Make Sure Your WordPress Blogs are Secure from Hackers
If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!
I just received an email from Lynette Chandler, who sends out excellent info on technology issues. (As someone who is somewhat tech-averse, I need all the help I can get!)
Lynette talked about the security issues with WordPress blogs and what to do about it. (Lynette says “regular web sites” such as XSite Pro sites are not necessarily any more secure, but I’m going to check on that with XSP).
Here’s what Lynette wrote, and the helpful info she shared:
“If you haven’t heard already, there has been a bunch of attacks to
WordPress blogs lately. If you go to WordPress forums and search for
security or hacking you’ll see it has gone on since before version
2.5.1. The most vulnerable sites are those running version 2.3.x but
there has been some report from people using 2.5.1
“It is not clear that those running the newer version were infiltrated
before upgrading. The official WordPress word on this is, version
2.5.1 is secure.
“But you know, this is more about what we as site owners should do to
make sure our sites are not so easily hacked. Look, every software
has their weak points. The trick to surviving a web site hacking is
to take steps so you don’t go through it in the first place.
Prevention is better than cure.
“Also, having regular *web site* backups are super important.
“I talked about this to my friend Elizabeth lately on her podcast.
You are advised to listen to it. Here’s the link.
“Some of the things discussed in the podcast are:
“1. What can happen if a hacking occurs (even if it is not a
Wordpress powered site - so if you don’t run WP, don’t sit back and
relax yet)
“2. Some suggestions how to lock down your WP and sites.
“In addition, here’s a blog post I made earlier with resources how to
secure your site.
“Finally… what do you do to find out if you’ve been hacked and how
to fix it? Here’s a resource that will be super helpful.
“Till the next time, stay safe and don’t forget to backup, backup,
backup.”
Thanks, Lynette!
July 2nd, 2008 at 3:12 am
Keeping your wordpress up-to-date is a good start, more importantly though, don’t install just any plugins. Plugins are not developed by the Wordpress development team, their developed by amateurs and usually leave security holes everywhere. Take Joomla for example, almost every component has SQL injection issues. Don’t install plugins if you don’t know what to look for inside of them. Hmm maybe I’ll make a certified list of secure wordpress plugins.
July 2nd, 2008 at 3:04 pm
Thanks much, Jim. I only install plug-ins that Cathy Perkins recommends (after she checks them out). I’m ssure your certified list of secure WP plugins would be a hit. Go for it–and let me know when it’s ready, so I can tell others.
July 8th, 2008 at 11:03 pm
Hi Diane! Thanks for the mention. Totally agree with Jim on the plugins and they apply to themes as well. Jim, do drop me a note too when you finish that report.