The Markos Giannopoulos Blog: security

Showing posts with label security. Show all posts

Monday, 11 February 2013

Secure WordPress with WP-Security

// WP Security Scan is a set of tools for adding some basic #security on your #WordPress installation. It includes:
- A series of tests like if you have the latest version, if you're not telling the world your version of WordPress, .htaccess protection, etc (see screenshot)
- Information on your PHP/MySQL installation for debugging
- Permissions checks on your files
- Feature to backup your database
- A password tool to select a hard to brake password

Get WP Security Scan at the WordPress.org plugin directory http://bit.ly/Xx6dPe

For getting .htaccess setup without messing directly with files, see the AskApache plugin http://bit.ly/YQLhFU (will have another post on it at later time). For more on WordPress security see my previous posts http://bit.ly/1262rDZ

Thursday, 2 February 2012

Login log for your WordPress

Here is a companion #WordPress #plugin for the Limit Login Attempts one I posted about before ( http://bit.ly/z3q1gM ): Simple Login Log does exactly that. It keeps a log of all successful or not attempts to login on your site. You'll be surprised at the number of attempts (I certainly was when I found I had 600 attempts from bots in 3 days :))

Simple Login Log can be found at WordPress.org http://bit.ly/xeA67f

Google+: Reshared 1 times
Google+: View post on Google+

Tuesday, 31 January 2012

Block brute-force attempts on your WordPress blog

WordPress on it's own a quite secure #CMS but this doesn't mean there is no room for improvement. A simple but effective way to make your #WordPress installation more secure is to limit the amount of attempts that can be made on your login page. This will block automated or not attempts to gain access to your site by guessing the password.

The #plugin is called Limit Login Attempts. It will log attempts to login, and will limit the amount of times an IP can fail the login process. Over a (custom) limit it will just block any further attempts. Many customizations are offered (see screenshot). You will certainly be surprise by how many attempts are being made by #spambots!

Limit Login Attempts can be found on WordPress.org http://bit.ly/we0JdW

Google+: View post on Google+

Saturday, 12 November 2011

#WordPress #security

Embedded Link

Thousands of WordPress sites commandeered by Black Hole
Webmasters, update TimThumb now!
Mass attacks that exploit a known vulnerability in the WordPress publishing platform have continued to bear fruit for hackers, with thousands of websites claimed in the past few weeks, a researcher said.…

Google+: View post on Google+