Prevent your WordPress Blog from being Hacked
August 24th, 2011
Lately we have seen clients complaining about their wordpress blog being hacked. This has nothing to do with a server being hacked but chances are the hacker gained access from your 3rd party wordpresss theme or plugin which you have used on your blog. Below are some simple way to prevent your blog from being hacked.
1) Remove the Footer Credit: Most WordPress templates will come with a link back to WordPress in the footer saying, “Powered by WordPress”. It is used as a marker by hackers who query search engines to compile lists of WordPress sites. Removing this will probably stop you from getting hacked as your site will probably not be found once it is removed.
To remove the footer credit, open up wp-content/{name of the theme you are using}/footer.php and delete the link to WordPress.
2) Remove the Meta Generator Tag – Most WordPress templates will also come with a HTML tag in the head like this:
This has to go too as it gives away what version of WordPress you are using. All a hacker would have to do is look up a hack for your version of WordPress and if you are vulnerable (some vulnerabilities require certain server settings or environments) they will take you down.
To remove the meta generator, open up wp-content/{name of the theme you are using}/header.php and delete the meta generator tag.
3) Stay Updated with the Latest WordPress Version: Last but definitely not the least is to stay updated with the latest version of WordPress because after each version is release, WordPress also releases the bugs and exploits of the previous version which puts your Admin Area in risk if you don’t upgrade.
4) WordPress Firewall Plugin: WordPress Firewall Plugin Detect, intercept, and log suspicious-looking parameters and prevent them compromising WordPress. It also protect most WordPress plugins from the same attacks. You can optionally configure as the first plugin to load for maximum security. It will give you an option to send an email to you with a useful dump of information upon blocking a potential attack and much more.
5) Take regular backups
For advance wordpress protection tips, please check these links
1. http://www.mastermindblogger.com/2011/14-ways-to-prevent-your-wordpress-blog-from-being-hacked/
2. http://semlabs.co.uk/journal/how-to-stop-your-wordpress-blog-getting-hacked
3. http://www.wpbeginner.com/wp-tutorials/11-vital-tips-and-hacks-to-protect-your-wordpress-admin-area/





