You must be logged in to access that page

You need some serious password protection if you have a WordPress blog.Aaargh

Your wp-admin directory is not the only part of your blog that needs protection...plugins, scripts, includes and content can all be hacked.

I'm paying more attention to this now because one of my blogs got hacked last week. Hundreds of invisible links for body part enlargement products and porn were attached to one of my blog posts, and the only reason I discovered the hack was because there were so many lines of code they crashed the post. I was lucky that only one post was affected.

Research led me to the AskApache Password Protect plugin. This is a BIG gun - the author says "It's like being surrounded by a small army, a sniper can still get you, but you can forget about the ground troops." It's simple enough to use - choose a username and password and you're done.

I also recommend Replace WP Version. This plugin removes your blog version so virus and worm programs that rely on software versions are foiled.

Login LockDown will record the IP address and timestamp of failed WP login attempts, and will disable the login function if a certain number of failed attempts are made. This prevents brute force password recovery.

WP Security Scan scans your WP installation for security vulnerabilities and suggests corrective actions.

While researching this post I found even more information on safeguarding your blog from Mircea Goia's post Is your Wordpress blog hacked?Why not upgrade to the latest version?

It's a matter of when, not if. Take these precautions before your blog gets hacked.

 
Post is included in group: Blogging & SEO
Post is included in group: Real Estate SEO
Post is included in group: Search Engine Optimization: An Hour a Day
Post is included in group: Content, Copywriting & Related SEO Strategies
Post is included in group: ActiveSEO

17 Comments on Stop Hackers: Protect Your WordPress Blog

JUL
03
2008
179,003 Points 6 Featured Posts Outside Blog

Kay,  Thanks for the info.  I just started a WP blog recently and have always been concerned about hackers.  This will be very helpful.  Have a great 4th.

2:41pm • #1

@Marc & Lynda - Happy 4th to you too!

4:03pm • #3
JUL
07
2008
Outside Blog

Kay - THanks for the update. SO far I haven't had any problem with my wordpress blog, but who knows. By the way, love the picture.

10:03am • #5
JUL
08
2008

@Michael - actually, WP is awesome!

@Elizabeth - it's always a good idea to take precautions - I found out the hard way. That pic is one of my faves lol!

 

5:15pm • #6
JUL
17
2008

Michael:  if you have a regular site and not a blogsite, then stick with it. Sites based on open source softwares are vulnerable to hacking.

12:16pm • #7
JUL
19
2008
8 Featured Posts

Kay - sorry to see you were hacked and attacked. Our CEO has written extensively about business blog security - you might find some of his comments interesting.

While the security issues must be dealt with, I often wonder why so many real estate professionals take the time to [individually] develop the skills and expertise necessary to avoid having their marketing content decimated by a hacker. This is a very technical and complex segment of online business marketing, yet real estate pros are spending significant time discussing, analyzing, and learning how to defend their content.

I have to ask - has the interest in business blogging gone a bit too far when real estate agents are pondering which security scanning services to adopt and what password encyption patches will be sufficient to protect servers?

I remember some sage advice from Geoffrey Moore - core versus context - it's they key to profitability and growth. It seems that security patches are contextual to the real estate business and therefore, should be outsourced.

Call me puzzled - what real estate professional has the time to do this stuff instead of selling real estate?

11:11pm • #8
JUL
20
2008
2 Featured Posts Localism Sponsor

Kay, Thanks for the heads up.  It is so sad we have to spend so much time trying to protect ourselves from hackers, viruses, Trojans, etc, etc..

Pam

12:20am • #9
8 Featured Posts

Pam - that's precisely my point. You have many reasonable alternatives, but you assume you must become an expert at defending your blog from hackers and spend tons of time doing so.

When you need a backhoe to dig a foundation for your new home, do you assume you must design and assemble the backhoe? When you need to take a trip across the country, do you become a pilot? When your office needs new furniture, do you purchase the woodworking equipment and constuct it yourself? These are silly notions because you know there are far better (and cheaper) ways to accomplish the tasks.

So when you decide to market your business and expertise on the web, why is it that realtors [predominantly] assume they must become experts in every aspect of the web, especially the delicate issue of securing your mission-critical content? Is your time and expertise in real estate less valueable than your time and expertise in maintaining spam and hacker defenses? I assume it isn't, but your behaviors suggest otherwise.

When you adopt the delusion that you can outsmart the hacker industry or perform technical feats better than others that do it as a core aspect of their lives, you are fundamentally declaring that you're going into a new business and competing with organizations that are experts at taking advantage of people who possess far less knowledge and skill about security. Competing against these nefarious "professionals" on their turf is very risky because you are likely to get hacked and any time spent defending against it is lost opportunity to leverage what you do well.

Not to be insensitive, but I see a lot of realtors complaining about their industry, yet many realtors (perhaps most on AR) are busy trying to do tasks that they were never trained to do and in a technical environment that includes many ways to get it wrong, and only a few ways to get it right. And the majority of these technology tasks pay far less than you're worth as real estate professionals.

BTW, I'm not a realtor, but I'm very puzzled to see so many business professionals acting in this way. I'd love to hear from realtors that can explain why they typically choose to earn less in their chosen profession while struggling with technology issues such as security, defense systems, SEO, etc.

1:22am • #10

Bill, I understand your frustration. My thinking is that with the market the way it is, most are struggling to get by and don't have the money to pay others to perform SEO services, supply blogging platforms, etc. If my faucet drips and I don't have the money to hire a plumber, I'll attempt to fix it myself, whereas if I've got the money I'm more than happy to call someone who knows what they're doing.

