April 2016

5 Tips to Keep Your WordPress Site Safe From Hackers

If you're experienced with Wordpress, there is no doubt that you've encountered some form of malicious attack or bot spam. Wordpress is known for having security vulnerabilities, but regardless, it is still the most widely used CMS on the web, and for good reason. So for those of you who have just been hacked or want to take preventative measures, here are 5 quick tips that will keep your Wordpress site free of malware and safe from intruders. Ensure that there is not an admin account named “admin” in the system – it is the most popular username out there and should not be used Use https (ssl certificate) for the site to prevent data theft when logging in – requires ssl certificate that can [...]

3 Easy Ways Secure Your Website’s CMS on NGINX

Many website CMS platforms, especially Wordpress, are vulnerable to certain attacks performed by malicious hackers. In some cases, these hackers seek to gain SEO benefits, while others may have other intentions in mind. Either way, here are 3 easy NGINX web rules that will help you prevent these attackers from injecting malware or gaining control over your website: This is to prevent Click Jacking: https://geekflare.com/add-x-frame-options-nginx/ add_header X-Frame-Options "SAMEORIGIN"; This is to prevent XSS Attacks: https://geekflare.com/nginx-webserver-security-hardening-guide/ add_header X-XSS-Protection "1; mode=block"; This is another layer of protection to prevent TRACE, DELETE, PUT, or OPTIONS requests... you can update the command as needed if the site requires one of those protocols: https://geekflare.com/nginx-webserver-security-hardening-guide/ if ($request_method !~ ^(GET|HEAD|POST)$ ) { return 405; } If you use Wordpress, you [...]