Make sure to protect your file directories, don’t make them writable by you only!
Red up:
http://codex.wordpress.org/Hardening_WordPress
And download:
http://wordpress.org/extend/plugins/wp-security-scan/
Related Posts:
- Is sanitize_text_field() is enough to save to DB?
- What is the most secure way to store post meta data in WP?
- What’s the most efficient database method to add and query usermeta?
- Extend the wp_users table
- Using two different DB users on one WP install
- Is $wpdb->prepare escaping to much? How to use it properly?
- update_user_meta() does not work
- Select Multiple meta_value from WP DB; Single Query
- Is it possible to store visitors IPs in wp_postmeta table?
- Which is more efficient? Using usermeta, or creating a new MySQL table?
- Who is responsible for data sanitization in WordPress development?
- How do I properly update the WordPress database password?
- A field with dashes in the slug [closed]
- In what part of the WordPress core does the users table and usermeta table get joined?
- Modify Database in Multi-Site wp_usermeta table
- Best way to tell if a user account is active, using the database only
- Using GROUP CONCAT in my-sql query with wp_usermeta table
- Is it safe to delete unnecessary user metadata?
- How to replicate a user plugin made table value, to this user’s custom meta table value?
- WordPress Database Huge wp_usermeta Table
- How to Access wp_usermeta Data Immediately After a New User is Created
- WordPress and user security
- What’s the proper way to sanitize checkbox value sent to the database
- Users table missing from Database [closed]
- Recovering the table wp_usermeta from users
- I cannot find the difference between these wp_capabilities values in wp_usermeta
- Buddypress avatar image in database [closed]
- WordPress security [closed]
- Storing user submitted forms [closed]
- wp_insert_user not creating account correctly when ID is manually set
- Secure way to use name_save_pre?
- Compare User meta_value with Product meta_value
- WordPress Database – wp_usermeta and the correct number of session_tokens rows
- Best Practice? – Saving multiple Values as Serialized Data / Saving each Value per Row / Dedicated Table
- Join Query on WP_USERMETA Table
- Insert NULL value using prepare()
- how add more field to wp user and save it to database
- Move Non-WordPress users table to WordPress database
- generate PDF from member information
- How to get the id of recently registered user from database?
- spambot registering without providing email or password, bypassing registration process
- update multiple user meta field based on another meta field
- get_user_meta and umeta_id
- Hash user emails in database?
- Preventing concurrent update of data
- Calling update_user_meta inside of another function doesn’t work
- What is best for saving lot of extra detail of user?
- wp_usermeta key problem
- Query a meta key using an array of values where the database value is a string
- What is an ORM, how does it work, and how should I use one? [closed]
- What is the difference between an ORM and an ODM?
- What is this JavaScript “require”?
- Rename a table in MySQL
- How should I tackle –secure-file-priv in MySQL?
- What is this JavaScript “require”?
- What is “Advanced” SQL?
- What’s the difference between identifying and non-identifying relationships?
- Can’t connect to MySQL server on ‘127.0.0.1’ (10061) (2003)
- Can’t connect to MySQL server on ‘127.0.0.1’ (10061) (2003)
- Can’t connect to MySQL server on ‘127.0.0.1’ (10061) (2003)
- What are the differences between B trees and B+ trees?
- MySQL SELECT increment counter
- How to resolve ORA-011033: ORACLE initialization or shutdown in progress
- Example of a strong and weak entity types
- Oracle SQL query for Date format
- phpMyAdmin – Error > Incorrect format parameter?
- Strange Characters in database text: Ã, Ã, ¢, â‚ €,
- Difference between partition key, composite key and clustering key in Cassandra?
- How SID is different from Service name in Oracle tnsnames.ora
- What is a relation in database terminology?
- Failed to connect to mysql at 127.0.0.1:3306 with user root access denied for user ‘root’@’localhost'(using password:YES)
- Database vs File system storage
- Can I have multiple primary keys in a single table?
- Exclude Statement in SQL
- How do you query for “is not null” in Mongo?
- What is a file based database?
- Is it fine to have foreign key as primary key?
- Storing Images in DB – Yea or Nay?
- Verifying that I have fully removed a WordPress hack?
- Using wpdb to connect to a separate database
- how to Optimize WordPress database for 10 million post? [duplicate]
- MySQL Database User: Which Privileges are needed?
- Why is my database import losing text widget data?
- Database synchronization between dev/staging and production
- Keeping WP database synced across multiple developers using git
- WPDB Insert or if exists Update
- Multiple developers / editors working on a site in progress
- How can I make updates to a site, on a development copy, but then move updates back without overriding live site’s evolving database?
- If a hacker changed the blog_charset to UTF-7 does that make WordPress vulnerable to further attacks?
- get_results using wpdb
- Will it break my site if I delete all transient records in wp_options table?
- Checking if Database Table exists
- Why WordPress choose data serialization over json_encode?
- What’s the simplest way to backup my WordPress database?
- WordPress (MyISAM) database is slow, should I switch to InnoDB?
- $wpdb won’t insert NULL into table column
- Relaunch 4.2 utf8mb4 database upgrade
- Fastest way (least amount of steps) to locally import a remote database using WP-CLI
- Safest way to bulk delete post revisions
- Please explain how WordPress works with MySQL character set and collation at a low level