Advice on Security Concerns for WordPress Site
-
My company has a WordPress site (URL is learn.automationdirect.com) It is a very simple site and is currently under utilized. I would like to make some SEO improvements to it by activating comments and installing an SEO plugin like Yoast but, I am being help back by concerns about the sites security. Is there some sort of suggestion/advice you guys can point me to that will help get the site to a place where we are confident in it's security level, and I can move forward with optimizing it?
-
By the way, if your site has ANY visibility at all, you can expect an automated attack on the WP admin login maybe once an hour. All day, every day. So, if you leave your admin account active, and give it a password that's in the dictionary, you'll be seeing injection scripts in your home page and you'll be the proud assistant distributor of various pharma products within a month or two :-).
Right now, I'm seeing so many scripted attacks from China, I blocked all China IP addresses from my travel website. I was seeing hundreds to thousands of attempts per day before that.
-
-
I have had a big attack to my wordpress site and the only pluggin that was hable to stop it was OSE Firewall
About seo plugin i have yoast premium that is payed, but free version is enought
-
I recommend it to better wp security plugin and yoast plugin. I'm using them.
-
Chad,
The latest versions of WordPress do a pretty good job at fixing the holes in WordPress, so I would make sure that you always have the latest version. Also, take a look at the Wordfence plugin, as it is a security plugin that does a lot to stop the majority of the security issues involved. I recommend upgrading the plugin to the paid version, if possible.
As far as optimization goes, I recommend Yoast, as it does a great job of fixing basic SEO issues. However, I recommend adding custom title tags and meta description tags whenever possible.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Duplicate content on the same site
We have a client who wants us to use the same piece of copy twice on their website. Once to promote a workshop and once to promote a conference talk. We feel this would be bad practice from a user perspective, but we were wondering how search engines would regard this? Thanks Ian
Content Development | | Substance-create0 -
Wordpress Blog Pages, Duplicate Title Tag
Anyone have any experience in fixing the duplicate Title tag on a Wordpress blog multiple pages Basically the title tag remains the same on the pages /Blog/ /Blog/Page/2/ /Blog/Page/3/ My good friend Yoast Plugin doesn't seem to of resolved this (Unless i have missed something?) I don't really see this to be effecting anything and wouldn't of through it would either, but it would be nice to not see the notification within Moz site crawls and campaigns etc, its more of a cosmetic problem Any solutions ? Thanks James
Content Development | | Antony_Towle0 -
Advice on Title please
<y website="" <a="" href="http://www.nile-cruises-4u.co.uk">www.nile-cruises-4u.co.uk was number 1 in Google.co.uk for several years for our main search term "nile cruise" until about 4 months ago when we fell to our current position of 4 or 5.</y> I am looking at every aspect of optimising the site and wonder if I am using a good enough title for the home page? At the moment it is titled: Nile Cruise | Nile Cruises | Nile Cruise Bargains I wonder if I should just call it "Nile Cruise"? I alreay have a seperat page entitled "Nile Cruise Bargains" and wonder if having that phrase in the homepage title would have any adverse affects? Earlier this year our site was hacked and we spent 2 weeks with it being unavailable until we had rebuilt and repaired it. After that our position dipped. We have a Blog going back to 2007 and when we repaired the site the Blog was affected in that although we managed to re-install the hundreds of posts they were without all of the SEO tags and categories, etc, etc. I've been slowly adding those but there are still hundreds to do. Could this be affecting our page position? Thanks, Colin
Content Development | | NileCruises1 -
Too many articles within ecommerce site?
So recently purchased an ecommerce site to work on with lots of potential. The site was effected by Penguin update and now I am trying to fix up some issues. One of the problems I think may be the articles that he had written within the site. The site is an ecommerce site but has lots of articles like how to's and tips. A lot of these articles are not very fluent but seems to be written for SEO. Should I just remove them entirely or should I just stuff them in the back somewhere.
Content Development | | William.Lau0 -
Wordpress Security and Alternatives
No matter how secure we try to make our wordpress blogs they still got hacked. We recently got hacked(server level hacking, javascript insertion that took our server down, through the askimet plugin), anyway there was nothing really showing in the front end, no inserted links and nothing suspicious looking code. Oh well we are changing the passwords now and going through and deleting the javascript. The problem im facing is that i am handling over 100 blogs, so its very time consuming to do this. I know that once or twice a year everyone goes through a wordpress crisis but we really cant afford nor have the resources to fix it all the time. Are there any alternatives to wordpress blogs(as good as wordpress). Wordpress has been showing good results so far so it works as far as SEO goes, but we are trying to figure out what to do in order to not get hacked. Besides alternatives id like to know if there are any work arrounds to not get hacked with little maintenance needed. Any tips?
Content Development | | CMTM0 -
Google still caching old site
Hi all, We just acquired a new domain that was being squatted on by a reseller for a very long time and on the 5th June migrated our site over to it, replacing their advertising holding page. The domain is http://primate.co.uk It's been a week now though and Google hasn't seemed to have updated it's cache. Doing a search for 'primate.co.uk' in Google lists the site but with the old holding page description. Web master tools doesn't report any errors or issues with the site. Does anyone know how we can get Google to index the domain and update it's cache? Cheers, Gordon
Content Development | | Primate0 -
What are the best reasons not to use Wordpress as a CMS?
I'm a big fan of Wordpress (.org) as a content management system. However, I recognize that Wordpress isn't necessarily the best CMS for all ocassions. For those of you who don't like Wordpress, I'm interested in understanding your strongest reasons against. So, why not Wordpress?
Content Development | | Gyi0