Wordpress Security Guide - How To Increase Security Of Wordpress Website

2. Copyright ©All rights reserved worldwide. YOUR RIGHTS: This book is restricted to your personal use only. It does not come with any other rights. LEGAL DISCLAIMER: This book is protected by international copyright law and may not be copied, reproduced, given away, or used to create derivative works without the publisher’s expressed permission. The publisher retains full copyrights to this book. The author has made every reasonable effort to be as accurate and complete as possible in the creation of this book and to ensure that the information provided is free from errors; however, the author/publisher/ reseller assumes no responsibility for errors, omissions, or contrary interpretation of the subject matter herein and does not warrant or represent at any time that the contents within are accurate due to the rapidly changing nature of the Internet. Any perceived slights of specific persons, peoples, or organizations are unintentional. The purpose of this book is to educate and there are no guarantees of income, sales or results implied. The publisher/author/reseller can therefore not be held accountable for any poor results you may attain when implementing the techniques or when following any guidelines set out for you in this book. Any product, website, and company names mentioned in this report are the trademarks or copyright properties author/publisher/reseller are not associated or affiliated with them in any way. Nor does the referred product, website, and company names sponsor, endorse, or approve this product. of their respective owners. The COMPENSATION DISCLOSURE: Unless otherwise expressly stated, you should assume that the links contained in this book may be affiliate links and either the author/publisher/reseller will earn commission if you click on them and buy the product/service mentioned in this book. However, the author/publisher/reseller disclaim any liability that may result from your involvement with any such websites/products. You should perform due diligence before buying mentioned products or services. This constitutes the entire license agreement. Any disputes or terms not discussed in this agreement are at the sole discretion of the publisher. Wordpress Security Guard

3. You Can See My own Products: PLR MONSTER Get LIFETIME access to 2000 Products Ready to Sell - For ONLY $7 - keep 100% of the profit App Builder Start Your Own Apps Empire! App Builder $9/year, UNLIMITED Apps, Get Free $1100 App Marketing Easytube Youtube Page 1 in 1 minute Easy System - See How All My Videos Rank Page 1 in Youtube, Yours Can Be Call To Action Videos Wordpress Security Guard

4. Double Your Video Conversion! Get 52 Call To action Videos With REAL Actors + Video Mixer Software Video Bomber Bomb YouTube With UNLIMITED Unique videos in Just Few Clicks, Fast and Easy Software! Instaquote Get Unlimited Facebook,Instagram,YouTube Unique content! Create STUNNING 100 Quotes in 7 seconds! YouTube Rank Checker YouTube Rank Tracker - Track Fast & Easy Unlimited Keywords & Videos Ranking - $7 One Time Payment! Wordpress Security Guard

5. Introduction You may have heard about the recent brute force attacks on Wordpress blogs and Joomla sites. There?s even a commercially available web-based tool that is currently being used to launch brute force attacks, and it?s quite effective. There can be many disastrous repercussions from having your Wordpress blog hacked. Some of these will be discussed in this report. They could be simple and easily fixable, like simply losing access to your site for a few hours. Or they could be as disastrous as losing money, work or reputation! Fortunately, there are a few things you can do to secure your Wordpress site against such attacks, and keep your site, your content, your products, your income, your data and your customer?s safe! First, you?re going to learn about some of the biggest reasons why it?s absolutely vital that you secure your Wordpress installations immediately. Then you?ll learn a few things you can do right away to start protecting your site from hackers and other malicious attacks. Finally, you?ll find out how to get more help securing Wordpress when you?re ready. So let?s get started. Wordpress Security Guard

6. Why Protect Wordpress? There are a lot of things that can go wrong with a Wordpress blog, and some of those things could be absolutely disastrous to your business. Temporary Issues If you?re lucky (and by lucky, I?m referring to the best-case-scenario if you are hacked), you will only experience minor, temporary issues due to the hacking. These issues can still lead to big problems if you don?t notice them in time, but as far as hacking goes, this is about as benign as it gets. Temporary issues are simple things such as having your password changed and being locked out of your blog for a few hours until you can get help getting back into it, or having your blog temporarily redirected to another site until you get in and fix it. Losing Content Much worse than having temporary issues, you could have a hacker log into your account and delete all of your articles. If you don?t have a backup, that could mean countless hours of hard work would be gone! Even if you back up regularly, you could still lose content added in between backups, along with comments, responses, new user information, and more. You could even lose a backup because your web server is too full to perform the backup, and you might not realize this until it?s too late! Wordpress Security Guard

