Protecting your site from DDoS attacks, hacking, spam and viruses

Many webmasters mistakenly believe that protection is not needed for all sites, but only for large, popular, financially successful ones that are among the top search engines. In fact, everyone needs protection. It’s just that serious resources require serious measures that can withstand large-scale DDoS attacks. A small beginner blog usually gets inexperienced hackers who are just learning a dirty business and choose new sites for their experiences, as they have poor protection. Protective equipment is always selected in proportion to the level of danger.

WordPress site protection against hacking and spam

Most often, blogs are hacked in order to send spam from it. In order to avoid this, you need to follow simple rules that will not cost the site owner a ruble:

Protection of access to the admin panel. First of all, you need to change the standard login “admin” to a more complex one. Choose a combination of uppercase and lowercase letters, as well as numbers, at least 6-8 characters long. It is extremely undesirable to take words, since the easiest way to hack is dictionary selection. Password must meet the same requirements.

Do not store passwords on the PC from which the server communicates with the server.

You cannot leave data to access the server in ftp clients.

You should use a quality antivirus on your computer.

It is important to regularly update WP and plugins.

This is the minimum required package of measures. As additional tools, you can put plugins. For example, Lockdown WP Admin will allow you to change the address of the admin panel and make it possible to configure IP blocking. You can also use AskApache Password Protect, Bad Behavior, etc.

Virus protection

Preventive measures to protect against viruses include the aforementioned anti-hacking tools, plug-ins, and various anti-virus applications. The most popular plugins for WP: WP Security Scan - looks for vulnerabilities and offers remedial measures, WordPress Antivirus - scans files and reports suspicious codes to the owner, as well as Wordfence Security, WordPress Exploit Scaner, etc. Kaspersky for virtual servers and Kaspersky are interesting among applications to protect against DDoS attacks. True, they are relatively expensive, and therefore are used infrequently, despite the higher efficiency than plug-ins.

Antivirus programs and online services are used to treat detected infections. The same Kaspersky, Dr. Weber, etc.

To prevent data loss due to severe infection, when prevention and treatment are ineffective, it is advisable to use backup. It is performed through the server console or control panel, as well as through various applications and plugins. The advantage of plugins is that they do everything automatically.