If you are owner of a popular blog then you have landed on right place. Today I am going to discuss how to protect your blog from hackers. Recently there have been many hacking attempts on wordpress powered blog. Generally older versions of WordPress are prone to hack attempts. So always update your wordpress. At present WordPress 2.5.1 is the latest version. I have to also update my blog with this version of wordpress. Use the following methods to avoid hack attempts on your blog.
- Older versions of WordPress can be easily hacked so always use latest version of WordPress. If you have some problem while up-gradation then at least hide the wordpress version from your blog as anyone can find the blog’s version through view source option of the browser. So you can hide your WordPress version by removing a piece of php code from your theme’s header.php file. Find
<meta name=”generator” content=”WordPress <?php bloginfo(’version’); ?>” />
and replace it with
<meta content=”WordPress” name=”generator” />
- Secure your /wp-admin/ directory – lock down your wp-admin folder so that only certain IP addresses can access that directory, for this you can use an .htaccess file, which you can place directly at /wp-admin/.htaccess. If you have linux hosting cpanel, you can just lock the wp-admin via the interface “Password Protect Directories”. This will set the wordpress admin directory to require a secure password and user name
- If you don’t want to show the wordpress plugins which you using then place an empty intex.html file inside the wp-content/plugins directory. You can also prevent directory browsing by adding the following to your .htaccess file, and the web server will return 403 error.
- Use strong password for the administrator of the blog. Test your password with Microsoft password checker to test the strength of your password. Never log in into your blog administrator control panel from unsecured computers like Internet cyber cafe’s , college computer center or friends’ PC. Use good antivirus on your PC which can secure themes and plugins which you upload on your web server.
- Always check out the updates on WordPress.org regarding releases of new plugins, patches and versions of wordpress so that you can upgrade your blog on right time.
- Always make sure that the plugins which you are using on your blog are verified by WordPress and are available at WordPress Plugin Database
If you have still any doubt or query then feel free to contact me or post a comment, I will try my best to clear all your doubts. Happy Blogging, say no to Hacking.
==> If you liked this post, then why not buy me a beer so I can cool off?



I am not using wordpress right now. But might use it in the future. I have bookmarked this for future reference. Thanks for the post!
Hi, Thanks for the great pointers. ‘Just one thing though – your third bulleted point reads in part:
If you don’t want to show the wordpress plugins which you using then place an empty intex.html …
I assume you mean index.html?