Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Securing your Wordpress Sites

Avatar for Karthik Ragubathy Karthik Ragubathy
June 25, 2017
Programming
410
1

Securing your Wordpress Sites

At WordCamp Nagpur - 2017, I spoke on a few ways you can secure your wordpress site.

Avatar for Karthik Ragubathy

Karthik Ragubathy

June 25, 2017

Other Decks in Programming

See All in Programming
Welcome to the "Parametricity" 🏙️ − Generic だけど Specific な世界 −
Avatar for TAKASE Kazuyuki guvalif
PRO
1
200
The Past, Present, and Future of Enterprise Java
Avatar for ivargrimstad ivargrimstad
0
530
これって Effect でできたのでは? / TSKaigi Mashup Kansai #2
Avatar for Susisu susisu
0
140
AI時代、エンジニアはどう育つのか -未経験エンジニアの成長を間近で見て考えたこと-
Avatar for ta-hasunuma thasu0123
0
220
仕様駆動開発の消費期限
Avatar for watany watany
12
5.6k
アルゴリズムは何を圧縮しているのか ─ Haskell から育った「圧縮代数」というメンタルモデル
Avatar for Naoya Ito naoya
16
3.8k
言語を使う側から、作る側へ。 自作 Lisp で得た新たな気づき。
Avatar for ANDPAD inc andpad
0
150
Japan Community Day at Kubecon + CloudNativeCon Japan 2026: Learning Container Privilege Control by Building My Own Low-Level Container Runtime
Avatar for ternbusty ternbusty
1
130
ここ半年くらいでAIに作らせたR用ツール
Avatar for eitsupi eitsupi
0
370
VibeCodingからAgenticWorkflowへ
Avatar for starfish719 starfish719
0
270
プロポーザルを書いてもらう
Avatar for pvcresin pvcresin
0
230
メールのエイリアス機能を履き違えない
Avatar for 船長（せんちょう） isshinfunada
0
220

Featured

See All Featured
WENDY [Excerpt]
Avatar for Tessa Abrams tessaabrams
11
39k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
55
10k
Lightning talk: Run Django tests with GitHub Actions
Avatar for Sarah Abderemane sabderemane
0
230
Faster Mobile Websites
Avatar for Dean Hume deanohume
310
32k
Utilizing Notion as your number one productivity tool
Avatar for Mfonobong Umondia mfonobong
4
510
Mobile First: as difficult as doing things right
Avatar for Swwweet swwweet
225
10k
Easily Structure & Communicate Ideas using Wireframe
Avatar for Afnizar Nur Ghifari afnizarnur
194
17k
Building a A Zero-Code AI SEO Workflow
Avatar for Ian Lurie portentint
PRO
0
650
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
174
15k
HU Berlin: Industrial-Strength Natural Language Processing with spaCy and Prodigy
Avatar for Ines Montani inesmontani
PRO
0
610
A Tale of Four Properties
Avatar for Chris Coyier chriscoyier
163
24k
Design in an AI World
Avatar for tapps tapps
1
270

Transcript

  1. None

  2. SECURING YOUR WORDPRESS SITES KARTHIK RAGUBATHY

  3. IF YOU THINK TECHNOLOGY CAN SOLVE YOUR SECURITY PROBLEM -

    THEN YOU DON’T UNDERSTAND THE PROBLEM AND THE TECHNOLOGY Bruce Schneier

  4. HARDENING WORDPRESS

  5. UPDATE WORDPRESS

  6. BACKUP ON A SCHEDULE RESTORE ON A SCHEDULE

  7. DISABLE THE PLUGIN / THEME EDITOR

  8. CUT DOWN ON YOUR PLUGINS / THEMES

  9. ADD TWO STEP AUTHENTICATION

  10. REMOVE THE ‘ADMIN’ USER

  11. READ YOUR LOGS

  12. CHANGE THE DEFAULTS

  13. HIRE A RELIABLE HOSTING PROVIDER

  14. INSTALL SSL ON YOUR SITE

  15. SECURE YOUR COMPUTER

  16. FOLLOW THE OWASP CHECKLIST https://www.owasp.org/index.php/ OWASP_Wordpress_Security_Implementation_Guideline

  17. TAKEAWAYS ▸ Security is a process. Always be securing. ▸

    Always update Wordpress / Plugins / Themes. ▸ Add Two Factor Authentication ▸ Keep your work environment secure ▸ Use SSL certificates to secure your site ▸ Keep an OWASP Checklist ▸ Manage access and check logs regularly

  18. DID I MISS ANYTHING? QUESTIONS Email : [email protected] Twitter :

    @pkarthikr