This days I've been watching from the sidelines and been seeing people talk about their blog hacked and besides the recent loophole found in WordPress ,So am just going to drive home my points straight off.

1.) Change your username --- Why would you be so lazy to leave yours as "admin" ? every of those "cowboy hackers" types the word "admin" into every login page....
some quick install service might not require you to change your name and password while installing WordPress (instead they have it mailed to you),in the case,login and simply add a new user,and set it's role as "administrator"...

2.) Strong Password ---- A strong password is one that contains Uppercase,lowercase letters;Symbols And Digits.... Something like JreGZISA*FAGot1+2=3

3.) Update your WordPress version and plugins --- I really don't need to stick my pen in here...

4.)Backup, Backup,Backup And Have More Backups --- Don't tell me premium backup plugins are expensive, well if they are,Google is your friend, it has tons of D-I-Y tutorials on backing up your WordPress

5.) Use Google webmaster tools and the free security check at sucuri's site

6.) edit your htacess

7.) Download themes from WordPress's repository only

8..) Guard Brute Attacks with plugins like limit login Attempt or Login LockDown --- no one needs to tell you to be extremely strict when "checking" your options

9.) Make sure you are with a reliable host

10) Change your cpanel."logins" and any other thing that requires a password..

11.) Delete Softwares on an "add-on.domain" you aren't using again from your cpanel --- why ..? if you aren't updating it,it might just serve as a Backdoor to get your WordPress hacked...

12..) Consider Going Premium..




Do have a nice day

@ op

thanks for the update

though dont really have a functioning wordpress

mine is still at the construction stage

hushmail: @ op

thanks for the update

though dont really have a functioning wordpress

mine is still at the construction stage

I hope the tut. comes handy when you finally launch your WordPress site...

you talk about updating wordpress plugin version. you might loose some modification on you site if you do so.

slicreports: you talk about updating wordpress plugin version. you might loose some modification on you site if you do so.

updating your WordPress is one of the best ways to stay hack-free...

modifications? as in your site's design ? always use a child theme so you can always have your current design rather than lose it to an "update" https://wordpress.org/plugins/one-click-child-theme