Book Image

WordPress 3 Ultimate Security

Book Image

WordPress 3 Ultimate Security

Overview of this book

Most likely – today – some hacker tried to crack your WordPress site, its data and content – maybe once but, with automated tools, very likely dozens or hundreds of times. There's no silver bullet but if you want to cut the odds of a successful attack from practically inevitable to practically zero, read this book. WordPress 3 Ultimate Security shows you how to hack your site before someone else does. You'll uncover its weaknesses before sealing them off, securing your content and your day-to-day local-to-remote editorial process. This is more than some "10 Tips ..." guide. It's ultimate protection – because that's what you need. Survey your network, using the insight from this book to scan for and seal the holes before galvanizing the network with a rack of cool tools. Solid! The WordPress platform is only as safe as the weakest network link, administrator discipline, and your security knowledge. We'll cover the bases, underpinning your working process from any location, containing content, locking down the platform, your web files, the database, and the server. With that done, your ongoing security is infinitely more manageable. Covering deep-set security yet enjoyable to read, WordPress 3 Ultimate Security will multiply your understanding and fortify your site.
Table of Contents (23 chapters)
WordPress 3 Ultimate Security
Credits
About the Author
Acknowledgement
About the Reviewers
www.PacktPub.com
Preface
Index

Organizations


Here are some information-rich sites to make you reach for the aspirin. These have second-to-none white paper libraries, threat alerts, mailing lists, purposeful projects, and whatever else to tempt you away from that TV movie.

OWASP

The indispensible Open Web Application Security Project is made up of some of the wisest heads on the web nurturing dozens of projects (including the ModSecurity Core Rule Set Project, which we discussed in Chapter 11 and the WebGoat Project which cropped up in this section). Hats off!

SANS

The SysAdmin, Audit, Network, Security Institute is a giant in security training and their free reading room and storm center are so vastly informative you may never return:

SecurityFocus

SecurityFocus has white papers, tons of mailing lists such as the zero day alerter BugTraq (a must-sub mailing list for security pros) and a valuable Vulnerability Database:

WASC

Another Robert Auger brainchild, The Web Application Security Consortium promotes proactive projects, has a leading mailing list and its Threat Classification defines risks:

Wikipedia

Not niche, sure, but the 'pejia is always good value and details threats predictably well: