This is another good security tip for your WordPress blog. This method works for all types sites. By disabling directory indexing, you can prevent people seeing through your directory structure. Like say people cannot see list of images stored in domain.com/images This can be achived using a .htacess file in public_html folder. Just add below [...]

Using a .htacess file in root of your public_html directory, you can deny access to wp-login.php by showing forbidden message. You can only allow specific IP or IPs or IP range to use wp-login.php Just add below codes in .htaccess file of in root of your public_html folder. <files wp-login.php> Order deny,allow Deny from All [...]

Its good security practice to allow admin logins from specific IPs only. So, even if your WordPress admin login details is hacked, you are still safe. Hackers will not be able to login in admin area of WordPress, and your blog is safe. This can be achieved easily by using a .htracess file in wp-admin [...]

There are lots of tips and plugins to secure your WordPress blog. But we generally don’t follow those tips. There are many reason why we don’t follow those security tips. Here are few basic tips which all WordPress user must follow as security measure. 1. Always use and update to latest version of WordPress. 2. [...]