Название: Wordpress Security Guide : How to reduce the risk of getting your Wordpress site being hacked?
Автор: Jean Cavallera
Издательство: Leanpub
Год: 2023-08-08
Язык: английский
Формат: pdf (true)
Размер: 10.2 MB

The time and cost of securing your website is not much compared to the incalculable reputation and financial losses in case cyber criminals gain control of your website. Learn web security, common attach vectors and how to harden the security of your Wordpress site and the server hosting it.

Since its inception in 2003, Wordpress has undergone continual hardening so its core software can address and mitigate common security threats, including the Top 10 list identified by The Open Web Application Security Project (OWASP) as common security vulnerabilities. Site developers and administrators should pay particular attention to the correct use of core APIS and underlying server configuration which have been the source of common vulnerabilities, as well as ensuring all users employ strong passwords to access Wordpress.

Backdoors are meant to be difficult to find, because the longer the door remains, the longer the hacker can access the site. Moreover, they are often disguised as regular files. Inefficient cleaners miss these backdoors. To find them, you would need a powerful software that can comb through all the files on a Wordpress site and distinguish a backdoor from a regular file. Backdoors are often located in themes and plugins which are badly coded. Sometimes, hackers create backdoors that are disguised as a regular plugin. One look at the plugin won’t reveal anything suspicious. Websites owner are suggested to keep track of the name of the plugins installed on their Wordpress website. That way, if you find a plugin that you know have not been installed, you can simply uninstall and delete the plugin. Backdoors are also found in outdated themes, sitting unused in the theme directory. Better get rid of these inactive themes.

Discovering web security through the Wordpress CMS
Common attack vectors on performed on websites
Web-security techniques related to Apache webserver and Wordpress.