wp security presentation

47
30 Point Guide To Better WordPress Security wpSecureProtect.com

Upload: nik-cree

Post on 06-Jul-2015

89 views

Category:

Technology


3 download

TRANSCRIPT

Page 1: Wp security presentation

30 Point

Guide To Better

WordPress

Security

wpSecureProtect.com

Page 2: Wp security presentation

wpSecureProtect.com

Page 3: Wp security presentation

wpSecureProtect.com

Page 4: Wp security presentation

wpSecureProtect.com

Page 5: Wp security presentation

wpSecureProtect.com

Page 6: Wp security presentation

Email Alert

wpSecureProtect.com

Page 7: Wp security presentation

What We Do

De Hack

Secure WP

WP Maintenance

& Security

wpSecureProtect.com

Page 8: Wp security presentation

7 Steps To Better WP Security

1.Dashboard

2.FTP

3.Plugins

4.Themes

5.Maintenance

6.Computer

7.Action

wpSecureProtect.com

Page 9: Wp security presentation

DASHBOARDwpSecureProtect.com

// One

Page 10: Wp security presentation

rhu18g64kd87_

wpSecureProtect.com

Page 11: Wp security presentation

adminNot Author

wpSecureProtect.com

Page 12: Wp security presentation

passwordFrk%7h#ha)=4

wpSecureProtect.com

Page 13: Wp security presentation

wpSecureProtect.com

Page 14: Wp security presentation

MySQLDisable

Remote

Access

wpSecureProtect.com

Page 15: Wp security presentation

// Two

FTPwpSecureProtect.com

Page 16: Wp security presentation

Files

Folders

644

755wpSecureProtect.com

Page 17: Wp security presentation

<?php

// Silence is golden.

?>

index.php

wpSecureProtect.com

Page 18: Wp security presentation

Config.php

wpSecureProtect.com

Page 19: Wp security presentation

# PROTECT install.php

<Files install.php>

Order Allow,Deny

Deny from all

Satisfy all

</Files>

Install.php

wpSecureProtect.com

Page 20: Wp security presentation

define('AUTH_KEY', 'Sd-:`R;kj(Ys%mPYq-W#r76UO&G;/z#K4~U8M@cpvGY}anM+x[v(?EDRbet<!%Mp');

define('SECURE_AUTH_KEY', 'ohU%+27`Tx@i`!Mt(o+WpQ/GxAm*IrHu(+4cO$|spk*tE#)W]|y~_CZ/>^d $2!K');

define('LOGGED_IN_KEY', ';b?t?M+jD47~f|`u+-G2.L*k6{4]=q*/F/5Cxe+FEr<A~5sbp*`r{M&.6* xFj|S');

define('NONCE_KEY', 'Wx&L-hLsER+ut2-c%+^t|P+F`)Srf,FP lT.5>wc-AYq8S>X{9McG~:-CdiS.Z1S');

define('AUTH_SALT', 'E?qL2yRRS3&a9{d?C2$ K67}OLIX:;Pe&n16`C%lJ,5)EI0n+~q!Dy6~koRF 16Z');

define('SECURE_AUTH_SALT', 'B)r5%!6{M4D3t/4UC{2M]uB-WGqhc~_:_M|aoQ2^^yF`[9rvwpxV-p&Y-mZz<i3o');

define('LOGGED_IN_SALT', 'MN`Yu[q^WO~-n4*?2QR+/TL#CUl,A,VN|G]Xb9KZWE;JNcKn|xD]:ot=g{@B>Spy');

define('NONCE_SALT', 'f2q&m}q[C+Z{^uRkou+g,RdI$1#MN$b0{:H+-Nh+^WQv0P0LG:OL^7~wH[?-e!q>');

SALT

wpSecureProtect.com

Page 21: Wp security presentation

// Three

PLUGINSwpSecureProtect.com

Page 22: Wp security presentation

Akismet

wpSecureProtect.com

Page 23: Wp security presentation

WP Hashcash

Extended

wpSecureProtect.com

Page 24: Wp security presentation

Wordfence

Security

wpSecureProtect.com

Page 25: Wp security presentation

WordPress

Backup To

Dropbox

wpSecureProtect.com

Page 26: Wp security presentation

Bulletproof

Security

wpSecureProtect.com

Page 27: Wp security presentation

// Four

THEMESwpSecureProtect.com

Page 28: Wp security presentation

Theme

Repository

wpSecureProtect.com

Page 29: Wp security presentation

Genesis

Woo

iThemes

Thematic

TwentyThirteen

Theme

Frameworks

wpSecureProtect.com

Page 30: Wp security presentation

Unknown

Free

wpSecureProtect.com

Page 31: Wp security presentation

FrameworkChild

wpSecureProtect.com

Page 32: Wp security presentation

Forum

Tickets

Community

Documentation

Support

wpSecureProtect.com

Page 33: Wp security presentation

// Five

MAINTENANCEwpSecureProtect.com

Page 34: Wp security presentation

WP Core

Themes

PluginsUpdate

wpSecureProtect.com

Page 35: Wp security presentation

Themes

Plugins

Remove

wpSecureProtect.com

Page 36: Wp security presentation

Repair

Optimize

wpSecureProtect.com

Page 37: Wp security presentation

Database

wp-content

Backup

wpSecureProtect.com

Page 38: Wp security presentation

Scan

&

Monitor

wpSecureProtect.com

Page 39: Wp security presentation

// Six

COMPUTERwpSecureProtect.com

Page 40: Wp security presentation

Login

LogoutSession

wpSecureProtect.com

Page 41: Wp security presentation

Virus

Malware

Firewall

Protect

wpSecureProtect.com

Page 42: Wp security presentation

Lastpass

Roboform

1Password

Username

Password

wpSecureProtect.com

Page 43: Wp security presentation

FTP

cPanel

Wordpress

Contractors / Outsourcers

Remove

Access

wpSecureProtect.com

Page 44: Wp security presentation

Public WiFiOne Time

UID PWD

Log Off!!

wpSecureProtect.com

Page 45: Wp security presentation

// Seven

ACTIONwpSecureProtect.com

Page 46: Wp security presentation

Not ‘If’

But ‘When’

Implement

wpSecureProtect.com

Page 47: Wp security presentation

DOWNLOADwpSecureProtect.com

wpSecureProtect.com