Security plugins - GoFuckYourself.com

grzepa · 07-24-2012, 01:36 PM

Are you using any wordpress security plugins? If so which ones do find worth installing. Which ones do you use and can recommend?

kazymjir · 07-24-2012, 02:48 PM

Try "Secure WordPress"

mce · 07-24-2012, 03:43 PM

Log in Lockdown is a good first step. Also, changing your default admin name from admin to something else is a good second step.

grzepa · 07-24-2012, 04:31 PM

ok thanks gonna check them out. One more question: when you're changing the database prefix from default wp_ to something else, when you finished renaming in phpmyadmin and not yet changed it in wp-config.php , when someone visits your site he's seeing a new installation of wordpress with the fields to fill username password etc. so if you have a high traffic site, anyone can change this or is it only you seeing it?

kazymjir · 07-24-2012, 04:44 PM

Anyone can change it. But I have an idea. Instead of renaming tables, just copy them and give new prefixes. Change wp-config.php to the new prefix and delete old tables. This will prevent displaying configuration page and your page will be all the time up.

garce · 07-24-2012, 09:36 PM

Quote:

Originally Posted by kazymjir

Try "Secure WordPress"

ha! ah haha haha! Security + Wordpress! rofl, ahahah, ah ha! Hardee har har.

kazymjir · 07-25-2012, 12:59 AM

Quote:

Originally Posted by garce

ha! ah haha haha! Security + Wordpress! rofl, ahahah, ah ha! Hardee har har.

Yeah! At least one person here who is against Wordpress too

This plugin at least removes version number from every place, so it is more difficult to recognize version of WP. Script kiddies will omit such a Wordpress and chose the one with visible version to use latest sploit for it.

grzepa · 07-25-2012, 04:28 PM

Thanks for the tip kazymjir, none of the tutorials I found on the web mentioned this way of changing the prefix. They all recommend doing a temporary "down for maintance" page and redirect all traffic there. Your method is painless.

07-24-2012, 01:36 PM	#1
grzepa Confirmed User Join Date: Jul 2004 Posts: 1,195	Security plugins Are you using any wordpress security plugins? If so which ones do find worth installing. Which ones do you use and can recommend?

07-24-2012, 02:48 PM	#2
kazymjir Confirmed User Industry Role: Join Date: Oct 2011 Location: Munich Posts: 411	Try "Secure WordPress" __________________ http://kazymjir.com/

07-24-2012, 03:43 PM	#3
mce Confirmed User Industry Role: Join Date: Jun 2012 Location: All Over Posts: 3,917	Log in Lockdown is a good first step. Also, changing your default admin name from admin to something else is a good second step. __________________ Pay Virtual Assistants Based on RESULTS instead of TIME STOP getting FUCKED IN THE ASS by your VA

07-24-2012, 04:44 PM	#5
kazymjir Confirmed User Industry Role: Join Date: Oct 2011 Location: Munich Posts: 411	Anyone can change it. But I have an idea. Instead of renaming tables, just copy them and give new prefixes. Change wp-config.php to the new prefix and delete old tables. This will prevent displaying configuration page and your page will be all the time up. __________________ http://kazymjir.com/

07-24-2012, 04:31 PM	#4
grzepa Confirmed User Join Date: Jul 2004 Posts: 1,195	ok thanks gonna check them out. One more question: when you're changing the database prefix from default wp_ to something else, when you finished renaming in phpmyadmin and not yet changed it in wp-config.php , when someone visits your site he's seeing a new installation of wordpress with the fields to fill username password etc. so if you have a high traffic site, anyone can change this or is it only you seeing it?

07-25-2012, 04:28 PM	#8
grzepa Confirmed User Join Date: Jul 2004 Posts: 1,195	Thanks for the tip kazymjir, none of the tutorials I found on the web mentioned this way of changing the prefix. They all recommend doing a temporary "down for maintance" page and redirect all traffic there. Your method is painless.