Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Securing your Wordpress Sites

Avatar for Karthik Ragubathy Karthik Ragubathy
June 25, 2017
Programming
1
410

Securing your Wordpress Sites

At WordCamp Nagpur - 2017, I spoke on a few ways you can secure your wordpress site.

Avatar for Karthik Ragubathy

Karthik Ragubathy

June 25, 2017
Tweet

Other Decks in Programming

See All in Programming
AI によるインシデント初動調査の自動化を行う AI インシデントコマンダーを作った話
Avatar for azukiazusa azukiazusa1
1
730
AI & Enginnering
Avatar for codelynx codelynx
0
110
なぜSQLはAIぽく見えるのか/why does SQL look AI like
Avatar for florets1 florets1
0
460
AI時代のキャリアプラン「技術の引力」からの脱出と「問い」へのいざない / tech-gravity
Avatar for MinoDriven minodriven
21
7.2k
Amazon Bedrockを活用したRAGの品質管理パイプライン構築
Avatar for とすり tosuri13
4
620
それ、本当に安全？ ファイルアップロードで見落としがちなセキュリティリスクと対策
Avatar for ikechi penpeen
7
3.9k
コントリビューターによるDenoのすゝめ / Deno Recommendations by a Contributor
Avatar for petamoriken / 森建 petamoriken
0
200
カスタマーサクセス業務を変革したヘルススコアの実現と学び
Avatar for Tomoyuki Hamaguchi _hummer0724
0
700
Rust 製のコードエディタ “Zed” を使ってみた
Avatar for NearMeの技術発表資料です nearme_tech
PRO
0
170
Data-Centric Kaggle
Avatar for ねぼすけAI isax1015
2
770
Best-Practices-for-Cortex-Analyst-and-AI-Agent
Avatar for ryotaro.ikeda@finatext.com ryotaroikeda
1
100
AI時代の認知負荷との向き合い方
Avatar for OptFit Corp. optfit
0
160

Featured

See All Featured
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
27k
The browser strikes back
Avatar for Jono Alderson jonoalderson
0
370
Typedesign – Prime Four
Avatar for Hannes Fritz hannesfritz
42
2.9k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
333
24k
Done Done
Avatar for chrislema chrislema
186
16k
Lessons Learnt from Crawling 1000+ Websites
Avatar for Charles Meaden charlesmeaden
PRO
1
1.1k
How to Ace a Technical Interview
Avatar for Jacob Kaplan-Moss jacobian
281
24k
Effective software design: The role of men in debugging patriarchy in IT @ Voxxed Days AMS
Avatar for Kenny Baas-Schwegler baasie
0
220
Scaling GitHub
Avatar for Zach Holman holman
464
140k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
55
9.5k
What's in a price? How to price your products and services
Avatar for Michael Herold michaelherold
247
13k
30 Presentation Tips
Avatar for Ian Lurie portentint
PRO
1
210

Transcript

  1. None

  2. SECURING YOUR WORDPRESS SITES KARTHIK RAGUBATHY

  3. IF YOU THINK TECHNOLOGY CAN SOLVE YOUR SECURITY PROBLEM -

    THEN YOU DON’T UNDERSTAND THE PROBLEM AND THE TECHNOLOGY Bruce Schneier

  4. HARDENING WORDPRESS

  5. UPDATE WORDPRESS

  6. BACKUP ON A SCHEDULE RESTORE ON A SCHEDULE

  7. DISABLE THE PLUGIN / THEME EDITOR

  8. CUT DOWN ON YOUR PLUGINS / THEMES

  9. ADD TWO STEP AUTHENTICATION

  10. REMOVE THE ‘ADMIN’ USER

  11. READ YOUR LOGS

  12. CHANGE THE DEFAULTS

  13. HIRE A RELIABLE HOSTING PROVIDER

  14. INSTALL SSL ON YOUR SITE

  15. SECURE YOUR COMPUTER

  16. FOLLOW THE OWASP CHECKLIST https://www.owasp.org/index.php/ OWASP_Wordpress_Security_Implementation_Guideline

  17. TAKEAWAYS ▸ Security is a process. Always be securing. ▸

    Always update Wordpress / Plugins / Themes. ▸ Add Two Factor Authentication ▸ Keep your work environment secure ▸ Use SSL certificates to secure your site ▸ Keep an OWASP Checklist ▸ Manage access and check logs regularly

  18. DID I MISS ANYTHING? QUESTIONS Email : [email protected] Twitter :

    @pkarthikr