From the course: WordPress: Building a Secure Site
Unlock the full course today
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
Secure your WordPress site by disabling PHP executions - WordPress Tutorial
From the course: WordPress: Building a Secure Site
Secure your WordPress site by disabling PHP executions
- [Instructor] In order for users to easily upload themes, plugins, images and videos onto your site, WordPress makes certain directories writable automatically. When a directory is writeable, that basically just means it can be edited. This is handy for the usability of your site as you can make certain things writable for certain users, et cetera but it can open up a backdoor access to hackers who want to upload malware to the site. One way to prevent this is to disable PHP execution in some directories via the htaccess file. To start this process, download your htaccess file. Open it up. Copy and paste this code into the file and then save it. Upload this newly edited file into your wp-includes folder. Then go to the wp-content folder and open up the uploads folder, which is nested inside. Add the newly edited htaccess file to this folder as well. Doing this will prevent new malicious PHP files from…
Contents
-
-
-
-
-
-
-
-
-
-
-
(Locked)
Secure your WordPress site by tweaking the wp-config file2m 16s
-
(Locked)
Secure your WordPress site by disabling XML-RPC37s
-
(Locked)
Secure your WordPress site by disabling PHP executions1m 8s
-
(Locked)
Secure your WordPress site by disabling directory indexing and browsing38s
-
(Locked)
Secure your WordPress site by tightening file/folder permissions1m 16s
-
(Locked)
-