Comments on: Protecting Your WordPress Blog

By: 5 Steps You Must Follow to Enhance Protection

5 Steps You Must Follow to Enhance Protection — Sun, 22 Jun 2008 16:31:35 +0000

[...] Protecting Your WordPress Blog [...]

By: Zabezpiecz swój blog | zielony bloger

Zabezpiecz swój blog | zielony bloger — Fri, 20 Jun 2008 22:56:32 +0000

[...] przez GoogleReadera o nowym wpisie na blogu Lorelle - dotyczy tej samej tematyki i znajdziecie jeszcze więcej porad pomagających w zabezpieczeniu i bezpiecznym korzystaniu w bloga opartego na systemie WordPress. [...]

By: Otto

Otto — Thu, 12 Jun 2008 14:15:03 +0000

Note that removing the generator is not quite as easy anymore. If you really want to do it, it can be done, but WordPress changed to unify the generator tag in the core instead of letting it be all over the place.

This code in a plugin or the theme’s functions.php will do the trick:
add_filter(’the_generator’,create_function(’$a’, “return ”;” ));

That filters the generator function to return nothing at all, eliminating the generator code from *all* locations where it’s output.

By: Lorelle VanFossen

Lorelle VanFossen — Tue, 10 Jun 2008 15:24:07 +0000

@ UP:

Removal of information on which version of WordPress you are using is a very good idea. The less information you give to the potential hacker who searches for that information in order to exploit vulnerabilities, the better. Is that what you are talking about?

By: UP

UP — Tue, 10 Jun 2008 04:43:09 +0000

Re: this advice: “Remove the Version Meta Tag” -> There’s no point in doing this. The WP version seems to be readable from wp-links-opml.php, wp-rss.php, wp-commentsrss2.php, wp-version, wp-rdf.php and wp-rss2.php as I found out today from the WP security scanner here: http://blogsecurity.net/cgi-bin/wp-scanner.cgi

By: אבטחת הבלוג ניסיון שני » ITbananas

אבטחת הבלוג ניסיון שני » ITbananas — Thu, 05 Jun 2008 00:45:05 +0000

[...] של וורדפרס: Hardening WordPress הגנה על וורדפרס בלוג מאת לורל: protecting-your-wordpress-blog נוספים:How WordPress Blogs Are Hacked five wordpress security essentials Security Tips and [...]

By: Gus SOS Brasil » | » Proteger Seu Blog Wordpress de Hackers Parte 2 - Segurança

Sun, 16 Mar 2008 02:28:35 +0000

[...] dicas foram reunidas de vários blogs que li como da Lorelle, Matt Curtts e outros tutoriais que [...]

By: Ness

Ness — Sat, 16 Feb 2008 15:00:28 +0000

They have fixed most of the known vulnerabilities but Who knows! Update guys, both blog and content!

By: Varun Pratap

Varun Pratap — Fri, 08 Feb 2008 06:05:23 +0000

That’s a great post. I once had to deal with this kind of nightmare(now I think it it over I think it was twice in one month)… I shudder at the thought of happening it again.

If you are working with right people (and good hosting services), they can help you a LOT. All of these tips above can actually help you a lot…

Varun Pratap

By: Guarding Your Wordpress Blog | BPWrap

Guarding Your Wordpress Blog | BPWrap — Fri, 08 Feb 2008 00:49:36 +0000

[...] 5 WordPress Security Essentials - Lee Robertson How to Protect Your WordPress Site - Anita Campbell Protecting Your WordPress Blog - Lorelle Technorati Tags: Blogs, hacker, plugins, security, upgrade, [...]