Protecting your website from idiots that would like to abuse it is important. There are stacks of changes that you might make to protect it. Here we look at some essentials.
WordPress is a good solid tool for blogging, but as with any tool, especially such a popular one with open code, security breaches are prospective. It is therefore essential that you make some easy changes to protect your weblog and keep it secure.
Keep Up To Date
The most crucial security step is very easy. Make sure that you are on the most recent version of WordPress available. As security problems are detected they are fixed in new releases. So if you do not have the existing version installed, get a copy and install it now! I know some people like to wait a while before using a new release so that problems might be ironed out, but with the release candidate process thatWordPress goes through, these problems should be minimal so I start my upgrades within a week, upgrading the least crucial sites first, as tests.
Delete Your Administrator
The first change should be your admin id. From WordPress 3.0 when you install your blog you can select a different user id to the default name of ‘Admin’. I do recommend using something different! If you are still using Admin, create a new user with Admin rights, log off, log on as the new user and delete Admin. You will be given the opportunity of moving all posts created by Admin to another name, so you could select the new administrator.
Give Yourself A Nickname
Now, change your nickname! If your Administrator id is Fred and you display that the posts are written by Fred, you have given the game away. So give the userid a separate nickname to the signon name. If you want to go a step further, you might create a new user and only give it author status and use that for adding new posts, keeping the administrator safe for when you need to upgrade the system. This means that if you areblogging away from home and someone gets your sign on details, they cannot change any of the admin side of your bog.
Activate Akismet
This astonishing plugin used to be optional, as with other plugins, but is so useful it is now packaged with WordPress. You must sign up for a Wordress userid and get an API key, but then you could activate the plugin and be protected from Spam comments, which will be automatically removed. However, you should check for false positives where valid comments are detected as Spam.
There are plenty more changes you could make to your site to secure it, depending on how you are operating. Let's say, if you are running manyblogs on one hosting package and one MySQL database, you may like to create a new database userid that has less permissions than a database administrator and altering wp-config to use that database user. But, when you upgradeWordPress and install certain Plugins, you may need to go back to an administrator level.
Author Resource:
Written by Keith Lunt of How To Start A Blog . Call in if you need any help or advice with starting blogging .