Categories: Tips & Tricks

WordPress Security Hacks

Hi guys this is my first post on wpcult the great site Austin built.  Hope you guys find it usefull.

If you run a blog using the wordpress software then your blog is a target to hackers.  Below I will list some hacks and just how they can help you keep your business/site safe.

The following is  code to Block Bad Queries and protect your blog from malicious URL Requests.

Place the following code into a text file and name it what ever you like for example blockbadqueries.php upload it to your plugin folder and activate it in your wordpress admin just as you would any other Plugin

<?php
/*
Plugin Name: Block Bad Queries
Plugin URI:
http://perishablepress.com/press/2009/12/22/protect-wordpress-against-malicious-url-requests/
Description: Protect WordPress Against Malicious URL Requests
Author URI:
http://perishablepress.com/
Author: Perishable Press
Version: 1.0
*/
global $user_ID; if($user_ID) {
  if(!current_user_can(‘level_10’)) {
    if (strlen($_SERVER[‘REQUEST_URI’]) > 255 ||
      strpos($_SERVER[‘REQUEST_URI’], “eval(“) ||
      strpos($_SERVER[‘REQUEST_URI’], “CONCAT”) ||
      strpos($_SERVER[‘REQUEST_URI’], “UNION+SELECT”) ||
      strpos($_SERVER[‘REQUEST_URI’], “base64”)) {
        @header(“HTTP/1.1 414 Request-URI Too Long”);
 @header(“Status: 414 Request-URI Too Long”);
 @header(“Connection: Close”);
 @exit;
    }
  }
}
?>

 This Great plugin was made by Jeff Starr of Digging into WordPress

 

 

Protecting your blog with .htaccess 

.htaccess files have lots of possibilities. below is some code that will help protect your wordpress from modification of _REQUEST and/or GLOBALS and scripts injection.

 This is real simple just paste the following code into your .htaccess file. Always make a backup of your .htaccess before editing, better to be safe.

Options +FollowSymLinks
RewriteEngine On
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
RewriteRule ^(.*)$ index.php [F,L]

 

Thanks to Oussama for this great hack

Miguel

Well been working with computers since the mid 80's and online since the late 80's early 90's so I am one of the older guys even though I am only in my early mid 30's ;) I feel alot older , I have worked in many different fields and am currently running companies in Mexico that both secure government contracts and Finance, have been involved in the finance part of many projects over the last few years and have so far been succesfull in all endevors, don't get much free time but when I do I would like to start rebuilding this site that I bought from Austin,since I am not a programer I will probably be writing about all kinds of things wordpress, security, seo, marketing, making money online, hosting, news, technology, bussiness, social networking and what ever comes to mind, when ever I get the chance to blog

View Comments

  • Great article. It is always good to add in extra layers of safety, especially when it comes to protecting your business or name.

  • I am an electrical & electronics engineer, and i am thinking about joining APPIN institute of ethical hacking & IT security bcoz I am interested in this field, so will there be better career options for me in this field after having an international diploma certification in ethical hacking?

  • Great post, and hope you keep writing for the site. We are moving our site to Wordpress so will be implementing these tips to keep it secure.

  • Thank you for the code, I was looking for something like this for long, my website has been hacked once and I needed something urgently to safe guard, shall try this. Thanks !

  • This has happened to me once before. Thanks for sharing this information, it's always good to be cautious about these things and keep our websites protected. For a lot of people it's their livelihood!

  • Hey, thanks for the good tips. Am always in search of good safety information for Wordpress. They are easy to implement even for beginners.

Recent Posts

Lost? Since You Can’t Trust Apple Maps, Check Out These 3 Apps Instead

Maybe you have the new software on your Apple device that has made headlines as…

3 hours ago

An Overview Of Business Models

Knowing Where To Start There are a number of conceptual business models that are used…

9 hours ago

Google’s New Tool For Bad Links

Google recently announced it has launched its Disavow Tool which allows webmasters to alert Google…

21 hours ago

5 Reasons Why You Should Or Should Not Use WordPress Plugins

Depending on your needs, WordPress plugins are the best and worst aspects of WordPress. The…

1 day ago

Adsense Pro Ultimate – Top Selling CTR Worpress Theme Review

Classic CTR Themes For WordPress have made it pretty easy to build informational websites using…

2 days ago

How to Incorporate a Website into Your Website Marketing Efforts

In today's techno-centric culture, you simply must have a business website, no matter how small…

2 days ago