WordPress Setup - Revision history

Scott: /* Recommended Security */

2022-03-27T17:24:49Z

Recommended Security

← Older revision		Revision as of 17:24, 27 March 2022
Line 35:		Line 35:

	=== Recommended Security ===		=== Recommended Security ===
	~~Enact these security settings in addition to the above:~~[[File:Preferred-Security-Settings.png\|thumb\|right\|alt=Preferred WordPress Toolkit Security Settings\|Preferred Security Settings]]		[[File:Preferred-Security-Settings.png\|thumb\|right\|alt=Preferred WordPress Toolkit Security Settings\|Preferred Security Settings]]
			Enact these security settings in addition to the above:
	* Configure security keys		* Configure security keys
	* Disable scripts concatenation for WordPress admin panel		* Disable scripts concatenation for WordPress admin panel
Line 42:		Line 43:
	* Enable bot protection		* Enable bot protection
	* Block access to potentially seneitive files		* Block access to potentially seneitive files
	* Change default administrator's username		* Change default administrator's username

	== Addon Domains ==		== Addon Domains ==
	When setting up Addon domains (especially for Worpress installations) we recommend the Addon domains be placed outside your primary <code>'''public_html'''</code> folder. This helps prevent cross contamination of Wordpress installations if one of them gets infected with malware.		When setting up Addon domains (especially for Worpress installations) we recommend the Addon domains be placed outside your primary <code>'''public_html'''</code> folder. This helps prevent cross contamination of Wordpress installations if one of them gets infected with malware.

Scott: /* Minimum Security */

2022-03-27T17:24:30Z

Minimum Security

← Older revision		Revision as of 17:24, 27 March 2022
Line 23:		Line 23:

	=== Minimum Security ===		=== Minimum Security ===
	~~Enact the following WP Toolkit Security recommendations (at a minimum):~~[[File:Recommended-Minimum-Security-Settings.png\|thumb\|right\|alt=~~Recommended~~ Security Settings\|~~Recommended~~ Security Settings]]		[[File:Recommended-Minimum-Security-Settings.png\|thumb\|right\|alt=Minimum Security Settings\|Minimum Security Settings]]
			Enact the following WP Toolkit Security recommendations (at a minimum):
	* Restrict access to files and directories		* Restrict access to files and directories
	* Block directory browsing		* Block directory browsing

Scott at 17:23, 27 March 2022

2022-03-27T17:23:31Z

← Older revision		Revision as of 17:23, 27 March 2022
Line 13:		Line 13:
	Recommended update settings for WordPress core, plugins, and themes:		Recommended update settings for WordPress core, plugins, and themes:
	* Update WordPress automatically		* Update WordPress automatically
	** Yes, but only minor (security) updates: With this setting you will only get security updates automatically and will have to install major/feature updates yourself. This is the absolute minimum recommended setting.		** Yes, but only minor (security) updates: With this setting you will only get security updates automatically and will have to install major/feature updates yourself. This is the absolute ''minimum recommended'' setting.
	** Yes, all (minor and major) updates: With this setting all updates will be installed. You will need to check your site after a major update to make sure nothing has been broken by the update. If you have a simple site without many 3rd party plugins or themes this is recommended.		** Yes, all (minor and major) updates: With this setting all updates will be installed. You will need to check your site after a major update to make sure nothing has been broken by the update. If you have a simple site without many 3rd party plugins or themes this is recommended.
	* Update plugins automatically		* Update plugins automatically
	** Defined individually, but security updates are autoinstalled:		** Defined individually, but security updates are autoinstalled: Autoupdate settings for each plugin are followed, vulnerable plugins will be updated automatically regardless of their settings. This is the ''minimum recommended'' setting.
	** Forced:		** Forced: All plugins will be autoupdated regardless of their settings. This is the ''preferred'' setting.
	* Update themes automatically		* Update themes automatically
	** Defined individually, but security updates are autoinstalled:		** Defined individually, but security updates are autoinstalled: Autoupdate settings for each theme are followed, vulnerable themes will be updated automatically regardless of their settings. This is the ''minimum recommended'' setting.
	** Forced:		** Forced: All themes will be autoupdated regardless of their settings. This is the ''preferred'' setting.

