New answers tagged security
15k login attempts? sounds like you need to block the IP. WordFence has done pretty well for me. It can automatically block the IP after X login attempts or even immediately for specific user names. The also have the ability to throttle an IP when it gets a little too eager. I've see a wide range of attacks on my own site. I'm pretty sure there isn't one ...
If you are serious about security you will not install any plugin to which you haven't done a security audit (or paid someone else to do). Backdoors can be a problem, and well written ones will be hard to block, but it seems like just a purely bad code is so far making much more damage then intentional backdoors.
You are only focussing on one area of WordPress neglegting all others. Hackers use many many ways to hack a site and get access to such sites, not only through back end login and registering. WordPress by itself is quite secure if you keep up with installing updates as soon as they are released. Also, keeping your PHP version updated is very crucial. At ...
I posted the question on the wordpress slack and the answer I got https://wordpress.slack.com/archives/core/p1447905339001506 is that the difference is semantic and not practical and there is no reason to prefer the usage of one over the others (except for semantics of course)
You are getting redirected because of the automatic redirection to the canonical address of the page which is http://.... You will need to use the redirect_canonical filter https://developer.wordpress.org/reference/hooks/redirect_canonical/ to tell wordpress to not redirect for that page.
No, and what you want is DRM and not security. The base of any measure of security is that only you have "root" level access to the server as the root user will be able in the end to overcome any DRM measure you try to implement. If a contract will not stop him from violating your rights (assuming you have them at all), nothing will stop him. If you want to ...
No, not in the way you're thinking Protect our wordpress site from security fail scanner (ex: wpscsan)? You can do this by fixing security fails, which almost universally means keep your install up to date. After all, you test for the presence of an exploit by using that exploit, so there's no way to be vulnerable but conceal it Scanner that gives info ...
That's very sad that you are experiencing this problem. You can do the following things to solve the problem : Check every folder for a list of known backdoors such as C99.php, C100.php, Weevely.php. (You can do that by grep). And delete anything suspicious. Download WPSCAN and run it against your website to see if any known vulnerabilities are present ...
You can protect your WordPress admin by following methods. Add numbers,special characters and alphabets in your admin password then make strong password If you got more records in your database, this will slow down your websites. So it can be avoid by adding image captcha in your wp-admin page. Some plugins are available for it. Like ...
Top 50 recent answers are included