I just wanna try to contribute a little bit to the community so I will share my experience how to protect your WP sites from malware injecting and hacking attempts.
In the past I thought that the only way for a hacker to break into my WP is to guess admin name and password. SO I tried with 20+ letter long passwords which didn't help much. They also use various exploits in theme and plugins.
This will be helpful to WP users:
1. Do not use default "admin" name for the admin and do use long Case sensitive passwords
2. Update your plugins and WP regularly
3. There is a wonderful plugin: https://wordpress.org/plugins/iq-block-country/ that will allow you to blok IPs from all countries (except yours) so noone will be able to login as admin from a different country than yours. (read documentation carefully not to block yourself from logging in)
4. Install this plugin, it is awesome: https://wordpress.org/plugins/all-in-one...-firewall/
- it will allow you to change/hide your login page URL
- there is some basic firewall against DDOS attacks
- you can limit login attempts
- it can set file permisions, so noone can change files within your WP folder
- and many more options
5. For the end you can install Wordfence and Anti-Malware from GOTMLS.NET just in case and occasionaly check your website for viruses and malware.
And that's about it. If you have some more helpful advice feel free to add it 😉
In the past I thought that the only way for a hacker to break into my WP is to guess admin name and password. SO I tried with 20+ letter long passwords which didn't help much. They also use various exploits in theme and plugins.
This will be helpful to WP users:
1. Do not use default "admin" name for the admin and do use long Case sensitive passwords
2. Update your plugins and WP regularly
3. There is a wonderful plugin: https://wordpress.org/plugins/iq-block-country/ that will allow you to blok IPs from all countries (except yours) so noone will be able to login as admin from a different country than yours. (read documentation carefully not to block yourself from logging in)
4. Install this plugin, it is awesome: https://wordpress.org/plugins/all-in-one...-firewall/
- it will allow you to change/hide your login page URL
- there is some basic firewall against DDOS attacks
- you can limit login attempts
- it can set file permisions, so noone can change files within your WP folder
- and many more options
5. For the end you can install Wordfence and Anti-Malware from GOTMLS.NET just in case and occasionaly check your website for viruses and malware.
And that's about it. If you have some more helpful advice feel free to add it 😉