Connect with us

Tips & Tricks

WordPress Security Hacks

Hi guys this is my first post on wpcult the great site Austin built.  Hope you guys find it usefull.

If you run a blog using the wordpress software then your blog is a target to hackers.  Below I will list some hacks and just how they can help you keep your business/site safe.

The following is  code to Block Bad Queries and protect your blog from malicious URL Requests.

Place the following code into a text file and name it what ever you like for example blockbadqueries.php upload it to your plugin folder and activate it in your wordpress admin just as you would any other Plugin

<?php
/*
Plugin Name: Block Bad Queries
Plugin URI:
http://perishablepress.com/press/2009/12/22/protect-wordpress-against-malicious-url-requests/
Description: Protect WordPress Against Malicious URL Requests
Author URI:
http://perishablepress.com/
Author: Perishable Press
Version: 1.0
*/
global $user_ID; if($user_ID) {
  if(!current_user_can(‘level_10’)) {
    if (strlen($_SERVER[‘REQUEST_URI’]) > 255 ||
      strpos($_SERVER[‘REQUEST_URI’], “eval(“) ||
      strpos($_SERVER[‘REQUEST_URI’], “CONCAT”) ||
      strpos($_SERVER[‘REQUEST_URI’], “UNION+SELECT”) ||
      strpos($_SERVER[‘REQUEST_URI’], “base64”)) {
        @header(“HTTP/1.1 414 Request-URI Too Long”);
 @header(“Status: 414 Request-URI Too Long”);
 @header(“Connection: Close”);
 @exit;
    }
  }
}
?>

 This Great plugin was made by Jeff Starr of Digging into WordPress

 

 

Protecting your blog with .htaccess 

.htaccess files have lots of possibilities. below is some code that will help protect your wordpress from modification of _REQUEST and/or GLOBALS and scripts injection.

 This is real simple just paste the following code into your .htaccess file. Always make a backup of your .htaccess before editing, better to be safe.

Options +FollowSymLinks
RewriteEngine On
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
RewriteRule ^(.*)$ index.php [F,L]

 

Thanks to Oussama for this great hack

243 Comments

243 Comments

You must be logged in to post a comment Login

Random Search Terms

Title

Top Articles

Top Searches

powered by WassUp

Recent Posts: Fully Net Worth . com

Bikram Choudhury Net Worth: How Rich is the Yoga Teacher?

Bikram Choudhury Net Worth: How Rich is the Yoga Teacher?

Bikram Choudhury is an Indian-American yoga instructor best known as the founder of Bikram Yoga, a form of hot yoga performed in a series of 26 hath a yoga postures in a hot environment. As of 2019, Bikram Choudhury net worth is estimated to be $75 million. Choudhury was born on February 10, 1944, in […]

Matt Higgins Net Worth: 5 Interesting Facts You Should Know

Matt Higgins Net Worth: 5 Interesting Facts You Should Know

Matt Higgins is a celebrated man, who came from the downsides of life to the upper echelons of the world. An investor, businessman, innovator, top executive, and business advisor. Although he had a hard early life at the beginning, he never let background shackles deter him as he steadily moved his way to success. He’s […]

Luh Kel Net Worth: How Rich is the Rapper Actually?

Luh Kel Net Worth: How Rich is the Rapper Actually?

Turran Coleman, who is better known as Luh Kel, is an American singer and songwriter. He is best known for his hit single called “Wrong” which managed to peak at number 37 in the Billboard Hot R&B / Hip-Hop Songs chart and was certified Gold by RIAA in 2019. As of 2019, Luh Kel net […]