2
votes
0answers
29 views

How to set permissions for www/dir and make sure no security threats arise

I've a peculiar situation. I've VPS that I use for my own projects. A friend of mine asked me to host his wordpress blog. Now I've setup my VPS very straightforward, all projects are under /www and ...
-1
votes
3answers
226 views

How to fight request spam (DDOS i guess) on CentOS server [duplicate]

lately i'm trying to fight DDOS on my CentOS 6.4 server. I have installed CSF and I've set it quite strictly. Yet there is a URL that have like 1000 requests and max 2 per IP (smart ddos-er I guess). ...
0
votes
2answers
58 views

Can I compromise my VPS security by hosting wordpress site owned by another person?

I've my personal VPS running ubuntu server 12.04 with standard AMP stack. I want to give my client hosting. but I'm worried if I give the client wp hosting with wp-admin access that means he will be ...
1
vote
3answers
156 views

Prevent server unusable on wordpress bruteforce attacks

I admin a server with lots of wordpress installations on it. Searching a solution to prevent high CPU on bruteforce attacks, this make the server unusable some hours a day. These are the targets: ...
1
vote
1answer
261 views

Can't reach server without proxy (website down from my home)

I have a website hosted on Hostinger However I am experiencing problems with my wordpress site. This is really annoying. If I understood the situation right, The server is blocking me or denying ...
-2
votes
2answers
44 views

Recommended UNIX user for CMS access to MySQL [closed]

This article recommends the UNIX nobody user to access MySQL from Joomla scripts. Is this standard practice? Moreover, is it reasonable to use it, say, both for Joomla and WordPress?
0
votes
2answers
99 views

Script to check server for WordPress installs and report version information [closed]

I'm looking for a script that can be run on a linux server that will find all WordPress installs and report their versions, or report if a version is out of date. I've googled for something and it ...
0
votes
2answers
100 views

Why would a URL ending in .com be a security threat? [closed]

I have a WordPress website hosted on Pagely. When I searched for a string ending in .com, it triggered a security threat warning and my site was blocked. I raised an issue, but I got the following ...
1
vote
2answers
109 views

What is the most secure way to set up a mysql user for Wordpress?

I am setting up Subdomain based MU on my domain.Everything is hosted by me running on one CentOS/Webmin VPS. Will I be better off setting the MySQL user's domain as localhost, 127.0.0.1 or with a ...
0
votes
2answers
874 views

open_basedir and wordpress

Essentially i found out you can prevent one site which has a security hole from modifying/reading another site via "open_basedir". However when i upload media files using wordpress i got the error ...
0
votes
1answer
560 views

Is someone trying to hack my site? How to block certain URLs in Nginx?

On the past few hours my server is getting pretty loaded, mostly due to a lot of load requests. I've seen this thanks to the StatCounter realtime stats, which shows that the "Came from" page is: ...
2
votes
3answers
954 views

My wordpress site got hacked. How I trace the cause of the issue? [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY Someone was able to hack my Wordpress 3.2.1 installation, get access to the control panel as an admin and temper with the theme's ...
2
votes
2answers
2k views

Good Wordpress Directory Structure/Permissions (LNMP)?

Disclaimer: Before anyone makes a smart mention of Google (or the like), I'd just like to note that I'm posing this question because I couldn't find an article or articles to my liking. Preface: ...
1
vote
3answers
770 views

Running nginx, should wordpress files be set to www-data or root or?

I am running nginx, which I understand runs under the www-data user account. All my wordpress related files are currently set to root root, is this normal? Or should they be set the www-data account ...
3
votes
2answers
286 views

Securely installing Wordpress in a subdirectory on a server

our marketing droids would like a blog on our domain. I checked out several, and while MovableType seems to have the least vulnerabilities, Wordpress has won the race. I am very sceptical of ...
1
vote
1answer
1k views

I've been hacked, and now I'm a bit confused about some things

I noticed yesterday that my site has been hacked, and I'm really confused about some things at this point. All of the files - as far as I can tell - that were edited or added were done so with a ...
4
votes
4answers
5k views

How to trace possible SQL injection attack?

We just had one of our (fairly important) wordpress databases inexplicably dropped. Fortunately we keep nightly backups so it's not going to be the end of the world, but I want to avoid or at least be ...
1
vote
1answer
302 views

What user should an application pool bound to a Wordpress site use in IIS? [duplicate]

I've installed a wordpress site in a dedicated server with Windows 2008 server running IIS7 but I'm a little confused on what's the most secure way to set the appropriate file settings. The thing is ...
1
vote
1answer
352 views

Hardening Wordpress on IIS6

I am pushing a new Wordpress install (ver. 2.8.4) to a Win2k3 server. PHP is running via FastCGI and I have MySQL5 humming along. What do I need to do to keep the average troublemaker from messing ...