Reno Tahoe WordCamp 2010

WordPress Security Blitz!

Why?

Content, freshness, SEO, networking, design, stability, functionality, performance,

scaling...

Why?

Content, freshness, SEO, networking, design, stability, functionality, performance,

scaling...

...and now security, too?

Why?

...can't we all just get along?

Why?

To leverage your efforts building a thriving community!

Strategy

A little bit of effort, some discipline, and LOTS of common

sense

Basic Security

Pick a hoster wisely

Basic Security

Pick a hoster wisely

Split domain and hosting

Basic Security

Pick a hoster wisely

Split domain and hosting

Back up (and back up again!)

Basic Security

Pick a hoster wisely

Split domain and hosting

Back up (and back up again!)

Keep WP, plugins up-to-date

Basic Security

Pick a hoster wisely

Split domain and hosting

Back up (and back up again!)

Keep WP, plugins up-to-date

Move wp-config.php up/out

Basic Security

Pick a hoster wisely

Split domain and hosting

Back up (and back up again!)

Keep WP, plugins up-to-date

Move wp-config.php up/out

File permissions (755/644)

Basic Security

.htaccess to restrict wp-admin

Basic Security

.htaccess to restrict wp-admin

Regularly check server logs

Basic Security

.htaccess to restrict wp-admin

Regularly check server logs

Post-Logger (vi-logger.php)

Basic Security

.htaccess to restrict wp-admin

Regularly check server logs

Post-Logger (vi-logger.php)

DB table prefix: not “wp_”

Basic Security

.htaccess to restrict wp-admin

Regularly check server logs

Post-Logger (vi-logger.php)

DB table prefix: not “wp_”

No user “admin”

Basic Security

.htaccess to restrict wp-admin

Regularly check server logs

Post-Logger (vi-logger.php)

DB table prefix: not “wp_”

No user “admin”

Use strong passwords!

Plugins to consider:

Akismet

Plugins to consider:

Akismet

Bad Behavior

Plugins to consider:

Akismet

Bad Behavior

http:BL (Project Honey Pot)

Plugins to consider:

Akismet

Bad Behavior

http:BL (Project Honey Pot)

WP Security Scan

Plugins to consider:

Akismet

Bad Behavior

http:BL (Project Honey Pot)

WP Security Scan

AntiVirus

Plugins to consider:

Akismet

Bad Behavior

http:BL (Project Honey Pot)

WP Security Scan

AntiVirus

...but don't go wild on plugins!

Also...

Check on your back-ups! (Do they really work?)

Also...

Check on your back-ups! (Do they really work?)

Check on your DB (e.g. drop old tables, optimize... Clean Options plugin)

Also...

Check on your back-ups! (Do they really work?)

Check on your DB (e.g. drop old tables, optimize...)

Security audits (e.g. Acunetix)

Also...

Check on your back-ups! (Do they really work?)

Check on your DB (e.g. drop old tables, optimize...)

Security audits (e.g. Acunetix)

Your own computer

Also...

Check on your back-ups! (Do they really work?)

Check on your DB (e.g. drop old tables, optimize...)

Security audits (e.g. Acunetix)

Your own computer

Use a staging server to test

Also...

Check on your back-ups! (Do they really work?)

Check on your DB (e.g. drop old tables, optimize...)

Security audits (e.g. Acunetix)

Your own computer

Use a staging server to test

External (e.g. CloudFlare)

And finally...

Support developers and designers!

Questions?

Contact information

Álvaro Degives-Más:Alvaro at

RenoLanguages.com