Protecting your site from idiots that would like to abuse it is important. There are plenty of changes that you can make to protect it. Here we look at some essentials.
WordPress is a good solid tool for blogging, but as with any tool, especially such a popular one with open code, security breaches are likely. It is therefore indispensable that you make some simple changes to protect your weblog and keep it secure.
Keep Up To Date
The most important security step is very easy. Ensure that you are on the most recent version of WordPress available. As security problems are detected they are fixed in new releases. So if you do not have the existing version installed, get a copy and install it now! I know a few people like to wait a while before using a new release so that problems can be ironed out, but with the release candidate process thatWordPress goes through, these problems should be minimal so I start my upgrades within a week, upgrading the least crucial sites first, as tests.
Delete Your Administrator
The first change should be your admin id. From WordPress 3.0 when you install your website you could select a separate user id to the default name of ‘Admin’. I do recommend using something separate! If you are still using Admin, create a new user with Admin rights, log off, log on as the new user and delete Admin. You will be given the opportunity of moving all posts created by Admin to another name, so you might choose the new administrator.
Give Yourself A Nickname
Now, change your nickname! If your Administrator id is Fred and you display that the posts are written by Fred, you have given the game away. So give the userid a different nickname to the signon name. If you want to go a step further, you might create a new user and only give it author status and use that for adding new posts, keeping the administrator safe for when you need to upgrade the system. This means that if you areblogging away from home and someone gets your sign on details, they cannot change any of the admin side of your bog.
Activate Akismet
This brilliant plugin used to be optional, as with other plugins, but is so useful it is now packaged with WordPress. You must sign up for a Wordress userid and get an API key, but then you might activate the plugin and be protected from Spam comments, which will be automatically removed. However, you should check for false positives where valid comments are detected as Spam.
There are a lot more changes you can make to your website to secure it, depending on how you are operating. For example, if you are running manyblogs on one hosting package and one MySQL database, you may like to create a new database userid that has less permissions than a database administrator and altering wp-config to use that database user. But, when you upgradeWordPress and install certain Plugins, you might need to go back to an administrator level.
![[Valid RSS feed]](http://article2008.com/images/feed-icon.png "XML Feed For RSS"){kind=icon}
![[Valid RSS feed]](http://article2008.com/images/icon_Rss.png "XML Feed For RSS"){kind=icon}
Category Rss Feed
Print This Article
Add To Favorites