Defend Your Blog: Scan For Vulnerabilities
I hate to do it. Tempt the fates that is. After weeks of effort, lost time, missed billables, disappointed clients and frustrated days — I think I am free. Virus free that is.
And even as I am writing this post, I feel a tremor in my loins. A quick check of my site in my FTP program shows a cache directory I didn’t update! Run the file permissions recursed into subfolders and update the .htaccess file to protect the directory. Am I ready? Maybe.
Not sure why some people feel the overwhelming need to trash someone else’s hard work, but it’s a fact of life. And one you better be prepared to guard against.
To help you with this, I have been posting some Defend Your Blog type posts. Today is the latest one, a new plugin I found that will help you evaluate your security and make suggestions where you are vulnerable.
WP Security Scan
WP Security Scan will scan your Wordpress installation for security vulnerabilities and suggest corrective actions. And though some of the suggestions are a little vague, some are spot on and specific.
This plugin checks:
- passwords (for strength)
- file permissions within your installation
- Database security
- Version hiding
- Admin protection and security
For me, this was an education on additional things to do to my site to secure it, and now that I know what to do, I will be doing these things on other blogs without installing the plugin. Just one or two blogs? Install WP Security Scan and follow what it says!
![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_b.png?x-id=5a27c3cf-d800-44df-8320-05be383feb64)
About The Author
Cenay Nailor is an Online Marketing and Blogging coach with mad technical skills she loves sharing with Videos. Visit her video tutorial blog and get some technical help. You should also snag the weekly injection of Tech-Based Marketing Newsletter, and have it sent right to your inbox. (Upper right corner)
Related Geeky Articles
If you enjoyed this post, make sure you grab the RSS feed!
This entry was posted by Cenay Nailor, and is filled under Defend Your Blog. Follow any responses to this post through RSS 2.0. You can leave a response or trackback from your own site.
PDF
All blog content is released via creative commons license except where specifically stated otherwise.
Posting content contained in this blog fully permitted and encouraged if content is
published unchanged, the byline is included in the reproduction, and the post title links to corresponding
blog post webpage.Write Eye Catching Headlines In 32.4 Seconds
about 7 months ago - 4 comments
As you navigate the world of Internet Marketing, one thing should be becoming very clear to you. In fact, if this one single fact isn’t in stark relief in your mind, you might be in the wrong business.
Copywriting Is The Million Dollar Skill
Seriously. You need to convey/convince/entice your readers/buyers/customers to take an action. Read an article, buy a product, download a book….whatever.
But before you can even start on that message, you have to convince them to read your content. And we all know that starts with a headline.
Headspace2 Tutorial: Exploring SEO Through Plugins
about 7 months ago - 25 comments
A recent coaching session covered the SEO benefits of installing and using Headspace2 to increase your Online Marketing and Personal Branding. As members of that call will recognize, about 45 minutes was cut from this video. All the wasted time on technical difficulties is gone. Areas where the information was repeated (as in answering questions or covering the same concept on a different part of the call) were removed or spliced together to provide a single explanation.
<
Fix The Wordpress Blank Page Error
about 8 months ago - 7 comments
So, has this happened to you? You install a new upgrade or plugin, and suddenly, various places within your dashboard no longer work? You happily click the Dashboard | Posts | Edit link to be greeted by a stark white and completely empty page.
I know. Me too.
And like you, I started Googling the answer, only to find there were dozens of “solutions” out there, and not one of them helped me. I will, for the sake of consolidating the answers into one convenient place, assemble those other solutions as well, but here is what worked for me.
Protecting Your Blogs FTP Area
about 9 months ago - 1 comment
Some %$@#$>%$@#$#^& found/hacked/stole your FTP account password. Now what? Well, change it of course, but that might not be enough.
(Can you feel my self restraint in not actually swearing?)
Here is a simple method you can use to prevent anyone other than you from uploading or downloading files.
Defend Against The Bot’s
about 9 months ago - 6 comments
(Part of an ongoing series on protecting your most valuable asset in your online marketing arsenal, your Wordpress blog)
Sabre: Simple Anti Bot Registration Engine
Sabre is an acronym for Simple Anti Bot Registration Engine. It’s a set of counter measures against spam registration on your blog.
Your visitors are granted permission to register freely on your blog and now you are plagued by fake users automatically created by spammers?
Firewall For Your Wordpress Blog
about 9 months ago - 13 comments
(Part of an ongoing series on protecting your most valuable asset in your online marketing arsenal)
In the military, they call it “hardening targets” when they take steps to make it harder for the enemy to attack an asset. Here in the real world, it’s hard to think like that. But not thinking like this could cost you time, money, reputation and frustration.
I know from first hand experience.
When I started this series, it was in response to the attack my personal hosting account suffered. And because it was my hosting account, and not a single blog, but rather every single one of my sites was hit.
Take my advice and harden your assets now.
18 Wordpress Plugins I Can Not Live Without
about 9 months ago - 37 comments
I have been promising a list of my personal *must have* plugins that I install on any new blog. Today, that promise is kept.
These are the plugins I install on every blog I create, regardless of niche or specialty. There are a few that I add to certain types of blogs that will won’t be discussed, but you can get more information on these in my book, the Ultimate Guide To Wordpress Plugins.
They are listed alphabetically, not in the order of installation.
Each of these plugins play nice with all the plugins listed here. No animals were harmed during the making of this list.
Your Blog Is At War, Help Defend It
about 10 months ago - 7 comments
Yep, you heard me right. Spammers, hackers, trogans and viruses… it’s a jungle out there. And your blog is a sitting duck.
I have a series of suggestions I will be making over the upcoming days to help you defend this valuable asset in your online marketing arsenal, so stayed tuned. And if you haven’t grabbed the RSS feed yet, this might be a good time…
Redirection and 301 Via Plugin: Stop Leaking SEO and Visitors
about 12 months ago - 15 comments
Over time, your blog evolves (hopefully). This means category names change, posts are updated, files move or subdirectories are deleted. What happens when someone clicks a link to a post or file that is no longer there?
They get a 404 Error.
Even with a Custom 404 Error Page, you didn’t deliver the content they thought they were getting. So they might leave.
A Custom 404 Page : An Opportunity To Impress* Your Visitors
about 1 year ago - 29 comments
(* By impress, I mean engage, wow and help your visitors)
When something goes wrong on your site, your visitors will land on a 404 page, or to their way of thinking, the Twilight Zone.
Most standard Wordpress blogs come handily equipped with a 404 Page. The problem is it is absolutely worthless for helping your visitor get back on track.
There could be a variety of reasons they landed there:
about 6 months ago
I really like when people are expressing their opinion and thought. So I like the way you are writing