How to Secure Your Wordpress Blog From Hackers 2013

 

I am a successful wordpress theme developer, over the years, I have enjoyed the sweet migration from core PHP CMS programming to Wordpress which have help me alot, but that changed when wordpress was targeted by hackers. Not only do they make clients believe that you cannot provide them with secured site, you also have fear of the unknown. As a result of that, I started searching online for the practices that can get my blogs more secured, from my research, I think this suggestions would be helpful:

•  Update and upgrade your wordpress installation and all installed plugins
•  Install the security plugin listed here
•  Ensure that your admin password is secure and preferably randomly generated
      Other ways of Hardening a WordPress installation are shared at http://codex.wordpress.org/Hardening_WordPress

These additional steps can be taken to further secure wordpress websites:

•  Disable DROP command for the DB_USER .This is never commonly needed for any purpose in a wordpress setup
•  Remove README and license files (important) since this exposes version information
•   Move wp-config.php to one directory level up, and change its permission to 400
•  Prevent world reading of the htaccess file
•   Restrict access to wp-admin only to specific IPs

A few more plugins – wp-security-scan, wordpress-firewall, ms-user-management, wp-maintenance-mode, ultimate-security-scanner, wordfence, http://wordpress.org/extend/plugins/better-wp-security/. These may help in several occasions

Also, we recommend using Cloudflare, which is available free with all our cPanel accounts, to
prevent the attack from affecting the functionality of your site.

I Hope this may help you alot...