Tips on securing your Wordpress blog installation

Posted on January 22nd, 2008 at 14:16

Via the highly-useful Weblog Tools Collection, here's an article by a chap called Matt Cutts entitled Three tips to protect your WordPress installation, which happens to provide specific instructions on dealing with three of the security issues that Alan raised at the MWPUG session last week.

Matt suggests:

  1. Protecting your admin suite by restricting access to I.P. addresses specified in the .htaccess file.
  2. Including an empty index.html file in your /plugins/ directory to prevent anyone from browsing the otherwise wide-open directory (although attempting to access the plugins directory here seems to generate a 404 error instead...)
  3. Removing the WP version information metadata from your header.php file to avoid giving easy clues to potential hackers.

Needless to say, I'll be acting on all three of those across my client sites (as applicable, it could be difficult perhaps to get accurate I.P. address information from all my clients) in my next WP-admin session.

January 22, 2008 | Filed Under Website Development 

comments

Leave a Reply