WordPress: Building a Secure Site

Introduction

• Building a secure WordPress website

1. WordPress Structure and Vulnerabilities

• How to choose a secure WordPress hosting provider
• Overview of the WordPress structure
• How WordPress sites become vulnerable

2. WordPress User Accounts

• How to create a secure WordPress user account
• Best practices for keeping WordPress user accounts secure
• Tools for securing your WordPress login screen

3. SSL Certificates

• How an SSL certificate keeps WordPress sites secure
• How to troubleshoot an SSL installation
• Tools for setting up an SSL certificate

4. WordPress Plugins and Themes

• How to choose secure WordPress plugins
• Best practices for keeping WordPress plugins secure
• How to choose secure WordPress themes
• Best practices for keeping WordPress themes secure

5. Comment Spam

• Why spam comments are dangerous for WordPress sites
• How to prevent WordPress spam comments
• How to remove WordPress spam comments

6. Website File and Database Backups

• How to make secure WordPress website backups
• Best practices for taking WordPress website backups

7. Firewalls

• How firewalls make your site more secure
• Tools for setting up a WordPress firewall

8. Ecommerce Site Security

• How to make your ecommerce site more secure
• Best practices for securing an ecommerce site

9. Editing WordPress Files

• Secure your WordPress site by tweaking the wp-config file
• Secure your WordPress site by disabling XML-RPC
• Secure your WordPress site by disabling PHP executions
• Secure your WordPress site by disabling directory indexing and browsing
• Secure your WordPress site by tightening file/folder permissions

Conclusion

• Next steps