This link has been bookmarked by 33 people . It was first bookmarked on 19 Jan 2008, by Shanta Rohse.
-
soulgrind rSecuring your wordpress blog (part 2)
-
Secure your /wp-admin/ directory. What I’ve done is lock down /wp-admin/ so that only certain IP addresses can access that directory. I use an .htaccess file, which you can place directly at /wp-admin/.htaccess . This is what mine looks like:
AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName “Access Control”
AuthType Basic
order deny,allow
deny from all
# whitelist home IP address
allow from 64.233.169.99
# whitelist work IP address
allow from 69.147.114.210
allow from 199.239.136.200
# IP while in Kentucky; delete when back
allow from 128.163.2.27
-
-
-
Instead of limiting the /wp-admin/ directory to only IPs via your .htaccess file, I just password protected the /wp-admin/ at the directory level. Then you can access it from anywhere in the world on a per user-level.
-
Check out Login Lockdown as well. It bans people by IP address if they enter the wrong user name and password after so many attempts.
- 2 more annotations...
-
-
Therese HansenWordpress.org sikkerhedstips
-
David WallaceThree things from Matt Cuts on what I need to do to protect WP blogs.
-
Munish GandhiHere are three easy but important ways to protect yourself if you run a WordPress blog:
-
leaf duoOptions -Indexes
-
Dennis HowlettFor the geekerati only but good advice. If you have a WordPress implementation and understand a bit of code then this is worth reading
Would you like to comment?
Join Diigo for a free account, or sign in if you are already a member.