Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Securing your Wordpress Sites

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Karthik Ragubathy Karthik Ragubathy
June 25, 2017
Programming
410
1

Securing your Wordpress Sites

At WordCamp Nagpur - 2017, I spoke on a few ways you can secure your wordpress site.

Avatar for Karthik Ragubathy

Karthik Ragubathy

June 25, 2017

Other Decks in Programming

See All in Programming
残高管理から台帳サービスへの進化
Avatar for kobaryo artoy
1
200
Augmenting AI with the Power of Jakarta EE
Avatar for ivargrimstad ivargrimstad
0
190
Optunaを作ったときにやりたかったこと、その後 (2026/10/16, Optuna Meetup #3)
Avatar for Takuya Akiba iwiwi
1
440
Vue Fes Japan の “作る側”に関わってみて
Avatar for Naoki Haba naokihaba
0
160
Next.js: The final boss of Web Performance
Avatar for Estela Franco guaca
0
260
當我們開始不讀 Code - AI Agent 時代，Code Review 與 Clean Code 還剩下什麼？
Avatar for James Wang jame2408
1
240
HTML-in-Canvasで作る未来のWeb UI表現
Avatar for IKEDA Yasunobu clockmaker
5
5.1k
Agents on Rails - Rails at Scale 2026
Avatar for Irina Nazarova irinanazarova
0
560
外から家のPCの電源入れたい！をＰＨＰで解決する
Avatar for かわしも（Shimokawa Shion） kawashimo0
1
140
ジョジョの世界をXRで再現する
Avatar for mofurune mofurune
0
170
APNsからLive Activityを開始する話
Avatar for Ryotaro Onoue yumnumm
0
170
re:Inventに行く前に知っておきたい現地参加のノウハウ
Avatar for nokomoro3 nokomoro3
0
430

Featured

See All Featured
Neural Spatial Audio Processing for Sound Field Analysis and Control
Avatar for NII S. Koyama's Lab skoyamalab
0
570
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
15k
Bash Introduction
Avatar for André Augusto Costa Santos 62gerente
615
220k
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
234
19k
Groundhog Day: Seeking Process in Gaming for Health
Avatar for Sebastian Deterding codingconduct
0
410
Building the Perfect Custom Keyboard
Avatar for Naoto Takai takai
2
910
Avoiding the “Bad Training, Faster” Trap in the Age of AI
Avatar for Mike Taylor tmiket
0
270
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
53
4k
Bridging the Design Gap: How Collaborative Modelling removes blockers to flow between stakeholders and teams @FastFlow conf
Avatar for Kenny Baas-Schwegler baasie
0
730
Measuring Dark Social's Impact On Conversion and Attribution
Avatar for Stephen Akadiri stephenakadiri
2
310
Writing Fast Ruby
Avatar for Erik Berlin sferik
630
63k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
331
25k

Transcript

  1. None

  2. SECURING YOUR WORDPRESS SITES KARTHIK RAGUBATHY

  3. IF YOU THINK TECHNOLOGY CAN SOLVE YOUR SECURITY PROBLEM -

    THEN YOU DON’T UNDERSTAND THE PROBLEM AND THE TECHNOLOGY Bruce Schneier

  4. HARDENING WORDPRESS

  5. UPDATE WORDPRESS

  6. BACKUP ON A SCHEDULE RESTORE ON A SCHEDULE

  7. DISABLE THE PLUGIN / THEME EDITOR

  8. CUT DOWN ON YOUR PLUGINS / THEMES

  9. ADD TWO STEP AUTHENTICATION

  10. REMOVE THE ‘ADMIN’ USER

  11. READ YOUR LOGS

  12. CHANGE THE DEFAULTS

  13. HIRE A RELIABLE HOSTING PROVIDER

  14. INSTALL SSL ON YOUR SITE

  15. SECURE YOUR COMPUTER

  16. FOLLOW THE OWASP CHECKLIST https://www.owasp.org/index.php/ OWASP_Wordpress_Security_Implementation_Guideline

  17. TAKEAWAYS ▸ Security is a process. Always be securing. ▸

    Always update Wordpress / Plugins / Themes. ▸ Add Two Factor Authentication ▸ Keep your work environment secure ▸ Use SSL certificates to secure your site ▸ Keep an OWASP Checklist ▸ Manage access and check logs regularly

  18. DID I MISS ANYTHING? QUESTIONS Email : [email protected] Twitter :

    @pkarthikr