Using WordPress?

[OsmosisStudios]

You might not want to.

I've never liked WordPress, and I've especially never liked the concept of using someone else's "theme" as the brand for my website. But this shows that the themes you may or may not be using could be more malicious than you might think.

Why You Should Never Search For Free WordPress Themes in Google or Anywhere Else | WordPress News at WPMU.org

[dlambert]

Thanks for the link. When you read the article, be sure to also pay attention to the part where there's an easy way to check any themes you might be using for the sorts of exploits discussed.

Mine checked out just fine, by the way.

[BuddhaPi]

Also besides addressing the issues mentioned in the above link wordpress should NEVER be installed using the default settings, hackers know exactly what and where these directories are, a little extra file editing will go a long way in securing your wordpress. I also suggest adding a second layer of protection via htaccess using a completely different username/password, this can easily be done either manually of look in your hosting control for an option to protect directories.

[OsmosisStudios]

Both valid points: the thing is that WordPress is used and recommended for use by/to people with little/no web design or development knowledge.

[Biomech]

I think this came up last month :P
I always get my themes from somewhere like templatemonster, then I hack and customise them. You can also get a plugin for WP that scans the install and highlights any problematic areas.

[BuddhaPi]

Originally Posted by OsmosisStudios

Both valid points: the thing is that WordPress is used and recommended for use by/to people with little/no web design or development knowledge.

Also a good point...some people see FREE and figure why not, problem is nothing is FREE there is always something something somewhere..I recommend wordpress all of the time, but I also recommend the hiring of my services to install / secure the site especially to those wit no experience..kinda like having your cousin photograph your wedding on the cheap, you'll get what you pay for everytime!

[BigFuzzy]

Originally Posted by Biomech

I think this came up last month :P
I always get my themes from somewhere like templatemonster, then I hack and customise them. You can also get a plugin for WP that scans the install and highlights any problematic areas.

What plug in is that? I'd like to check it out (though I'm pretty sure I'm safe as mine was not free and I hacked the sh!t out of it).

[BuddhaPi]

Originally Posted by BigFuzzy

What plug in is that? I'd like to check it out (though I'm pretty sure I'm safe as mine was not free and I hacked the sh!t out of it).

Try this one sir

[Biomech]

And/or:

WordPress Exploit Scanner