I've had real estate agents contact me asking for help, but even when I offer them a relatively inexpensive package (inexpensive because they have to do a certain amount of the work themselves under my direction) they back off. Now would be the time for them to take advantage of this, since they do have more time on their hands, but I assume it's because they're fearful of spending the money in this market, or don't have it.

Readers, if I'm wrong let me know, but that's my take on this.

11:39am • #11
8 Featured Posts

Kay:

Thanks for the help in understanding this behavior. More follow up comments and observations...

"... with the market the way it is, most are struggling to get by and don't have the money to pay others to perform SEO services, supply blogging platforms, etc."

True, I'm sure some of the behavior can be attributed to recent market conditions, but long before the market tanked, this sentiment prevailed. In 2004 I recall pitching my own advertorial services to a prominent realtor in Denver - he said with all the Internet stuff that's "free", why would/should he ever consider paying for it? Almost in the same breath, he chastised me for even thinking about selling my home without a realtor. And there's my point - realtors seem to swagger with a certain degree hypocrisy; i.e., it's absolutely foolish to even ponder selling your home yourself, yet they readily jump in with both feet to solve technology problems that typically only get worse and in many cases place their blogging, websites and all the little details of running servers ahead of important [real estate] business matters. I don't get it.

"Now would be the time for them to take advantage of this ..."

According to some of the smartest business advisors, "now" is never a good time to engage in business tasks that are contextual. All businesses [all the time] should carefully decide where the line between core and context is drawn in their businesses. This is not theory - it's the science of profitability.

"... since they do have more time on their hands, but I assume it's because they're fearful of spending the money in this market, or don't have it."

I understand how apprehensive many must be, but I've learned that the moment a business starts to perform tasks that should be outsourced, they have fundamentally devalued their own skills and profit-making machinery. This, I think, is how you hasten the demise of the business, and the time-line is especially hastened in bad times.

PS - I hired a realtor to sell my property and she did a fine job. ;-)

9:14pm • #12

Bill
I Have addressed the same issue of Do it your own or SEO consultant in my blog post also. Many times I hear my clients asking me if they can learn & do SEO themselves. I have to make them understand that
1) SEO like every job in the world is specialised
2) If client has enough time & energy to learn and apply SEO, and feels that his/her time is worth less than US$ x that i charge , then probably they should go ahead with it. 

Even if Market is bad, you cannot risk your business. Companies which are able to survive tough times are the ones which prosper when good times return. Now is time to use every tool to get that lead, query. Websites are becoming major and cheapest way of getting leads. Websites cannot be just promoted by Blogging. There are many differnt ways. My advice, get professional help.

9:51pm • #13
8 Featured Posts

Aniruddha...

Yes - I've seen your posts from time to time, and I really appreciated this quote:

"Sites based on open source softwares are vulnerable to hacking."

Not many people truly understand the nature of open-source projects and why security is typically an "afterthought". Architecting anything where security comes second, is simply a ticking time-bomb. Imagine designing and building a high-rise apartment complex, and once it's up, you decide to add security. ;-) It's a huge problem integrating it into the design of the building and you'll never really get it right. This happens often with open source platforms, especially ones whose embryos began with open publishing to the public Internet.

"If client has enough time & energy to learn and apply SEO, and feels that his/her time is worth less than US$ x that i charge , then probably they should go ahead with it."

I disagree - in the context of any businesses decision to perform contextual tasks, it's irrelevant what *you* charge. What *is* relevant to the economic model is that doing it themselves is likely to earn (or defray costs in) an amount *far less than* that which they could earn doing what they already know how to do well. To be precise about the true cost of anything - even things that are seemingly "free" - must factor in the learning time and the costs associated with doing many things wrong during that learning cycle. Add to that cost, the opportunity cost of not working one more real estate lead, or not attending one more chamber of commerce mixer, and you start to get .close to the true cost of twiddling with your blog skin, or tweaking your security methods. No business is immune to this reality.

My hunch is that your fees are based on many of the costly mistakes that allowed you to become good at what you do. Your fees likely represent a recovery in that investment as much as it is an hourly consulting fee to remain profitable. Real estate agents must also live under these fundamental economic rules, and the cost of having a server hacked and your blog down for a few weeks is money and time that must be added to the true cost of using "free" software.

In my opinion, any business using "free" (or almost free) as a reason for choosing any contextual business activity, simply hasn't calculated the true cost of that choice.

Of course, I am biased - I sell services that help businesses avoid becomming "bloggers" while participating strongly in the conversational web. ;-)

10:15pm • #14
NOV
30
2008
2 Featured Posts Localism Sponsor

Thanks Kay! I am going to try some of the other plug ins as well as make my password much stronger!!  Mine got hacked awhile back but assumed it was because I had not upgraded my version fast enough. Guess it could have been the password!  I found out by looking at the keywords people were using to find my site.

10:34am • #15
DEC
01
2008

Similar to Replace WP Version, we have Remove Generator Link running, which is simple and does the job.

10:14pm • #16
DEC
09
2008

I am new to AR and have a wordpress site. I'm so glad I found this post. Thanks.

11:09pm • #17

Leave a response…



(optional)
What does the graphic say?
 
Kay Rainmaker_large

Kay Frenzer-Zeeh ~ Real Estate SEO

Chandler, AZ

More about me…

SEO Diva Search Engine Optimization

Address: Chandler, AZ, 85224

Cell Phone: (602) 743-0207

Email Me

Get great free widgets at Widgetbox!


Links

Archives

RSS 2.0 Feed for this blog