7. Losing Product If you store virtual products on your server like videos, eBooks, graphics, or other content you are selling, those products could be stolen. Not only that, but hackers could then distribute that content widely, costing you potentially thousands of dollars in lost revenue! Don?t think it matters when your content is distributed? Well, think about this. Many people have admitted that when they find a digital product they want badly, they will first check pirate sites to see if that product is available for free. If, and only if, it is not, then they will buy the product. If you?re selling physical products, the damage could be even worse. A hacker could log into your site and create an order, making it look as though the order has been paid for, and you could unwittingly ship the items before you realize the money isn?t in your account. Losing Money If a hacker takes your site down for a significant period of time, you could lose a significant amount of money in lost revenue. If your site makes, for example, $2,400 per day, being down for 12 hours would potentially cost you $1,200. Being down for 10 days could cost you $24,000! Of course, the temporary monetary hit could lead to a larger one. Imagine if a few of your regular customers came by to order that day and saw the site was down. They might assume you?ve gone out of business and never return. That could mean a very significant loss over what would have been the lives of those customers. Wordpress Security Guard

8. In the event people have already bought and paid for merchandise, they may ask for refunds or even seek chargebacks through their credit card companies. This can negatively affect your standing with your merchant account! Losing Personal Data If you store any sensitive personal information on your server, that information could be stolen and used by hackers. Emails, passwords, financial information, and other sensitive information could all be targeted. Additionally, if your Wordpress password happens to be the same as your email passwords, banking passwords, or other critical passwords, you could be facing financial loss, identity theft, or other catastrophic events. Losing Reputation Your reputation is everything in business. Once it?s damaged, it can take years to repair. In fact, it may never recover to its former status. You may be wondering how your reputation could be damaged so badly by something so seemingly benign. Well, there are many ways, such as: 1.If your site is down, people may think you?ve disappeared, or your company is fly-by-night. This is especially true if they?ve placed and paid for an order that has not yet been delivered. 2.If your site is defaced, it could seem as though you did it. Hackers could lace your site with pornographic content or malicious software that could harm visitors? computers or steal their data. It may be hard to convince people you had nothing to do with it, especially if your reputation isn?t yet well established in your industry. Wordpress Security Guard

9. 3.User data could be stolen. If you have people register to post on your site, or if you store their financial information on your site after purchases, hackers could steal and use that information. This could be extremely detrimental to your reputation. These are just a few of the ways you could be negatively impacted in the event of a hacking attempt. There are many more! Wordpress Security Guard

10. Why Hackers Hack You may be wondering why people even bother to go through the trouble of hacking Wordpress blogs, especially a smaller blog that doesn?t have a lot of traffic. Here are a few reasons why hackers do what they do: 1.Many hackers do it out of curiosity, boredom, or bragging rights. They aren?t malicious. They just want to practice their skills or brag to their friends they got in. The worst this type of hacker is likely to do is deface your site with a calling card to prove to their friends they did it. 2.Some do it to be mean, often because they think it?s funny. These hackers have one purpose, and that is to harm you or piss you off. They are likely to delete content, lock you out by changing your password, redirect to pornographic websites to hurt your reputation, or something similar. 3.Some do it for financial gain. They may redirect your blog to an affiliate link, to their own website, or they may steal financial information you may have stored on your blog. This type of hacker is likely to take sensitive information and use or sell it, or to install malicious software that installs on visitors computers and infects their system with adware. 4.You may even be targeted by competitors who hack you, in an attempt to make you lose your search engine rankings, lose traffic, or hurt your reputation. There are many other reasons someone might want to hack a Wordpress blog, but these are some of the most common. Wordpress Security Guard

