How to secure your site from attacks?

Moses
(@moussamhanna)

5 years, 4 months ago
Dear team
i use wordpress for most of my websites,
yesterday i was attacked by an malicious spam that affected all my sites hosted in a shred hosting with hostgator,

luckily i was taking a backup and restored everything, but it took me so much time and energy,

i want to know how i can prevent this from happening in the future and how i can secure myself from future attacks?
- This topic was modified 5 years, 4 months ago by Moses.
- This topic was modified 5 years, 4 months ago by Steven Stern (sterndata). Reason: fixed title

Viewing 6 replies - 1 through 6 (of 6 total)

Moderator Steven Stern (sterndata)
(@sterndata)

Forum Moderator

5 years, 4 months ago

First, see this: https://codex.wordpress.org/Hardening_WordPress

There are a number of plugins that can be used to help lock down a WordPress site, including iThemes Security, Sucuri, and Wordfence.

I use Wordfence on all my sites.

You’re ahead of the game in that you backup your site! Whatever you do, keep doing that.

https://wordpress.org/plugins/search/security

aCstudent
(@acstudent)

5 years, 4 months ago

Backups; Keep WP, plugins, and themes updated; strong admin password; security plugin – any of the popular / well-reviewed ones should suffice.

danclp
(@danclp)

5 years, 4 months ago

My way:
– Never use wp_ for your table_prefix in the wp-config file
– Never us Admin as user name
– Use a stronger password
– Use 2-factor authentication
– Rename your login URL

Maybe you can refer to this site as well: https://www.codeinwp.com/blog/secure-your-wordpress-website/

very useful.

Armando Duran
(@armandoduran)

5 years, 4 months ago

In addition to what everybody else is recommending, take a look at this article:

WordPress Security Fundamentals: How to Not Get Hacked

Jaydeep Jagani
(@jaydeepjagani94)

5 years, 4 months ago

I would suggest to use all in one security plugin.This plugin will give many features to make your site secure.

– Don’t use default wordpress Table Prefix.
– change the admin name, Use some other username
– change the admin URL from wp-admin to some other URL
– set proper directory permission.
– disallow file editing.
– Block Access to XMLRPC.
– enable Google Captcha for login form and forgot password.
– User Enumeration

Above all points we can cover from All In One WP Security & Firewall plugin. https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

Moderator Steven Stern (sterndata)
(@sterndata)

Forum Moderator

5 years, 4 months ago

Watch this:

Aaron Campbell is the security lead for WP.