Tell me more ×
WordPress Answers is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.
up vote 0 down vote favorite
1

My wordpress has been hacked for 2 or 3 times. How can I increase its security? Is it a good way to rename the index.php in wp-admin directory?

share|improve this question
Security by obscurity is a joke... – Dan Jan 25 at 20:55

3 Answers

up vote 7 down vote

Renaming files will not make your blog more secure. Obscurity, hiding trivial information, is not a real security concept.

The index.php is safe. Make sure the file permissions are set correctly, and try to find the real security hole you had.

share|improve this answer
All Files' permissions are 644, but hackers can change my wp admin password as easy as a pie :). Also I changed the .htaccess file to make my blog safer. however, I think the problem is related to wp security. – yaa110 Jan 25 at 12:21
3  
No, hackers cannot just change your admin password – unless you are allowing this. WordPress wouldn’t be what it is if that were possible. – toscho♦ Jan 25 at 13:07
2  
If hackers can change your admin password there is a backdoor on your site or the server, or your password is something terrible like "password". You need someone knowledgeable to take a very close look. – s_ha_dum Jan 25 at 15:23
up vote 2 down vote

Make sure you have the latest versions of Wordpress, plugins and themes.

Never use pirated/cracked/nulled plugins or themes as they often have backdoors.

Older themes had a bug related to Timthumb. Try this plugin to check for the latest version (if you're using Timthumb).

You can also use a plugin like this one to get some more control over your website.

The problem may not come from WordPress itself, but it could also be that you've got a keylogger on your system. Read Hardening WordPress to get a general idea about what you should do.

share|improve this answer
up vote 1 down vote

Renaming the index.php wont really help much.

What you really need is something like "Better WP Security": http://wordpress.org/extend/plugins/better-wp-security

Better WP Security takes the best WordPress security features and techniques and combines them in a single plugin thereby ensuring that as many security holes as possible are patched without having to worry about conflicting features or the possibility of missing anything on your site.

It's the number 1 plugin for Wordpress security.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.