11. Basic Wordpress Security This section is going to focus on some very basic things you can do to secure your Wordpress installations. You should be taking these steps on every single blog you set up, and you should be doing it without fail! Update Wordpress The easiest thing you can do to protect your blog from hackers is to update your Wordpress installation often. Wordpress issues critical security updates from time-to-time, so don?t become complacent and think all updates are purely cosmetic or offering new functionality. Those security updates are absolutely vital, and they can stop some really nasty stuff dead in its tracks! Choose a Good Username Be careful not to choose an easy username for logging into your Wordpress admin area. Make sure it is not easy to guess, and whatever you do, do not use the username admin! Nearly everyone uses it, because it?s default upon install, so avoid it like the plague! Also, don?t use your name or any variation of it. Don?t use anything having to do with your blog?s name or niche. Don?t use any variation of your email address or any other usernames you may have. Use a Strong Password A strong password is absolutely critical, yet most people choose something easy to remember thinking they?ll never get hacked. This could be a big mistake! Your password should contain, at the very least, both numbers and letters (both capital and lowercase) and consist of at least 8 characters minimum. Wordpress Security Guard

12. Never use any variation on your username, name, email, birthday, anniversary, phone number or any other information a hacker may have access to. And never use common passwords or even include them in yours. Some of the most common passwords include: Password Love Sex Money God 12345678 Abc123 Qwerty Letmein Iloveyou Trustno1 Avoid using anything even close to these passwords! In fact, you may want to use a password generator and then keep your password secure using a password manager. There are many of these on the market, and will keep your password secure without allowing you to forget it. Vary Login Information Across Multiple Blogs Another mistake people commonly make is using the same login information for multiple blogs. If you have several different blogs, be sure to use different usernames and passwords for each so if one is compromised, your others can?t easily be attacked. Wordpress Security Guard

13. Remember, there are websites that will allow someone to see all of the other domains hosted on your server, so if your Wordpress installations all reside on the same hosting account, it?s easy for hackers to find your other blogs in order to target them. Don’t Use Usernames or Passwords from Other Sites If you are a member of a forum, social network, etc., never, ever use one of those usernames or passwords as your blog username or password! If the forum or website gets hacked and user data stolen, your blog could be compromised! Use something different for every site you register with, including your own! Limit Login Attempts One very simple thing you can do to thwart brute force attacks is to limit login attempts. There are plugins available on the Wordpress website that will let you limit login attempts. Additionally, you can get the Whitelist IP plugin that will let you add your own IP addresses to a whitelist to ensure you don?t accidentally lock yourself out. You may experience some minor frustration if you accidentally lock yourself out if you forget your password, but the extra security is worth the potential of frustration! If you use the whitelist plugin and add any IP addresses you might log in from, this isn?t likely to happen. Two Factor Authentication If you want to make sure your site is extra secure, you can use a two-step authorization that sends a secret verification code that cannot be guessed to your mobile phone. You must then enter this code onto your blog. There are also other types of two factor authentication such as Google Authenticator and barcode authentication. Wordpress Security Guard

14. You can read more about two factor authentication here: >> http://en.support.wordpress.com/security/two-step-authentication/ You can get plugins for your own hosted Wordpress installations that will let you use two step authentication. Password Protect wp-login.php One easy way to make it harder to brute force attacks to get through is to password protect the file wp-login.php. This is the file that shows you the form to log into your blog. It?s relatively simple to password protect this file. Hostgator has a simple tutorial you can follow, although this may or may not work on other hosting accounts: >>http://support.hostgator.com/articles/specialized- help/technical/wordpress/wordpress-login-brute-force-attack Change Database Prefixes By default, the databases used by Wordpress begin with the prefix wp_. Most people don?t even realize this, or if they do they don?t understand why it is a problem. Before you attempt this, backup your Wordpress database in case something goes wrong. You can use a plugin like BackupBuddy to do this easily. Next, open your wp-config.php file. You will find this in the root directory of your installation. (You can use an FTP program like Filezilla, which is free, to find the file on your server.) Wordpress Security Guard

