• Hello,
    What security measures do you recommend to protect wordpress site and your database against hackers and malware?

    Let me list what I know:

    -Changing your database table prefixes from the standard wp_ to something else

    -Disabling editing from admin control panel

    -Have strong passwords for admin and database

    -Installing a plugin such as wordfence

    -keeping your plugins up to date, removing all unnecessary themes and plugins

    -Have as least as possible sites together under your hosting plan

    -If your site contains a forum, separate the forum from your website and put under another domain name

    -Have as least as possible user entry points to site. disable commenting and registration system unless you really benefit from it

    so,

    first of all , can you confirm what i know is ok?

    and what else do you recommend?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Have you reviewed the official guide already?

    https://codex.wordpress.org/Hardening_WordPress

    I’ve found changing the db table prefixes isn’t so important. Also, while WordFence is widely used I do not typically install it on clients sites unless they are hiring me to fix a hacked site because more times than not this means they are on an insecure server or hosting provider. Keeping plugins, themes, and WP updated is definitely very important. Removing unused themes and plugins is not a bad idea either. Separating the forum is not necessary either. The best guide to securing WP can be found here: https://codex.wordpress.org/Hardening_WordPress

    Hope this helps. Once you have completed securing your site please tag this thread as solved for us.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘security measures to take for protecting your site’ is closed to new replies.