Is your WordPress safe? Let’s Find Out!
Are you a true WordPress user? Build a website using WordPress, build an online shop using WordPress? Hmm … WordPress is indeed powerful and makes our lives easier, right? People today don’t need to bother creating a website from scratch which requires a lot of time and effort. Moreover, you have to understand the complicated website programming language. Just creating a personal website takes a few months. Even then, the display is still not good. So, building a website using WordPress is the best solution. Because only once installed, the website can be used! However, is your WordPress safe from malware or hacker attacks?
Nothing is 100% Secure
No system is 100% safe from malware or hackers. However, there are many ways to prevent all that happen on your website. Especially for WordPress which is incidentally made by the expert and always updated for security problems. Quoted from WordPress Security Basics belonging to Chris Burgess at the time of Melbourne WordPress User Meetup, several factors cause WordPress can be hacked. Among them are Human Error, the wrong configuration problem, the plugin and theme are not up to date, and using a careless plugin.
Check your WordPress!
Quoted Hacking the WordPress Ecosystem by Dan Catalin Vasile, who was presented at OWASP Romania InfoSec. Here are some things you should pay attention to!
1. Infrastructure
Make sure you choose trusted domain service and hosting service providers. Never entrust your website to the provider that has a data center for careless. Moreover, the security is not awake. Besides, make sure you access the server/hosting using SSH or SFTP to be safer. Please note, hackers can enter through the gaps anywhere. For this reason, always do PHP updates, web servers, and databases used. Don’t forget to do disable directory listings and secure php.ini. To guard, occasionally also need to see the longer log, you know what happens on your website.
2. WordPress website
From a website perspective, you can secure WordPress during the installation or maintenance process. When the installation process make sure, always download WordPress from https://wordpress.org/download/. Then change the default admin username so that it is not easy for people to track. Also, protect against wp-config.php via the .htaccess file. Now, when the website is running, make sure WordPress is always updated! Don’t forget to use SSL so that the website is safer from spamming or phishing. If necessary, use captcha to login and limit access / wp-admin via .htaccess.
3. Themes and Plugins
These are two things that sometimes cause websites to be exposed to malware. Make sure you use themes and plugins from WordPress.org. What if you want to buy from outside? Yeah sure! As long as the theme and plugins you buy have a good and trusted reputation. Make sure the themes and plugins you have can be updated and there are no strange links in them. And don’t forget to always update themes and plugins! If there are plugins that are no longer used, please delete them.
4. Backup Periodically
Even though backups are not a preventive measure to prevent hackers from getting into your WordPress, always do periodic backups. This aims to protect the important files on the website and hosting. Always do Cpanel backups, backup services, backup plugins, and database backups. Take it easy, there is a data backup feature to the cloud, you know!
5. You!
Yes, you! Make sure you understand and are aware of the website security issue! Website security is something that seems trivial but urgent, you know! Make sure you know the security holes that exist on the website, what the impact is, how to patch the gaps, always use a secure password, don’t want to divulge passwords to other people, and make sure you always take the time to update and upgrade!
Well, if you have done some of the things above, then it is certain that your WordPress is safer. To be even more secure, please install SSL and install Memcached now!
For your business to grow and increase the number of your customers, don’t forget to advertise through the Froggy Ads service, you can start by advertising your products so that later you can increase visitors on your online business portal. Froggy Ads is an online advertising service that can help you control all your product campaigns. helps you target your desired marketing target and gives you many options to market your product.