15. Locate the line that looks like this: $table_prefix = ?wp_?; And change it to something like this: $table_prefix = ?wp_zyx321abc987_?; You can use any combination of letters, number and underscores, including both uppercase and lowercase letters in place of ?zyx321abv987?. Next, log into your hosting account cPanel and search for phpMyAdmin. Enter this and click the ?SQL? tab at the top. This will show you the different databases that must be changed. You can change these manually, or click the Query tab and paste this: 01 RENAME table `wp_commentmeta` TO `wp_a123456_commentmeta`; 02 RENAME table `wp_comments` TO `wp_a123456_comments`; 03 RENAME table `wp_links` TO `wp_a123456_links`; 04 RENAME table `wp_options` TO `wp_a123456_options`; 05 RENAME table `wp_postmeta` TO `wp_a123456_postmeta`; 06 RENAME table `wp_posts` TO `wp_a123456_posts`; 07 RENAME table `wp_terms` TO `wp_a123456_terms`; 08 RENAME `wp_a123456_term_relationships`; table `wp_term_relationships` TO 09 RENAME `wp_a123456_term_taxonomy`; table `wp_term_taxonomy` TO 10 RENAME table `wp_usermeta` TO `wp_a123456_usermeta`; 11 RENAME table `wp_users` TO `wp_a123456_users`; Wordpress Security Guard

16. Then run the query and it should change the names for you. You?re not quite done. Now you must search to see if there are any other wp_ lurking about in the options table. You can use another query to do this. Go back to query and enter this: SELECT * FROM `wp_ zyx321abv987_options` WHERE `option_name` LIKE'%wp_%' Go through all the results and change them one at a time. The next step is to search for any fields still using wp_ in the usermeta. Here is the query for that: Change these manually. If you have a lot of plugins and addons, there may be several to change. Finally, create a new backup (do not overwrite the old one!) and test the site! Hide Wordpress’ Version Number If you aren?t running the latest version of Wordpress and hackers find out, they can exploit this by using security holes that newer versions have plugged up. Fortunately, you can hide the version number from hackers using a simple two-step process. First, open functions.php and add this simple line of code: remove_action('wp_head', 'wp_generator'); Wordpress Security Guard

17. This is enough to get rid of the version number in your blog?s head area so people can?t view the source of the page and learn your version number. However, hackers can still access the version number through your RSS feeds! To thwart that, add the following line of code to functions,php: function wpbeginner_remove_version() { return ''; } add_filter('the_generator', 'wpbeginner_remove_version'); This will keep the version number hidden from all areas of your blog. Protect wp-config.php The configuration file for Wordpress is typically found on the root Wordpress folder, making it a simple way for hackers to attack your site. However, it doesn?t have to be there. Instead, you can move it up one level. Wordpress will still find the file. For example, if your wp-config.php file is located here: /public_html/wp-config.php Move it to: /wp-config.php CAPTCHA A final method for securing your Wordpress site is through the use of a CAPTCHA form on the login page. There are plugins that will allow you to do this. One such plugin is known as ?Captcha on Login?. This plugin will also allow you to change the default ?admin? username to something more secure if you already have blogs that use it. Wordpress Security Guard

18. Using CAPTCHA on your login page will help prevent brute force attacks, because it adds an extra layer of protection. Hackers will have to spend time entering the CAPTCHA, or paying someone to do so, for every login attempt. Most hackers will not be willing to do this unless your blog is a prime target for some reason. Additionally, the ?Captcha on Login? plugin will block IPs after a specific number of failed attempts, which you can configure. So if you?re not already using another plugin to do this, it will add that additional layer of protection. Wordpress Security Guard

19. Final Words Hopefully you now fully understand the gravity of the situation. Hackers may hack your blog for a variety of different reasons, and many of those reasons could end up causing you serious harm. Fortunately, securing your blog isn?t difficult. You can take a few of these simple steps right now, and they?ll only take you a few minutes to put into place. Don?t forget, there are many other elements of Wordpress security to keep in mind that can?t fit in a simple report. Those include elements such as: 1.Hotlink Protection 2.Video Protection 3.Folder Protection 4.Indexing 5.PDF Security 6.Piracy Protection 7.And More If you?re feeling a bit lost and confused, or like all of this is too technical for you to wrap your head around, don?t worry! Help is on the way. Check the next page of this document to find out how to get more help security your Wordpress installation even if you feel like you have no idea what you?re doing! You?ll learn how to protect practically every aspect of your blog for true lockdown security! Wordpress Security Guard

20. Resources: You Can See My own Products: PLR MONSTER Get LIFETIME access to 2000 Products Ready to Sell - For ONLY $7 - keep 100% of the profit App Builder Start Your Own Apps Empire! App Builder $9/year, UNLIMITED Apps, Get Free $1100 App Marketing Easytube Youtube Page 1 in 1 minute Easy System - See How All My Videos Rank Page 1 in Youtube, Yours Can Be Wordpress Security Guard

21. Call To Action Videos Double Your Video Conversion! Get 52 Call To action Videos With REAL Actors + Video Mixer Software Video Bomber Bomb YouTube With UNLIMITED Unique videos in Just Few Clicks, Fast and Easy Software! Instaquote Get Unlimited Facebook,Instagram,YouTube Unique content! Create STUNNING 100 Quotes in 7 seconds! YouTube Rank Checker YouTube Rank Tracker - Track Fast & Easy Wordpress Security Guard

22. Unlimited Keywords & Videos Ranking - $7 One Time Payment! Free WordPress Tutorials Mcbuzz McBuzz Communications will help you build a WordPress website yourself. (You save money.) Or we can do it for you. (You save time.) === Instant shift ultimate round up Ultimate Round-up of Quality WordPress Tutorials which helps you to enhance your blog design and features. === Specky boy video tutorials All of these tutorials range from basic learning for the beginner, to advanced, for the expert that wants to learn new techniques and push WordPress to its boundaries. === Wordpress Security Guard

23. Creative blog web design Want to build a new WordPress website, or add something new to your existing one? Then check out these top tutorials on Creative blog web design === I themes tutorials It created these free WordPress tutorials to help you learn WordPress — the world's best web publishing platform. === Wordpress tv On WordPress.tv, you'll find tutorials for both WordPress self-installs and WordPress.com to help you get blogging fast and hassle-free. === Site ground tutorials In this tutorial we will provide you with detailed instructions on how to use WordPress to create and manage your site. === Word press - all in one seo pack The All In One SEO Pack has a few unique features that make it different than yoast, like auto-generated description tags, canonical tag support and a “bad bot” blocker. === Wordpress Security Guard

24. Alex king Shortcut Macros allows you to define letter combinations that will expand to longer words, URLs, phrases, etc. === Word press - wp polls WP-Polls is extremely customizable via templates and css styles and there are tons of options for you to choose to ensure that WP-Polls runs the way you wanted. It now supports multiple selection of answers. === Word press - sem subscribe me Use All in One SEO Pack to optimize your WordPress site for SEO. It’s easy and works out of the box for beginners, and has advanced features and an API for developers. === Word press - contact form 7 Contact Form 7 can manage multiple contact forms, plus you can customize the form and the mail contents flexibly with simple markup. === Word press - wp super cache This plugin generates static html files from your dynamic WordPress blog. After a html file is generated your webserver will serve that file instead of processing the Wordpress Security Guard

25. comparatively heavier and more expensive WordPress PHP scripts. === Word press - pretty link Pretty Link Pro is a significant upgrade to Pretty Link Lite that adds many tools and redirection types that will allow you to create pretty links automatically, cloak links, replace keywords throughout your blog with pretty links and much more. === Word press - simple tags Simple Tags is the successor of Simple Tagging Plugin. This is THE perfect tool to manage perfectly your WP terms for any taxonomy === Word press - seo automatic links SEO Smart Links can automatically link keywords and phrases in your posts and comments with corresponding posts, pages, categories and tags on your blog. === Word press - landing pages WordPress Landing Pages plugin framework provides a way to add and even create landing pages for your WordPress site. === Wordpress Security Guard

26. Word press - better wp security iThemes Security (formerly Better WP Security) gives you over 30+ ways to secure and protect your WordPress site. === Word press - wp db manager Allows you to optimize database, repair database, backup database, restore database, delete backup database , drop/empty tables and run selected queries. === Word press - broken link checker This plugin will monitor your blog looking for broken links and let you know if any are found. === Word press - easy heads up bar This plugin adds an easy to use notification bar to the top of your WordPress website. === Word press - magic action box Magic Action Box is an easy to use but powerful lead generation plugin that lets you create a focused and high converting feature box in minutes. === Wordpress Security Guard

