Hi @Syom:
Often hackers get access because you use the name “admin” for your administrator and you have an easy to hack password. Or because you don’t update your software and they leverage some of the security holes that have been found and patched.
Here’s a set of slides that go indepth to explaining how to secure your WordPress site that were just presented at WordCamp Phoenix this past weekend:
Here are some blog posts by Otto on the subject:
Related Posts:
- Troll the hackers by redirecting them
- malware undetectable by multiple scans
- esc_attr() right way and use
- Enforcing password complexity
- Does My Child-Theme Functions.php Need if{die} Security In It? [duplicate]
- Is this a hacking script in function.php?
- Renaming wp-content folder dynamically
- How do I create a WP user outside of WordPress and auto login?
- Security – Ajax and Nonce use [closed]
- Can I write ‘RewriteCond’ using ‘functions.php’?
- Is it unsafe to put php in the /wp-content/uploads directory?
- Sanitize get_query_var() url parameters
- When must I use and verify nonce?
- Hiding WordPress Plugin Source Code
- Is this code malidcous
- Admin username and password
- Evaluations of two wordpress security plans against php code injection attack
- WordPress custom login form using Ajax
- Detect session/cookie variable in wordpress to prevent access to documents
- Is there any risk setting WordPress file permissions and FS method to ‘direct’ on localhost?
- SQL Injection blocked by firewall
- How to prevent XSS alter custom global javascript object & methods in WordPress
- Generating an nonce for Content Security Policy and all scripts – How to make it match/persist for each page load?
- Hacked WordPress website /Homepage redirect [closed]
- Cannot execute php files in wp-content
- How do I get around “Sorry, this file type is not permitted for security reasons”?
- Security: blocking direct access of php files
- Correct and safe way to include php content in my page
- Password minimum length in personal subscription [closed]
- How to add API security keys into JS of wordpress securely
- Is it best to avoid using $wpdb for security issues?
- Hardening uploads folder in IIS breaks images
- Security updates to 3.3.2
- how to prevent wordpress admin from logging in via woocommerce my-account page
- Decoded malware code [closed]
- Updating From Mobile App – Exposing Site to Hacking
- security concerns if using html data-* attribute for l10n?
- How to correctly escape an echo
- Reject all malicious URL requests functions.php
- portfolio site – about this site section – is it safe to post some code
- echo cutom css code to WordPress page template file ? is this safe?
- How to secure my php forms
- $.ajax results in 403 forbidden
- Site infected by link
- Access WP files on “server 1”, from “server 2” – using wp-load on an external website
- Deny php execution in /wp-includes – using .htaccess in /wp-includes VS root folder
- Retrieve $_POST data to send to javascript without using localize script
- Previewing/Updating some Pages causes “The requested URL was rejected” Error
- What is the best practice for restricting a section to logged in users?
- How to quickly/easily make an analysis (reverse engineering) of WordPress?
- what to do after instlling cyberpanel on VPS
- Are there any legitimate reasons for a web browser to directly access wp-includes/*.php?
- What is the best way to get the first few post from WordPress in different divs using a loop?
- Banner editable from backend
- Display WP posts in 3 responsive columns
- get_post_meta is always empty when I use wp_mail
- How to access WOrdpress functions from within a class
- Shortcoding with Divs
- Get string from array and start loop [closed]
- why is this content-template not showing any of my blog-entries?
- how to register a second page-template
- how to manipulate HTML parameters using PHP conditions
- Missing items on page
- WordPress rewrite question
- Run php function after html click after page refresh
- Adding javascript files to WordPress and jQuery version
- How to get the count for each taxonomy term
- Display default WordPress login/registration form into a modal window
- Get all the contents of taxonomy and sort by term
- Metabox Input Not saving
- Gallery requires a featured image but does not show it in posts/pages
- Using Nonce for my Form
- Run A Pre-Built Core PHP Application Under A WordPress Page or Post Route
- Transient Loop Not working as expected
- WordPress TinyMCE Add Button To The Full Screen Mode Editor
- My custom widget won’t stay in the widget area after I refresh the widget page
- Add Custom Post Type on the Fly or create an array
- key( $GLOBALS[‘wp_registered_sidebars’] ) is always showing the same value
- show/hide attachments
- To call hook on a php external file
- How can i list all user registered on my website and have pagination [duplicate]
- Create new folder and upload files to custom folder via wp_handle_upload
- Restricting Post Content Visibility with Custom Code – where to put it?
- two sites, same code, different presentation
- Highlight main menu when on specific posts or pages
- WPMU schedule doesn’t execute actions
- WordPress display name string manipulation
- Outputting a custom field in PHP
- need help to arabic text in wordpress
- Where to place PHP for shortcodes
- Magento and WordPress URL integration [closed]
- Sorting Meta Fields?
- Hide a div from a particular page and single pages in WordPress
- How to export database correctly for local to online
- Search box background on a different page template
- !in_array doesnt recognize category
- Cron job to call php to email last 24 hours posts
- I am trying to call external database recieving error
- WP Ecommerce: Display the “Order Notes” as column in the Sales Log [closed]
- How can I order metaboxes in my posts in WordPress?