My wordpress has been hacked for 2 or 3 times. How can I increase its security? Is it a good way to rename the index.php in wp-admin directory?

  • Security by obscurity is a joke... – Dan Jan 25 '13 at 20:55

Renaming files will not make your blog more secure. Obscurity, hiding trivial information, is not a real security concept.

The index.php is safe. Make sure the file permissions are set correctly, and try to find the real security hole you had.

|improve this answer|||||
  • All Files' permissions are 644, but hackers can change my wp admin password as easy as a pie :). Also I changed the .htaccess file to make my blog safer. however, I think the problem is related to wp security. – I left StackExchange Jan 25 '13 at 12:21
  • 3
    No, hackers cannot just change your admin password – unless you are allowing this. WordPress wouldn’t be what it is if that were possible. – fuxia Jan 25 '13 at 13:07
  • 2
    If hackers can change your admin password there is a backdoor on your site or the server, or your password is something terrible like "password". You need someone knowledgeable to take a very close look. – s_ha_dum Jan 25 '13 at 15:23

Make sure you have the latest versions of Wordpress, plugins and themes.

Never use pirated/cracked/nulled plugins or themes as they often have backdoors.

Older themes had a bug related to Timthumb. Try this plugin to check for the latest version (if you're using Timthumb).

You can also use a plugin like this one to get some more control over your website.

The problem may not come from WordPress itself, but it could also be that you've got a keylogger on your system. Read Hardening WordPress to get a general idea about what you should do.

|improve this answer|||||

Renaming the index.php wont really help much.

What you really need is something like "Better WP Security": http://wordpress.org/extend/plugins/better-wp-security

Better WP Security takes the best WordPress security features and techniques and combines them in a single plugin thereby ensuring that as many security holes as possible are patched without having to worry about conflicting features or the possibility of missing anything on your site.

It's the number 1 plugin for Wordpress security.

|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.