WordPress website protection

WordPress website security, protection and prevention includes preventing brute force login attempts, comment spam and form spam, keeping regular backups and having a secure maintenance mode. Additional security includes scanning and fixing code vulnerabilities and a firewall to prevent malicious code actions.

Read more about WordPress website security, protection and prevention.

Jul 102016
 
WordPress website security, protection, prevention

WordPress Website Security Recommendations Keep WordPress, themes and plugins up to date Software updates often improve security and compatibility issues, as well as fix bugs and adding features. It’s so easy to update from within WordPress. Remember to backup Remember to backup first (see below) and consider testing compatibility issues by reading forums. For convenience “Wordfence Security” has a handy notification option to let you know when there is an update available. Checking WordPress, plugins and themes for file changes Use WordPress Health Check for an overview of WordPress and server software updates for security issues. Use Sucuri Security to harden (make more secure) WordPress folders, check for vulnerabilities and re-download all plugins which originate from the WordPress plugin library. Wordfence Security also includes compares core WordPress files, theme files and plugin files, allowing you to restore changed files back to the same as the original files in WordPress file

read more
Mar 202016
 

Sucuri Security has many features, which I’m still exploring. This plugin can scan for malware. The free version will only scan the front end of your website, if you want it to scan the back end of your site, you will need to pay for an account. I’ve recently used it to harden (make more secure) WordPress folders, check for vulnerabilities and re-download all plugins which originate from the WordPress plugin library.   Read up on other WordPress security related plugins and strategies.

read more
Mar 162016
 

WordPress Plugin Name: Plugin Author: WordPress profile: Contributors: Version: Last updated: () Compatibility (latest version): (of votes) Tested up to (WP version): WP Download count: Rating: (out of 5) Description | Screenshots | Other notes | Latest Change | Tags | + Jason’s comments Description Checks plugins for deprecated WordPress functions, known security vulnerabilities and some unsafe PHP functions. See the WordPress plugin library description of Plugin Inspector Screenshots: Other notes: Latest Change log entry: Tags: + Jason’s Comments Always good to make sure your WordPress website is healthy – a quick check up today could prevent headaches tomorrow. Read up on other WordPress security related plugins and strategies.

read more
Aug 132014
 
SSL domain security certificate

An SSL certificate for your domain will guarantee the authenticity of your site for your website visitors and will secure the communication between the server and the customer browser. Secure your site with a personal SSL certificate issued to your domain name. If you accept sensitive data from your site visitors, using SSL (HTTPS) is the right way to protect your customers/visitors data. SSL Domain Security Certificate Applicable on Economy and Business hosting plans Let’s Encrypt installation $25 Domain Validation subdomain secured Validity 90 days with auto renew Encryption up to 256-bit Certificate installation Browser security lock Note: The installation price includes completing the process in WordPress to resolve insecure mixed media conflicts.  Limited offer: certificate installation is an additional service to the web hosting service which I provide.

read more
Jul 142014
 

For scanning of themes, I recommend for extra security, Theme Authenticity Checker plugin, which can find suspicious or malicious code and embedded outgoings links. TAC plugin found code which Wordfence security didn’t. Use WordPress Health Check for an overview of update and security issues. Read up on other WordPress security related plugins and strategies.

read more
Aug 202012
 

This plugin “Spam Free WordPress” adds a required password click before permitting a user to make comment. Use this as a more user friendly alternative to answering a quiz or decoding a captcha image. For login security I recommended combining “SI CAPTCHA Anti-Spam” to add a captcha image for added security on the login page together with “Wordfence Security” to limit login attempts or an alternative dedicated plugin called “limit login attempts“. For custom form security I recommend “Contact Form 7” with a Quiz field and a Captcha image using “Really Simple CAPTCHA“.

read more
Jul 242012
 

Do backups and more for your WordPress Blog.

– Database Backup
– WordPress XML Export
– Optimize Database
– Check\Repair Database
– File Backup
– Backups in zip, tar, tar.gz, tar.bz2 format
– Store backup to Folder
– Store backup to FTP Server
– Store backup to Amazon S3
– Store backup to Google Storage
– Store backup to Microsoft Azure (Blob)
– Store backup to RackSpaceCloud
– Store backup to Dropbox
– Store backup to SugarSync
– Send Log/Backup by Email
– Multisite Support only as Network Admin

read more
May 282012
 
Wordfence Security

WordPress Plugin Name: Wordfence Security – Firewall & Malware Scan Plugin URL:https://wordpress.org/plugins/wordfence/ Plugin Author: Wordfence WordPress profile: Wordfence Plugin version: 7.0.5 Last updated: February 14, 2018 (4 days ago) Tested up to (WP version): WP 4.9.4 Downloaded: 62,324,478 Rating: 5 (out of 5) Description | FAQ | Screenshots | Other notes | Latest Change | Tags | + Jason’s comments Description THE MOST POPULAR WORDPRESS FIREWALL & SECURITY SCANNER Wordfence includes an endpoint firewall and malware scanner that were built from the ground up to protect WordPress. Our Threat Defense Feed arms Wordfence with the newest firewall rules, malware signatures and malicious IP addresses it needs to keep your website safe. Rounded out by a suite of additional features, Wordfence is the most comprehensive WordPress security solution available. WORDPRESS FIREWALL Web Application Firewall identifies and blocks malicious traffic. Built and maintained by a large team focused 100% on WordPress security.

read more