{"id":1341,"date":"2009-10-23T21:29:06","date_gmt":"2009-10-24T01:29:06","guid":{"rendered":"http:\/\/rbach.net\/blog\/?p=1341"},"modified":"2022-12-30T12:19:43","modified_gmt":"2022-12-30T17:19:43","slug":"wordpress-security-help","status":"publish","type":"post","link":"https:\/\/rbach.net\/index.php\/wordpress-security-help\/","title":{"rendered":"WordPress Security Help"},"content":{"rendered":"

\"WordPress<\/a>With all of the hubbub over the recent Labor Day WordPress worm<\/a>. The worm caused every installation not hosted at WordPress.com to be suspected of being at risk. In response to the worm, WordPress pushed out WordPress 2.8.5, a \u201chardening patch<\/a>\u201d it is time to get some help with WP security.<\/p>\n

\"Wordpress<\/a>One of the tools I found is the WordPress Exploit Scanner plugin<\/a> by Donncha O Caoimh<\/a>. The Exploit Scanner does a number of things to help you manage your WordPress installation. The scanner installs on the WP dashboard and compares your sites\u2019 files against an MD5 hash of the WordPress files for the version of installation you’re running. The scanner ignores files that are present but it does not have a hash for. If your hash’s don’t match then you have a problem. It also looks for suspicious code in your files that may have been deposited by attackers. It looks for “invisible” text through CSS; the use of iframes to embed code from other sites; and base 64 encoding, which can be used to obfuscate entire programs. It will also look through your posts and users to see if there’s anything suspicious or spammy about them.<\/p>\n

This tool is not designed to identify new files, it identifies altered core WordPress files. According to the author\u2019s website<\/a>, It will not stop someone from hacking into your site, but it may help you find any uploaded or compromised files left by a hacker.<\/p>\n

rb-<\/em><\/strong><\/p>\n

Besides staying current on patches (d\u00e9j\u00e0 vu MSFT) and implementing a tool like the Exploit Scanner, turning off “user registration” is probably one of the simplest and most effective ways of “hardening” WordPress. Hopefully, WP will fix this in version 2.9 so the community aspect of WP can be securely turned back on.<\/em><\/p>\n

 <\/p>\n

Ralph Bach<\/a>\u00a0has been in IT long enough to know better and has blogged from his\u00a0Bach Seat<\/a> about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedIn<\/a>,\u00a0Facebook<\/a>,\u00a0and\u00a0Twitter<\/a>. Email the Bach Seat\u00a0here<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

The Labor Day WordPress worm where nearly every WP installation was suspected of being at risk brought about WP 2.8.5, a \u201chardening patch\u201d for more WP security.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[3216,23,2540,4,84,97],"class_list":["post-1341","post","type-post","status-publish","format-standard","hentry","category-security","tag-3216","tag-malware","tag-patching","tag-security","tag-wordpress","tag-worm"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/1341","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/comments?post=1341"}],"version-history":[{"count":6,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/1341\/revisions"}],"predecessor-version":[{"id":131516,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/1341\/revisions\/131516"}],"wp:attachment":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/media?parent=1341"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/categories?post=1341"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/tags?post=1341"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}