts or pages nor comments I chmod -R 111 WordPressRootDir. Is this helpful on preventing XSS or others attacks? Is it possible to remove wp-admin dir?

  2. Samuel Wood (Otto)
    Tech Ninja
    Posted 6 years ago #

    Is this helpful on preventing XSS or others attacks?

    No, not really. It'll prevent those files from being modified. However, I'm amazed the site still works that way.

    Is it possible to remove wp-admin dir?

    No.

  3. Jeremy Clark
    Moderator
    Posted 6 years ago #

    Here are some basic security steps you can take.
    http://codex.wordpress.org/Hardening_WordPress

  4. ioallennesimapotenza
    Member
    Posted 6 years ago #

    @Otto42

    I'm amazed the site still works that way.

    Why? Maybe WordPress has to write something into WordPressRootDir? I have no cache and all the files (i.e. .htacces) are not going to change, the temp dir is /tmp so I think that wp has nothing to do on rootdir (except runnig scripts), keep in mind that my knoledge of the system is very limited so I can have misunderstood some aspects of wp.

    @jeremyclark13
    thank you, I'll read that page

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags