Title: Recommended Security Plugin
Last modified: August 31, 2016

---

# Recommended Security Plugin

 *  [aashath](https://wordpress.org/support/users/aashath/)
 * (@aashath)
 * [10 years ago](https://wordpress.org/support/topic/recommended-security-plugin/)
 * Hi All,
 * I know this might have been discussed here many times but like to get an expert
   advice.
    Few of our sites gets infected and get suspended by our host couple 
   of times now. We took all steps recommended by experts like changing site/cpanel/
   ftp password regularly, but still we get infected.
 * I even purchased wordfence plugin to block all countries except australia and
   to detect earlier. But even It didnt help. Its just easy for me to restore the
   website but couldt figure of the root cause. Like to have experts ideas to prevent
   this in future .

Viewing 2 replies - 1 through 2 (of 2 total)

 *  [webdesignerchristian](https://wordpress.org/support/users/webdesignerchristian/)
 * (@webdesignerchristian)
 * [10 years ago](https://wordpress.org/support/topic/recommended-security-plugin/#post-7311173)
 * ..changing site/cpanel/ftp password regularly, but still we get infected.
    maybe
   local system is infected also?
 *  Moderator [bcworkz](https://wordpress.org/support/users/bcworkz/)
 * (@bcworkz)
 * [10 years ago](https://wordpress.org/support/topic/recommended-security-plugin/#post-7311180)
 * Christian brings up a good point, if anyone’s local machine (or insecure local
   network) has a packet sniffer or keylogger installed unknowingly, it wouldn’t
   matter how may security measures are used server side.
 * It’s also very easy for a hacker to install a hidden backdoor once they gain 
   initial access. Then no matter what security or passwords are later implemented,
   they can easily come in through their backdoor. Finding such backdoors is extremely
   difficult. To reliably eliminate backdoors, you need to completely wipe everything
   on the server and reinstall from a known clean backup. “Known clean” can be difficult
   to determine. A wily hacker could initially install a backdoor and postpone doing
   anything noticeable for several weeks.
 * When you restore from a backup that’s prior to the observed hacking incident,
   the backdoor is still in place. You then need to wipe and restore from an even
   earlier backup, losing all data created after the backup was made.
 * Other ways hackers gain access is through security flaws in themes or plugins
   that have not been updated. Always run the most recent versions of plugins and
   themes (and WP itself). Avoid plugins and themes that are not actively maintained.
 * Also look at other apps on your server, especially old staging sites that might
   be lingering. Get rid of these, they can still be used to gain access if they
   are on the public portion of your server, even if not part of the active site.
 * Work through the steps in [FAQ My site was hacked](http://codex.wordpress.org/FAQ_My_site_was_hacked)
   to help ensure you addressed all possible weaknesses. Once your site is totally
   clean, consider implementing some of the measures in [Hardening WordPress](http://codex.wordpress.org/Hardening_WordPress).

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Recommended Security Plugin’ is closed to new replies.

## Tags

 * [security plugins](https://wordpress.org/support/topic-tag/security-plugins/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 3 replies
 * 4 participants
 * Last reply from: [Daryl](https://wordpress.org/support/users/intelwizard/)
 * Last activity: [10 years ago](https://wordpress.org/support/topic/recommended-security-plugin/#post-7311292)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics