There is no such thing as an “unimportant password”! The same goes for WordPress database password. Although most servers are configured so that the database can’t be accessed from other hosts that doesn’t mean your database passsword should be “12345”. Choose a proper password, at least 8 characters long with a combination of letters, numbers […]
Your world is crashing down around you. Some <expletive deleted> person has got into your precious WordPress web site and ruined it. You want revenge, sure. But what you really NEED is to get your site cleaned up and working again. Here at Gecko Gully, we’ve cleaned up a LOT of web sites. WordPress and […]
If someone tries to guess your username and password or tries a brute-force attack they’ll most probably start with username “admin”. This is the default username used by too many sites and should be removed. Create a new user and assign him the “administrator” role. Try not to use usernames like: “root”, “god”, “null” or […]
I have been working with a client (whose site/s I did NOT build) whose WordPress web site has been hacked. Here is the report I just sent him to show him what I have done to secure his site against further hacking attempts. How many of these things have YOU done to ensure your site […]
As with the WordPress core, keeping plugins up to date is one of the most important and easier way to keep your site secure. Since most plugins are free and therefore their code is available to anyone having the latest version will ensure you’re not prone to attacks based on known vulnerabilities. If you downloaded […]
Keeping the WordPress core up to date is one of the most important aspects of keeping your site secure. If vulnerabilities are discovered in WordPress and a new version is released to address the issue, the information required to exploit the vulnerability is almost certainly in the public domain. This makes old versions more open […]
1 – Content, Content, Content! Adding new material to your internet sites is essential to getting social traffic, organic traffic and encouraging your visitors to purchase. In a WordPress blog site you can include short articles in a structured method (with categories), you can arrange them to appear at a date in the future and […]
[svpVideo v=1] Here is what you need to do if you are worried about SoakSoak WordPress Malware Virus Hack. SoakSoak appeared in mid December 2014. At the time of writing (17 December) it has already infected over 100,000 WordPress sites. It appears to be exploiting a vulnerability in RevSlider, and can infect not only the […]
I don’t normally write posts that are aimed only at my clients, but I have had a number of people ask me about this lately, and they are not all my clients. So I hope this helps a few people! If you have the Sucuri security plugin on your WordPress site, or any other software […]
The team behind the All in One SEO Pack just released a new version of their popular WordPress plugin. It is a security release patching two privilege escalation vulnerabilities we discovered earlier this week that may affect any web site running it. The risks If your site has subscribers, authors and non-admin users logging in […]
Note: If you have found this post because you have an error message in your IQ Block Country, please see this later post on the IQ Block Country error message. [standoutbox fx=”johnson”]Update!! If you need this installed for you, we now offer that as a service! Details at the bottom of this post.[/standoutbox] I’ve been […]
Displaying any kind of debug info or similar information is extremely bad for WordPress Security. If any PHP errors happen on your site they should be logged in a safe place and not displayed to visitors or potential attackers. Open wp-config.php and place the following code just above the require_once function at the end of […]
Facebook
YouTube
LinkedIn
BNI