27. Word press - thank me later Thank Me Later sends ‘thank you’ emails to your commenters. === Word press - w3 total cache W3 Total Cache improves the SEO and user experience of your site by increasing website performance, reducing download times via features like content delivery network (CDN) integration. === Word press - meteor slides Meteor Slides makes it simple to create slideshows and publish them with a shortcode, widget, or template tag. === Work Smarter Not Harder! We all know that using internet marketing tools can help us get big success Wordpress Security Guard

28. However, did you know that using best internet marketing tools is THE key element for real success of your business? Here is why we must use marketing tools: Use tools can help you Earn more money! Save more time! Because For almost every paid tool you can find a free alternative one! Use tools can save you time because when you have the best productivity tools, you add more hours to your day! Need more customers and more leads? You must know the best tools nowadays for you to collect emails fast and easy. Do you want your site to reach higher rankings? You will find in our guide top popular SEO tools for free and also paid ones. Do you feel that you waste a lot of time working on social media marketing? Wordpress Security Guard

29. We have gathered in top tools the best top social marketing tools for to automate your social media marketing. Don't know which content to write for your audience? You can find in this guide top tools that give you top ideas to generate the best texts filled with interesting content. This big list of top internet marketing tools includes almost every tool you’ll ever need to master every aspect of a digital marketing campaign Feel free to share this guide with your friends! They will definitely be thankful! ALL 100 TOP TOOLS CATEGORIES Content Curation Tools Social Media Tools PPC Tools Content Optimization Tools Wordpress Security Guard

30. Rank Tracking Tools Tops Keyword Research Tools Keywords Ideas Tools Technical Seo Tools Top Seo Tools Link Building Top Seo Tools Top Landing Pages Creators Twitter Trending Topics Twitter Tools For Images Twitter Hashtags Top Twitter Tools Wordpress Security Guard

31. Top Facebook Tools Top Lead Generation Tools Top Autoresponders Tools Build Email List Tools Top Niche Research Tools Top Trends Tools Ecommerce Software Screen Capture Video Audio Tools Gif Creator Tools Free Banner Creators Tools Wordpress Security Guard

32. Top Online Contests Tools Twitter Tools Twitter Analysis Management Tools Competitive Analysis Tools Backlink Investigation Tools Tools For Writers Instagram Tools Notifications Monitoring Tools New Launch Products Sites Question And Answer Sites Push Notification Tools Wordpress Security Guard

33. Time Management Tools Webinars Tools Heatmap Analytics Tools Free Wordpress Tutorials Website Templates builder Tools Website Testing And Analysis Tools File Sharing And Data Storage Tools Brainstorming And Mind Mapping Tools Top Interstitial Traffic Networks Top Solo Ad Traffic Sources Top Native Ads Traffic Networks Wordpress Security Guard

34. Top PPC Networks Top PPV CPV Networks Top Mobile Traffic Networks Infographic Submission Sites Free Video Submission Sites Free Article Submission Sites CPA CPM Aff Networks Mobile Marketing Tools Scraper Extractor Tools Support Tools Wordpress Security Guard

35. Graphic and Design Tools Efficiency Tools Virtual Assistant Sites Top Outsourcing Tools Traffic Analysis Tools VPN Tools Integration Services Tools Social Media Analytics Tools Url Shortener Tools Content Ideation Tools Domain Name Idea Generators Wordpress Security Guard

36. Domain Appraisal Tools Domain Email Tools Business Dashboard Tools Increasing Influence Payment Gateways Tools Project Management Tools Customer Support Website Monitoring Tools Form Builders Website Builders Image And Cliparts Sites Wordpress Security Guard

37. Design Tools Video Creating Tools Surveys Top Outreach Tools Top Live Chat Tools YouTube Marketing Tools Mobile Marketing Tools Top Heatmaps Tools Top E-learning Platforms Top Content Tools Cloud File Storage Wordpress Security Guard

38. Top Affiliate Marketing Sites Top Analytics Tools Top Social Advertising Tools Content Creation Tools Social Analytical Tools Monitoring Sharing Tools Internet Marketing Top Forums Internet Marketing Newsfeeds Internet Marketing Top Sites Wordpress Security Guard