Se ha denunciado esta presentación.
Utilizamos tu perfil de LinkedIn y tus datos de actividad para personalizar los anuncios y mostrarte publicidad más relevante. Puedes cambiar tus preferencias de publicidad en cualquier momento.
BY BRAD WILLIAMS
Brad WilliamsCo-Founder WebDevStudios.comCo-Author Professional WordPress   & Professional WordPress      Plugin Developme...
FOR WORDPRESSTop Ten WordPress   Security Tips
FOR WORDPRESS1 Update Update Update    Keep WordPress Updated!      Minor WordPress versions ( ie 3.3.x ) do NOT add new f...
FOR WORDPRESS1 Update Update Update  Update Those Plugins! The plugin Changelog tab makes it very easy to view what has ch...
FOR WORDPRESS1. Update Update Update         NO EXCUSES! UPDATE!
FOR WORDPRESS2. Use Secret Keys          Some secrets should remain secrets
FOR WORDPRESS2. Use Secret Keys  A secret key is a hashing salt which makes your site harder to hack by adding random  ele...
FOR WORDPRESSDo you login with username admin?
FOR WORDPRESS
FOR WORDPRESS3. Delete the Admin user account   Change the admin username in MySQL:   UPDATE wp_users SET user_login=hulks...
FOR WORDPRESS3. Delete the Admin user account  WordPress lets you set the username during the   installation process!DONT ...
FOR WORDPRESS3. Delete the Admin user account  Knowing your username is half    the battle.  Dont make it   easy on the   ...
FOR WORDPRESS4. File and Folder Permissions What folder permissions should you use? Good Rule of Thumb: • Files should be ...
FOR WORDPRESS4. File and Folder Permissions Or via SSH with the following commands  find [your path here] -type d -exec ch...
FOR WORDPRESS5. Move wp-config.php           WordPress features the ability to move the wp-config.php                file ...
FOR WORDPRESS6. Lock Down WP Login and WP Admin
FOR WORDPRESS6. Lock Down WP Login and WP AdminAdd the code below to wp-config.php to force SSL (https) on logindefine(FOR...
FOR WORDPRESS6. Lock Down WP Login and WP Admin1. Create an .htaccess file in your wp-admin directory2. Add the following ...
FOR WORDPRESS7. Use Trusted Sources for Themes & Plugins       WPMU.org reviewed the top       10 results for “free       ...
FOR WORDPRESS 7. Use Trusted Sources for Themes & PluginsThe only safe site reviewed was WordPress.org    Most themes incl...
FOR WORDPRESS8. Be Secure Locally Think of your local environment as if it was a medieval castle and you’re the queen or k...
FOR WORDPRESS8. Be Secure Locally It’s your information, but who’s watching & listening? You may be a network geek at home...
FOR WORDPRESS9. Use a Trusted HostYou get whatyou pay for…
FOR WORDPRESS9. Use a Trusted Host At the end of the day, hosting providers market the world. You in turn, should have opp...
FOR WORDPRESS9. Use a Trusted Host     Only use a trusted host that clearly states their security policies.      Bonus poi...
FOR WORDPRESS10. Use Common Sense• Use a strong password   • BAD: bradisawesome   • GOOD: SCrEE79joLly$   • A=@, E=3, S=$,...
FOR WORDPRESSPlugins & Services
FOR WORDPRESSLogin Lockdown       http://wordpress.org/extend/plugins/login-lockdown/
FOR WORDPRESSBulletProof Security • .htaccess lockdown rules for   various directories (root, wp-   admin, etc) • Security...
FOR WORDPRESS   Secure WordPress• Hides login error  messages• Adds index.php to  /themes and /plugins to  prevent directo...
FOR WORDPRESS   Exploit Scanner• Scans your files and  database for potentially  malicious code• Does not remove code,  on...
FOR WORDPRESS                                         http://Sucuri.net•   Free Website Malware Scanner: http://sitecheck....
FOR WORDPRESS• Security Related Articles    •   http://codex.wordpress.org/Hardening_WordPress    •   http://blog.sucuri.n...
Brad Williamsbrad@webdevstudios.comBlog: strangework.comTwitter: @williamsbaIRC: WDS-BradProfessional WordPress Second Edi...
Próxima SlideShare
Cargando en…5
×

FOR WORDPRESS http://Sucuri.net• Free Website Top Ten WordPress Security Tips for 2012

19.733 visualizaciones

Publicado el

FOR WORDPRESS http://Sucuri.net• Free Website Malware Scanner: http://sitecheck.sucuri.net/scanner/• Website monitoring• Hack cleanup services• Sucuri Security Plugin • Free to clients • Web Application Firewall • Integrity Monitoring • Auditing • Hardening http://Sucuri.net

Publicado en: Tecnología, Empresariales

×