Methods to prevent hacking of Wordpress sites

  1. Keep your WordPress website updated with the latest version of WordPress.  Wordpress is regularly upgraded with new functionality and with security measures that help stop hackers.
  2. Use complex usernames and passwords as described above.
  3. Install security plugins such as Better WP Security.  It covers most of the wordpress vulnerabilities mentioned earlier in this blog post.
  4. Install WP Security Scan.  It will scan your code and look for anything that is out of place like malware.  It will also make you aware of any vulnerabilities that it finds.
  5. Change the prefix of your WordPress database tables.
  6. Make the changes described earlier to your .htaccess file to prevent hackers from accessing important files that could cause vulnerabilities if accessed.  Also make changes to your .htaccess file to prevent SQL injection and URL hacks.
  7. Move your admin panel login to a URL that is not so easily identified and not common.  Limit the number of unsuccessful login attempts.
  8. Create a new admin account with a different name and give it a strong password.
  9. Delete the ‘admin’ user account; during that procedure, you’ll be asked by WordPress which other account should you assign posts, pages, etc, created by ‘admin’ to. Choose the new admin account name you just created
  • 0 Users Found This Useful
Was this answer helpful?