{"id":496,"date":"2014-08-15T06:42:14","date_gmt":"2014-08-15T14:42:14","guid":{"rendered":"http:\/\/www.smarttofinish.com\/Blog\/?p=496"},"modified":"2014-08-15T06:42:14","modified_gmt":"2014-08-15T14:42:14","slug":"preventing-wordpress-hacks","status":"publish","type":"post","link":"https:\/\/smarttofinish.com\/Blog\/2014\/08\/15\/preventing-wordpress-hacks\/","title":{"rendered":"Preventing WordPress Hacks"},"content":{"rendered":"

It seems like a day does not go by where I have not read a headline that involves a website being hacked. The ones that make the headlines are big hacking situations. I had to change my own debit cards after shopping at Target not too long ago. Some other memorable hacks include Citibank<\/strong>, NASA<\/strong>, and Sony<\/strong>, which included the PlayStation3<\/strong>. <\/p>\n

However, often hackers simply hack for the fun of it, and they hack anything and everything, including small to medium websites. In my 17 years as a web developer, I have had five clients report damage to their websites from hackers, and I want to provide you the same tips I have provided them to keep their sites safe.<\/strong>
\n<\/p>\n

Back-up your Website<\/u><\/strong><\/p>\n

Back-ups are so important!<\/em> Read the fine print from your hosting company. Do they offer back-ups? If they do, is it a daily back-up that is written over once every 24 hours? If so, and you don\u2019t catch it immediately, your latest back-up becomes the hack.<\/em> It\u2019s also worth checking out, but my experience is that 90% of hosting companies do not guarantee the back-up.<\/strong> Ultimately in the end, it\u2019s your responsibility.<\/strong> I would recommend at least a weekly back-up from your server downloaded to your local computer. Also, there are plugins available for WordPress, but a majority of them leave out certain pieces such as images. If your site is completely deleted, these plugins will not be available to create the back-up. A server side back-up is the only fool-proof back-up available.<\/strong>
\n<\/p>\n

Strong Passwords<\/u><\/strong><\/p>\n

I know it is so much easier to remember your middle name and your date of birth, but that\u2019s just not enough in today\u2019s hacking world. Your passwords should be at least 10 digits<\/em> and should include both upper case and lower case letters, numbers and special characters. They should look something like this: nY6V+u@>^\/2zyuj.<\/strong> You should also use a different password for everything and change them often. I know\u2026.I also struggle with keeping them straight, so I use a product called RoboForm.<\/strong> I use a master password (one that is really difficult) each time I login to a URL. I am asked for my master password, and RoboForm then encrypts the real password for that site and fills it in. The benefit is that I don\u2019t have to remember hundreds of passwords.<\/em> They are encrypted in case some malware has gotten into my computer; the keystrokes can\u2019t be seen, nor can the password be seen on screen.<\/p>\n

Keep Up with Patches and Updates<\/u><\/strong><\/p>\n

WordPress plugin patches and updates are created to fix security holes and functionality, and should be updated often and as quickly as possible<\/strong>, and themes should be updated to the latest versions. Old plugins should not only be deactivated, but removed if not being used.<\/strong><\/p>\n

Remove Inactive Users<\/u><\/strong><\/p>\n

Remove any old, inactive users that no longer use your site. Many times users have weak passwords, and that can cause vulnerability to hacking. <\/p>\n

Smart to Finish Office Solutions<\/em> provides WordPress Maintenance<\/strong> for many of our clients, which includes the items listed above. Other services that we can provide to keep your WordPress site from being hacked are: <\/p>\n