wordpress security

Enhancing WordPress security with two-factor authentication plugins

Jun 23rd, 2011

After a recent security issue with couple of popular WordPress plugins, we are again reminded that hackers never sleep and we should not forget to additionally protect our precious sites with available technology. I found three plugins that add a second level of protection when logging into your WordPress blog, either through mobile apps, email, [...]

2 Comments

WordPress Security Links

Mar 17th, 2009

WordPress Security links: WordPress Security Whitepaper Mod Security and WordPress WordPress Security Plugins: WordPress Firewall plugin WPIDS (PHPIDS port for WordPress) WordPress Antivirus

4 Comments

Improving security in WordPress plugins using Nonces

Nov 19th, 2008

Using a nonce (number used once) is the best way to protect your plugin against a cross-site request forgery (CSRF) hacker-attack. Nonces are used on requests (saving options in admin, Ajax requests, performing an action etc) and prevent unauthorized access by providing a secret 'key' and checking it each time the code is used. Nonces [...]

44 Comments

You Don’t Mess With Other Peoples Websites!

Sep 14th, 2008

The moment in Tarantino's "Pulp Fiction", when John Travolta says "You just don't mess with other peoples cars" implying what he would do to a guy who did, shows exactly how I felt this morning when I found out about new hacking attack on my site. Discovering the threat First clue was a comment from [...]

25 Comments

Critique View on the Future of WordPress

Sep 9th, 2008

WordPress is today by far the most widely spread blogging platform on the Internet. I am enjoying using WordPress since I made it my "weapon of choice" over Moveable Type and Drupal. I spent lot of time with WordPress and just love it. But that also gives me an opportunity to express some of my [...]

18 Comments

WordPress Security

Jul 18th, 2008

Very, very hot topic as a wave of WordPress blogs get's hacked every day. I made a dedicated page dealing with this issue. Go to WordPress Security Notes . Those are quick notes of things to check.