Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Securing your Wordpress Sites

Avatar for Karthik Ragubathy Karthik Ragubathy
June 25, 2017
Programming
410
1

Securing your Wordpress Sites

At WordCamp Nagpur - 2017, I spoke on a few ways you can secure your wordpress site.

Avatar for Karthik Ragubathy

Karthik Ragubathy

June 25, 2017

Other Decks in Programming

See All in Programming
プロポーザルを書いてもらう
Avatar for pvcresin pvcresin
0
230
今さら聞けない .NET CLI
Avatar for tkym htkym
0
180
Laravelで学ぶ Webアプリケーションチューニング入門/web_application_tuning_101
Avatar for Ryo Tomidokoro hanhan1978
4
1.7k
わからない話を追いかけたら、プログラミング言語を作る側にいた
Avatar for ydah ydah
3
460
『コードを書く以外の』エンジニアリング〜課金基盤移行プロジェクト推進のためのTips4選
Avatar for yuriko yuriko1211
0
580
「人を評価する AI」の 設計と実装 
Avatar for 奈良亮耶 ryoyanara
0
160
AI時代のPHPer生存戦略 ～「言語、もうなんでもよくない？」に本気で向き合う～
Avatar for viviON vivion
0
240
Apache Hive: そしてCloud Native Lakehouseへ
Avatar for okumin okumin
1
210
20260722_microCMSで考える、AI時代のコンテンツ運用設計
Avatar for Yoshihisa Kaino yosh1
0
360
FDEが実現するAI駆動経営の現在地
Avatar for ryuta sakamoto gonta
2
260
琵琶湖の水は止められてもNet--HTTPのリトライは止められない / You might be able to stop the water flow of Lake Biwa but you can't stop Net::HTTP retries
Avatar for luccafort luccafort
PRO
0
580
【やさしく解説 設計編・中級 #4】ルールの寿命と、システムの年輪
Avatar for HideyukiKitao panda728
PRO
2
180

Featured

See All Featured
ラッコキーワード サービス紹介資料
Avatar for ラッコ株式会社 rakko
1
4.2M
Redefining SEO in the New Era of Traffic Generation
Avatar for Szymon Słowik szymonslowik
1
380
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
Avatar for konakalab konakalab
0
520
JAMstack: Web Apps at Ludicrous Speed - All Things Open 2022
Avatar for David Neal reverentgeek
1
530
Leading Effective Engineering Teams in the AI Era
Avatar for Addy Osmani addyosmani
9
2.2k
Test your architecture with Archunit
Avatar for Yoan thirion
1
2.3k
How STYLIGHT went responsive
Avatar for nonsquared nonsquared
100
6.2k
Mind Mapping
Avatar for Hélio Medeiros helmedeiros
PRO
1
300
What's in a price? How to price your products and services
Avatar for Michael Herold michaelherold
247
13k
Self-Hosted WebAssembly Runtime for Runtime-Neutral Checkpoint/Restore in Edge–Cloud Continuum
Avatar for Yuki Nakata chikuwait chikuwait
0
680
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
27k
The Power of CSS Pseudo Elements
Avatar for Geoffrey Crofte geoffreycrofte
82
6.5k

Transcript

  1. None

  2. SECURING YOUR WORDPRESS SITES KARTHIK RAGUBATHY

  3. IF YOU THINK TECHNOLOGY CAN SOLVE YOUR SECURITY PROBLEM -

    THEN YOU DON’T UNDERSTAND THE PROBLEM AND THE TECHNOLOGY Bruce Schneier

  4. HARDENING WORDPRESS

  5. UPDATE WORDPRESS

  6. BACKUP ON A SCHEDULE RESTORE ON A SCHEDULE

  7. DISABLE THE PLUGIN / THEME EDITOR

  8. CUT DOWN ON YOUR PLUGINS / THEMES

  9. ADD TWO STEP AUTHENTICATION

  10. REMOVE THE ‘ADMIN’ USER

  11. READ YOUR LOGS

  12. CHANGE THE DEFAULTS

  13. HIRE A RELIABLE HOSTING PROVIDER

  14. INSTALL SSL ON YOUR SITE

  15. SECURE YOUR COMPUTER

  16. FOLLOW THE OWASP CHECKLIST https://www.owasp.org/index.php/ OWASP_Wordpress_Security_Implementation_Guideline

  17. TAKEAWAYS ▸ Security is a process. Always be securing. ▸

    Always update Wordpress / Plugins / Themes. ▸ Add Two Factor Authentication ▸ Keep your work environment secure ▸ Use SSL certificates to secure your site ▸ Keep an OWASP Checklist ▸ Manage access and check logs regularly

  18. DID I MISS ANYTHING? QUESTIONS Email : [email protected] Twitter :

    @pkarthikr