Connect with us

Tips & Tricks

WordPress Security Hacks

Hi guys this is my first post on wpcult the great site Austin built.  Hope you guys find it usefull.

If you run a blog using the wordpress software then your blog is a target to hackers.  Below I will list some hacks and just how they can help you keep your business/site safe.

The following is  code to Block Bad Queries and protect your blog from malicious URL Requests.

Place the following code into a text file and name it what ever you like for example blockbadqueries.php upload it to your plugin folder and activate it in your wordpress admin just as you would any other Plugin

<?php
/*
Plugin Name: Block Bad Queries
Plugin URI:
http://perishablepress.com/press/2009/12/22/protect-wordpress-against-malicious-url-requests/
Description: Protect WordPress Against Malicious URL Requests
Author URI:
http://perishablepress.com/
Author: Perishable Press
Version: 1.0
*/
global $user_ID; if($user_ID) {
  if(!current_user_can(‘level_10’)) {
    if (strlen($_SERVER[‘REQUEST_URI’]) > 255 ||
      strpos($_SERVER[‘REQUEST_URI’], “eval(“) ||
      strpos($_SERVER[‘REQUEST_URI’], “CONCAT”) ||
      strpos($_SERVER[‘REQUEST_URI’], “UNION+SELECT”) ||
      strpos($_SERVER[‘REQUEST_URI’], “base64”)) {
        @header(“HTTP/1.1 414 Request-URI Too Long”);
 @header(“Status: 414 Request-URI Too Long”);
 @header(“Connection: Close”);
 @exit;
    }
  }
}
?>

 This Great plugin was made by Jeff Starr of Digging into WordPress

 

 

Protecting your blog with .htaccess 

.htaccess files have lots of possibilities. below is some code that will help protect your wordpress from modification of _REQUEST and/or GLOBALS and scripts injection.

 This is real simple just paste the following code into your .htaccess file. Always make a backup of your .htaccess before editing, better to be safe.

Options +FollowSymLinks
RewriteEngine On
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
RewriteRule ^(.*)$ index.php [F,L]

 

Thanks to Oussama for this great hack

Random Search Terms

Title

Top Articles

Top Searches

powered by WassUp

Recent Posts: Fully Net Worth . com

Albert Haynesworth Net Worth: How Rich is Albert Haynesworth?

Albert Haynesworth Net Worth: How Rich is Albert Haynesworth?

An American football player, Albert Haynesworth is known for his defensive tackle position. As of 2019, Albert Haynesworth net worth is estimated to be around $41 million. The 38 years old (June 17, 1981), Albert Haynesworth stepped in sports arena from his high school. In his high school, he took part in football, track and […]

Sandy Mahl Net Worth: How Rich is Garth Brooks’ ex-wife?

Sandy Mahl Net Worth: How Rich is Garth Brooks’ ex-wife?

Sandy Mahl is an American businesswoman. She is known to many as the ex-wife of country music star Garth Brooks. As of 2019, Sandy Mahl net worth is estimated to be $125 million. Sandy was born on January 16, 1965, in Tulsa, Oklahoma to parents John Mahl and Pat Mahl. Sandy is now a wildlife […]

Scott Fischer Net Worth

Scott Fischer Net Worth

Scott Fischer, depending on which one you are searching for. Instead, it is the famous hiker that died in 1996, or Scott Fischer, CEO of Dippin Dots, LLC, and Dippin Dots Cryogenics.  In this article we will be talking about the Dippin Dots CEO, Scott Fischer, who went on the hit show Undercover Boss we’re […]

%d bloggers like this: