burbswp / main-presentations

Each of our meet ups includes one of these main presentations.
GNU General Public License v3.0
5 stars 0 forks source link

WordPress Security & Malware Removal #10

Open mattnye opened 7 years ago

mattnye commented 7 years ago

I'm sure this talk has been done before, but depending on how recent it was, maybe we can dig into it again? It certainly is an important topic and something every WP user should be aware of. Hacks are more prevalent every year—WP or not—but since we use a platform that makes up 27% of the web, we are even more at risk. I would love to learn about everyone's security posture and share mine. There are some quick best practices anyone can implement, but it's unfortunately not very apparent out of the box so it might benefit anyone just starting out.

I've also recently had to remove some particularly icky malware from several sites and would be happy to share what I did to fix (was not a simple fresh-install fix) and some extra hardening I put in place.

PS: Also, just happened to notice this post today from Mr. Matt himself. I've heard more and more gossip about SSL and have been implementing HTTPS on more and more sites, mostly for the Google benefit. However, I also recently saw some documentation on how HTTPS can actually prevent malicious attacks and malware, something I didn't even think about.