If you are running a multi-author WordPress site, you should set WordPress to automatically log out idle users. Idle or inactive users can cause brute force attacks. When a user stays inactive for too long after logging in, hackers may run a session or cookie hijacking method to gain unauthorized access to your site. This is […]
Continue reading
WordPress updates are so important and you should always update your WordPress version, plugins, and themes. With every update, WordPress adds some features, improves security, fixes bugs and much more. The good thing about self-hosted WordPress is that you will be automatically notified if there is an update available. It is very easy to update […]
Continue reading
In the earlier, XML-RPC was disabled in WordPress for security purpose and there was an option to turn it on. After WordPress version 3.5, XML-RPC is enabled by default and developers also removed the option from WordPress admin dashboard. Where XML-RPC function is used for many purposes but it can be the cause of brute-force attack […]
Continue reading
During WordPress installation, it asks you if you want to change your database table prefix “wp_” to something. We usually skip this thing, so WordPress automatically creates a database with its default table prefix “wp_”. Many WordPress users often ask how to change WordPress database table prefix. They believe by changing the default table prefix in WordPress will improve their site security. According to WordFence, […]
Continue reading
Installing WordPress is a very easy process and it takes only a few minutes to set up. However, in that quick process, we usually use “admin” as a default admin username for our WordPress site. Once we ready our site, we hardly change our password or the default WordPress admin username. But, it becomes a […]
Continue reading