Although this security issue may be fixed in newer versions of WordPress, your truly screwed if your password gets cracked by a hacker. Since WordPress only requires one to get all the administrative privileges to your blog, it would be best to limit the /wp-admin/ folder to just yourself (by your IP address, see below). How you might ask? With .htaccess files.
The Fix:
*Note* – If you have a dynamic IP (meaning that your IP changes from time to time), this method will not work for you.. You could block yourself out of your own blog!
1. First, Determine your IP address from any free service, such as: WhatIsMyIp.com
2. Second, Download your .htaccess file from your blog server in the /wp-admin/ folder (Do NOT Replace it on your blog directory.. Only in the Wp-Admin Folder) and open it with Notepad++ (A free utility that makes coding and code editing a breeze).
3. Add the following code to the file:
AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName “Example Access Control”
AuthType Basic
<LIMIT GET>
order deny,allow
deny from all
allow from xxx.xx.xx.xxx
</LIMIT>
4. Replace xxx.xx.xx.xxx with your IP address you found on the WhatIsMyIp.com website
5. Save the file and reupload to your server, and you should have full access to your blog, but nobody else will because they don’t have your IP.
Now you have one less thing to worry about in terms of security, hope you’ve enjoyed this Saturday tutorial!
Credits: http://www.reubenyau.com/
Related posts:
- Weekend WordPress Security Tip: Index.html
- Weekend WordPress Security Tip: What To Do When Your Blog Is H4CK3D
- Saturday Weekend Security Tip: Remove This Useless Tag
4 Comments
Cool, but it seems can’t work for me because I don’t have a dedicated IP address. In other words, my IP is dynamically changed. But this is a good tip to protect our wp blog.
Armand’s last blog post..Google Adsense Website Temporarily Down
@ Armand – Yea, No system is perfect, but since I have a dedicated IP, it works out well. I thought I’d pass the info on to someone that has a dedicated IP for some extra security
Yeah that seems like a good way to prevent hackers. Unfortunetly it would not work for me since I write my blog posts from all over the place. I rarely use the same ip, or laptop for that matter. But it is still a goot idea.
Here is more information please check it : http://www.google.com
One Trackback
[...] it up in Notepad++ (That I Recommended Last Post) and find the line that says: meta name=”generator” content=”WordPress <php [...]