WordPress Install Themes Permissions

Monday, March 8th, 2010 at 8:52 am

How to strengthen the security of WordPress

WordPress CMS (Content Management System) is indisputable that the most used, the advantage of both organizations and individuals. Along with its popularity, more and more are also trying to find a weak point of this cms.

Here are some tips for safer that should be known by you who use WordPress as a CMS (Content management system) or a platform that works to establish the face, content management, users, plugins, addons and the like.

1. User Manager / Administrator
By default after installing WordPress, then we will 'Admin' username. Never! with 'admin' user name, change 'admin' user name with user name, As its name alongside the numbers. Most cases of piracy username is the use of WordPress 'admin' user name for the method brute force.

Logically, the switch is more difficult because they have to guess the username and password, while if you use 'admin' the username then simply switch your password attack.

2. Protect wp-admin folder

Wp-admin folder is also a gap dangerous is often used by attackers to break into your website. Écuras, sure, sure! How? might be a little more work, but will have 5 minutes to do.

Make a. htacess containing the IP parameters that can restrict any access to this directory, the configuration of the following way:

To deny, allow
deny from all
# Allow my work IP address
192.168.1.123 192.168.1.124 allow from

. Htaccess example script above to enable the IP 192.168.1.123 and 124 access to wp-admin folder. Most of us Internet users with a dynamic IP address either have to change the IP every time you want to access wp-admin? the answer is yes. To change this file. Htaccess you can use SFTP. Or you can use other security methods Protection ApachePassword as an example.

3. Use SSH instead of FTP or SFTP
The reason is simple, SFTP data transfers happened will happen encrypted, while FTP is not the case, and efforts and the use of FTP and SFTP are relatively similar.

4. The file permissions.
Here is a brief summary of some file permissions to see if your WordPress Installation are:

.. / 0755
.. / Wp-includes 0755
.. / . Htaccess 0644
index.php 0644
js / 0755
.. / Wp-content / themes 0755
.. / Wp-content / plugins 0755
.. / Wp-admin 0755
.. / Wp-content 0755

SSH running:
"Chmod-R 755 / home / user / public_html /", eg
or you can use your FTP client.
All my servers have FTP disabled, as it is another potential security hole.

5. Create the file index.html
From this simple shape is powerful enough to protect a specific folder can not be examined. That the index.html file with the content until, for example, contains the phrase: access to the directory is Forbes. then save it in the plugins folder and other folders. Remember the steps of hacking is to make profiles, to know what plugins to use it, a lot of information that can be used to find the hole in your website.

There are many more that should be considered on WordPress security. Good luck!

About the Author

Founder Web Design Surabaya, professionals in the field of web design and marketing consultant who enjoys sharing information. Have begun to write and pour inspiration about Web Design and marketing world.

Installing Thesis WordPress Framework

Smashing WordPress Themes : Making WordPress Beautiful

$37.98

No Synopsis Available

Wordpress Theme Design: A Complete Guide to Creating Professional WordPress Themes

$51.98

No Synopsis Available

Build Your Own Wicked WordPress Themes

$33.96

No Synopsis Available

WordPress 2. 8 Themes Cookbook : Over 100 simple but incredibly effective recipes for creating powerful, custom WordPress Themes

$38.99

No Synopsis Available

Wordpress

$8.57

No Synopsis Available

The Ten Permissions

$17.55

No Synopsis Available

WordPress 2.7 Cookbook: 100 Simple but Incredibly Useful Recipes to Take Control of Your WordPress Blog Layout, Themes, Widgets, Plugins, Security, and Seo

$38.99

No Synopsis Available

WordPress Top Plugins : Find and install the best plugins for generating and sharing content, building communities and generating Revenue

$38.99

No Synopsis Available