WordPress Plugin: Injection Attack Protector
There are a lot of types of security breaches that threaten your WordPress blog, and spam/malware injection seems to be the most popular of the lot. Fortunately there’s a plugin that helps prevent that called the Injection Attack Protector. This script allows to you to scan your site for possible injection attacks and even a heal tool for the compromised files.
Make sure to follow the given instructions for the plugin to work properly. You’ll need to know how to create a password-protected folder on your site and edit certain files thru a text editor.
Download Injection Attack Protector
Protect your WordPress blog with these plugins
With WordPress 2.8 out, that means it’s upgrade season for us. That also means older, unupdated versions of WP more vulnerable to attacks. Keith Dsouza of Weblog Tools Collection has a list of recommended anti-spam and antivirus plugins to help improve security on your blog:
Anti-spam WordPress Plugins
- Akismet
- WP-SpamFree Anti-Spam
- WP-Hashcash
- WP reCAPTCHA
- Math Comment Spam Protection
Security WordPress Plugins
- WP Security Scan
- WordPress Exploit Scanner
- AskApache Password Protect
- TTC WordPress Security Tool
- Secure WordPress
- WordPress Firewall
Check out the blog post for details and download links to each of the plugins listed above. Got any more plugins you can recommend? You can never have enough!
10 ways to secure your WordPress administration panel
Sergej Müller and Alex Frison on Smashing Magazine have written a 10-step guide to protecting and ensuring your WordPress admin area is as safe as can be. Here’s the list:
- Rename and upload the wordpress Folder
- Extend the file wp-config.php
- Move the wp-config.php file
- Protect the wp-config.php file
- Delete the admin User Account
- Choose strong passwords
- Protect the wp-admin Directory
- Suppress Error Feedback on the Log-In Page
- Restrict Erroneous Log-In Attempts
- Keep Software Up to Date
It’s best if you perform these safety measures right after installing WordPress, and add it to your routine in case you’ve got a slew of WP-powered sites.
