Sage Blogger » 125 http://sageblogger.com Musings About Affiliate Marketing and Blogging Fri, 20 Aug 2010 16:08:47 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 Do Yourself A Favor-Stop Advertising Your Plugins To The Whole World http://sageblogger.com/do-yourslef-a-favor-stop-advertising-your-plugins-to-the-whole-world/ http://sageblogger.com/do-yourslef-a-favor-stop-advertising-your-plugins-to-the-whole-world/#comments Wed, 17 Oct 2007 14:28:35 +0000 Vlad Zablotskyy http://sageblogger.com/do-yourslef-a-favor-stop-advertising-your-plugins-to-the-whole-world/ Commenting on my most recent post about security issues I’ve had with one of my WordPress websites, Dane has mentioned that keeping up to date all your plugins can help you to reduce the risk of having your website compromised:

That is why it’s so important that you stay on top of upgrades. And not just to WP itself, but to plugins you are using. plugins can be compromised and if not updated, they leave security holes into your blog.

So I went ahead and did major clean up in respect to plugins I was using on this blog. But I also did something more. By default, with WordPress “out of the box”, you are advertising to the entire world what plugins you are using on your website- just put into your browser following path and you will see what I am talking about: yourblog/wp-content/plugins/. This can be very easily prevented by placing an empty “index.php” or “index.html” file into “plugins” directory on your server. Or if you want to have a little more fun you can be creative with that file- here is mine.

Now this of course may not make your WordPress super secure but it for sure will make things a little more difficult for some one to get into your blog by hacking one of the plugis if you stop advertising your plugins to the whole world.Similar Posts:

]]> http://sageblogger.com/do-yourslef-a-favor-stop-advertising-your-plugins-to-the-whole-world/feed/ 42