August 23rd in Hack Prevention, Wordpress Plugins by Wordpress Jedi . Your WordPress login page is perhaps the most important page on your website. It is what keeps strangers (hackers) at bay. If your site credentials fall into the wrong hands, your business is going to be in trouble. Thankfully, there are plugins you can install to protect your login process against hackers and crackers. Here are 7 plugins that help keep your login process more secure:

Limit Login Attempts: one of the best ways to keep your site secure against hack attacks is by finding and banning the IPs belonging to hackers. This plugin will notify you of that information as soon as your site is attacked.

WP Login Security: requires all the admins on your website to register and whitelist their IPs. If an IP is not recognized, an email will be sent to the admin’s registered email address with a one time password. Adds another layer of security to your blog.

Login Lock: a complete login protection system that enforces strong password policies, monitor hack attempts, and even bans abusers. Allows forced logouts by admins. (more…)
2 Comments July 13th in Hack Prevention by Wordpress Jedi . I personally do not allow anyone to register for an account on any of my blogs. That approach does not always work though. Sometimes, you are forced to allow registrations on your website if you want it to grow and move to the next level. Most users will respect your website and won’t try to mess with it. But dealing with rogue users should be at the top of your agenda. These 10 plugins let you handle abusive users and keep your business protected:

User Locker: sometimes people just forget their credentials and try different username/passwords out of desperation. But brute force attacks are very real, which is why you should ban abusers with this plugin.

User Spam Remover: this is a powerful plugin that can clean out your database from spammers and accounts that have not been used since their creation. You do have the option to define the time period after which inactive accounts are removed. (more…)
0 Comments June 15th in Anti-Spam, Hack Prevention by Wordpress Jedi . Those who do not have a highly popular website probably do not get too many hack attacks on their websites. But as soon as your website starts getting any decent amount of traffic, you are going to see an increase in the number of attacks on your website. Installing a few security plugins and taking precaution with your sensitive data can go along way towards keeping your site secure against these types of attacks.
Adding a firewall to your WordPress install is one way to keep hackers out. Firewall plugins keep hackers and their queries from messing with your site and its database. No blog is hack proof. But the more difficult you make the process, the less likely it is for your website’s walls to get breached. These 6 firewall WordPress plugins let you do just that:

WordPress Firewall 2: a powerful firewall for your WordPress site that investigates requests and blocks the most obvious attacks. It protects your plugins as well. Best of all, it informs you when your site is being attacked. Sometimes, this could be too strong though.

Block Bad Queries (BBQ): takes care of suspicious URLs to keep your blog secure against malicious URL request attacks. Works great on older WordPress versions too. (more…)
3 Comments April 5th in Free Plug-ins, Hack Prevention by Wordpress Jedi . In a perfect world, we’d all be able to share our contact information on our websites without having to worry about spammers. Spamming is a serious crime, but that does not stop people from doing it. Some of these spammers do give their victims the chance to opt out of their e-mail lists. Others are more vicious when it comes to using e-mails they scrape from websites. If you intend to share your e-mail address on your website, you should install Cryptx or WordPress to keep your contact information protected.

Spammers use web bots to go through your website and mine e-mail addresses. While they don’t have permission to send e-mail to these addresses, they do it anyway. CryptX allows you to hide your e-mail addresses by using Javascript and Unicode. It covers both regular and mailto e-mail links. The plugin allows you to apply it to your content, comments, and other sections of your website.
(more…)
0 Comments August 12th in Free Plug-ins, Hack Prevention by Wordpress Jedi . WordPress is a great platform for blogs and portals. A ton of people use this platform to bring their content online and share it all with the world. Unfortunately, that means you are going to have to deal with hacks attacks more often than those who are using an obscure platform. While the WordPress community is vigilant and on the top of major attacks, it can’t stop them all. That’s why all WordPress webmasters should take time to secure their blog to reduce the chances of their blog being hacked. You can’t stop all attacks, but you can surely make life difficult for hackers.
Secure WordPress is one impressive plugin that takes care of those small little details on your blog and lets you focus on more complex measures. For starters, it gets rid of tool-tips and those little error messages that hackers look out for. It gets rid of WordPress version information as well.
(more…)
0 Comments April 16th in Hack Prevention by Wordpress Jedi . WordPress is a great platform to start your blog with and even manage a large portal. But it’s not perfect. There are many ways hackers can find ways to gain control of your WordPress blog. The last thing you want to have on your hands is a hacked WordPress blog. For instance, did you know that your WordPress blog can be exposed to hack attacks if you proudly display its version on your website? If you have registered users or multiple authors on your blog, there are going to be even more issues you will have to deal with. Secure WordPress Plugin is a free security add-on for WP that lets you address some of those small issues on your blog.
Secure WordPress Plugin enables you to reduce hack attacks on your blog by protecting your installation information and plugin lists. It automatically adds an index.php file to your directories to make sure hackers can’t gain access to your plugin list to use known security wholes in some of them. It also removes theme, plugin, and core update information from non-admins. It can even protect your blog against malicious URL requests.

(more…)
0 Comments May 25th in Hack Prevention by Wordpress Jedi . 
WordPress is a great content management system that has somewhat leveled the playing field by allowing almost anyone to start a sophisticated blog without having to spend thousands of dollars developing a CMS from scratch. When you get started with blogging, you are probably not going get so many visitors. The early days are always going to be tough. But the last thing you want to do is take fundamental things for granted. By that I mean you shouldn’t assume for a second that just because you are not getting a lot of traffic, hackers are going to leave you alone. Your WordPress blog can be used by hackers to link out to their web properties or even as a tool to put harmful content on your users’ computers. Running a WordPress blog is a big responsibility, and you shouldn’t cut corners and forget about taking proper measures to keep your blog secured.
User Locker is a cool little plugin for WordPress that lets you protect your admin page against brute force and dictionary attacks. If you have a short password, your WordPress install can easily get hacked by a brute force attack. However, by using User Locker, you can lock users out after a few number of invalid tries.

I would encourage you to set this number to 3. Three tries should be enough for your users to get their username/password set right. And if they are who they say they are, they should have no trouble having their accounts activated again. They can always user the password lost feature to recover their password and unlock their account. In general, I am not a fan of allowing user registrations on my blog. It’s just too risky. But if you have to, you better make sure you take proper measures to protect your blog against hack attacks.
Download User Locker now. It’s free!
0 Comments