0

My wordpress has been hacked for 2 or 3 times. How can I increase its security? Is it a good way to rename the index.php in wp-admin directory?

Improve this question
1
  • Security by obscurity is a joke...
    – Dan
    Jan 25, 2013 at 20:55

3 Answers 3

Reset to default
7

Renaming files will not make your blog more secure. Obscurity, hiding trivial information, is not a real security concept.

The index.php is safe. Make sure the file permissions are set correctly, and try to find the real security hole you had.

Improve this answer
3
  • All Files' permissions are 644, but hackers can change my wp admin password as easy as a pie :). Also I changed the .htaccess file to make my blog safer. however, I think the problem is related to wp security.
    – I left StackExchange
    Jan 25, 2013 at 12:21
  • 3
    No, hackers cannot just change your admin password – unless you are allowing this. WordPress wouldn’t be what it is if that were possible.
    – fuxia ♦
    Jan 25, 2013 at 13:07
  • 2
    If hackers can change your admin password there is a backdoor on your site or the server, or your password is something terrible like "password". You need someone knowledgeable to take a very close look.
    – s_ha_dum
    Jan 25, 2013 at 15:23
2

Make sure you have the latest versions of Wordpress, plugins and themes.

Never use pirated/cracked/nulled plugins or themes as they often have backdoors.

Older themes had a bug related to Timthumb. Try this plugin to check for the latest version (if you're using Timthumb).

You can also use a plugin like this one to get some more control over your website.

The problem may not come from WordPress itself, but it could also be that you've got a keylogger on your system. Read Hardening WordPress to get a general idea about what you should do.

Improve this answer
1

Renaming the index.php wont really help much.

What you really need is something like "Better WP Security": http://wordpress.org/extend/plugins/better-wp-security

Better WP Security takes the best WordPress security features and techniques and combines them in a single plugin thereby ensuring that as many security holes as possible are patched without having to worry about conflicting features or the possibility of missing anything on your site.

It's the number 1 plugin for Wordpress security.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.