Wordpress Security

This is mainly aimed at those of you who are not seasoned webmasters here at the GPWA. If you use Wordpress you need to lock it down. I have been using Wordfence since 2013, when we migrated OCR from a php flat file site the CMS that is Wordpress.

We have tried and tested all the various security plugins for Wordpress, but for me Wordfence stands head and shoulders above them all.

This is my review of Wordfence and why anyone using Wordpress as their CMS should use it:

https://www.onlinecasinoreviewer.com...ers/wordfence/

While nothing connected to the net is 100% safe/un-hackable.

I Agree with Webzcas on the point raised. Locking down your WP site is paramount in taking proactive steps. Granted we're both coders. We can use our skill-sets to better to protect our sites.

However, if your not a coder, then there are decent tools/plugins, and even lots of free htaccess info to harden your WP sites.

A few other great recommendations:

1. Get yourself a static IP from your ISP - wp-admin folder is what really needs protecting. Hence adding a Deny from All, allow from (your static IP) will stop anyone, other than yourself, from accessing the WP admin back-end (in your browser).
2. Lock down your htaccess file - by default this is set to 644. However setting it to 440 adds another layer of protection, which denies the User write permission, set with 664.
3. In your root htaccess file, deny permission to certain files types (if you need a copy of this post here and I'll add).

Database Privileges - by default WP grants permission to all DB access. Yet WP only requires the following:

https://www.gpwa.org/forum/images/im...privileges.png


Also, if your a serious affiliate, doing this full-time, and want to grow your business outside the realm of entrusting others to do coding for you, I highly suggest you learn some basis html (html5) php, CSS and htaccess coding, It's not hard to learn, there are plenty of guides for beginners. This way, you don't always have to rely on WP plugins, which, an over-abundance of plugins, if your not hosting on a fast-server, can really slow your site down ;)

It was you Dave five years ago that pointed me in the direction of Wordfence. What you have posted above is also solid advice :)

Quote:

---

Originally Posted by Webzcas

It was you Dave five years ago that pointed me in the direction of Wordfence.

---

I thought that was the case, but being post-op (Thursday week ago), the minds still a little foggy on painkillers and what not :rockon:
Five years ago, wow time flies, hey mate!

BTW, here's that htaccess coding

Code:

---

#Stops folders being displayed in browser
Options All -Indexes
#End folders being displayed

#Prevents access to site error log file
<Files error_log>
order allow,deny
deny from all
</Files>
#End log files access

#Prevent file accesses
<Files .htaccess>
order allow,deny
deny from all
</Files>
<Files wp-config.php>
order allow,deny
deny from all
</Files>
<Files xmlrpc.php>
order allow,deny
deny from all
</Files>
<Files wp-load.php>
order allow,deny
deny from all
</Files>
#End prevent file access

---

I also recommend Wordfence.

However, it is important your privacy policy includes a reference to how data (including IP addresses) is handled by them and that you have signed their data processing agreement (https://www.wordfence.com/help/gener...on-regulation/).

I used to use wordfence but every update came with lots of bugs making my site incompatible, I now use ceber which feels a lot faster

All in one WP security - an easy to set up and use plugin(thanks to Rick for advice). I haven’t noticed any big issues, may be a few small ones after updates which were fixed by the creators quite fast.