seguridad en WordPress

Plugins de seguridad:

Wordfence Scan

Bulletproof security

WP Security scan

6Scan Security

Antivirus

WP plugin security check –> imprescindible!!

 

.htaccess

Proteger el archivo wp-config.php

<files wp-config.php>
order allow,deny
deny from all
</files>

Proteger de inyecciones

Options +FollowSymLinks
RewriteEngine On
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
RewriteRule ^(.*)$ index.php [F,L]

functions.php
Esconder la versión de WP:

function remove_wp_version() { return ''; }
add_filter('the_generator', 'remove_wp_version');