	=== Minimum Security ===		=== Minimum Security ===

Scott at 17:05, 27 March 2022

2022-03-27T17:05:26Z

← Older revision		Revision as of 17:05, 27 March 2022
Line 9:		Line 9:

	== Recommended WordPress Toolkit Settings ==		== Recommended WordPress Toolkit Settings ==
	~~Recommended update settings for WordPress core, plugins, and themes:~~[[File:WP-Toolkit-Update-Settings.png\|thumb\|alt=WP Toolkit Update Settings\|Update Settings]]		=== Updates ===
			[[File:WP-Toolkit-Update-Settings.png\|thumb\|right\|alt=WP Toolkit Update Settings\|Update Settings]]
			Recommended update settings for WordPress core, plugins, and themes:
			* Update WordPress automatically
			** Yes, but only minor (security) updates: With this setting you will only get security updates automatically and will have to install major/feature updates yourself. This is the absolute minimum recommended setting.
			** Yes, all (minor and major) updates: With this setting all updates will be installed. You will need to check your site after a major update to make sure nothing has been broken by the update. If you have a simple site without many 3rd party plugins or themes this is recommended.
			* Update plugins automatically
			** Defined individually, but security updates are autoinstalled:
			** Forced:
			* Update themes automatically
			** Defined individually, but security updates are autoinstalled:
			** Forced:

	Enact the following WP Toolkit Security recommendations (at a minimum):[[File:Recommended-Minimum-Security-Settings.png\|thumb\|~~center~~\|alt=Recommended Security Settings\|Recommended Security Settings]]		=== Minimum Security ===
			Enact the following WP Toolkit Security recommendations (at a minimum):[[File:Recommended-Minimum-Security-Settings.png\|thumb\|right\|alt=Recommended Security Settings\|Recommended Security Settings]]
	* Restrict access to files and directories		* Restrict access to files and directories
	* Block directory browsing		* Block directory browsing
Line 21:		Line 33:
	* Block access to .htaccess and .htpasswd		* Block access to .htaccess and .htpasswd

	Enact these security settings in addition to the above:[[File:Preferred-Security-Settings.png\|thumb\|~~center~~\|alt=Preferred WordPress Toolkit Security Settings\|Preferred Security Settings]]		=== Recommended Security ===
			Enact these security settings in addition to the above:[[File:Preferred-Security-Settings.png\|thumb\|right\|alt=Preferred WordPress Toolkit Security Settings\|Preferred Security Settings]]
	* Configure security keys		* Configure security keys
	* Disable scripts concatenation for WordPress admin panel		* Disable scripts concatenation for WordPress admin panel

Scott at 16:53, 27 March 2022

2022-03-27T16:53:12Z

← Older revision		Revision as of 16:53, 27 March 2022
Line 9:		Line 9:

	== Recommended WordPress Toolkit Settings ==		== Recommended WordPress Toolkit Settings ==
	Recommended update settings for WordPress core, plugins, and themes:		Recommended update settings for WordPress core, plugins, and themes:[[File:WP-Toolkit-Update-Settings.png\|thumb\|alt=WP Toolkit Update Settings\|Update Settings]]
	~~<gallery>~~WP-Toolkit-Update-Settings.png\|thumb\|alt=WP Toolkit Update Settings\|Update Settings~~</gallery>~~

	Enact the following WP Toolkit Security recommendations (at a minimum):		Enact the following WP Toolkit Security recommendations (at a minimum):[[File:Recommended-Minimum-Security-Settings.png\|thumb\|center\|alt=Recommended Security Settings\|Recommended Security Settings]]
	~~<gallery>~~Recommended-Minimum-Security-Settings.png\|thumb\|alt=Recommended Security Settings\|Recommended Security Settings~~</gallery>~~
	* Restrict access to files and directories		* Restrict access to files and directories
	* Block directory browsing		* Block directory browsing
Line 23:		Line 21:
	* Block access to .htaccess and .htpasswd		* Block access to .htaccess and .htpasswd

	Enact these security settings in addition to the above:		Enact these security settings in addition to the above:[[File:Preferred-Security-Settings.png\|thumb\|center\|alt=Preferred WordPress Toolkit Security Settings\|Preferred Security Settings]]
	~~<gallery>~~ Preferred-Security-Settings.png\|thumb\|alt=Preferred WordPress Toolkit Security Settings\|Preferred Security Settings~~</gallery>~~
	* Configure security keys		* Configure security keys
	* Disable scripts concatenation for WordPress admin panel		* Disable scripts concatenation for WordPress admin panel

Scott at 07:21, 27 March 2022

2022-03-27T07:21:15Z

← Older revision		Revision as of 07:21, 27 March 2022
Line 31:		Line 31:
	* Enable bot protection		* Enable bot protection
	* Block access to potentially seneitive files		* Block access to potentially seneitive files
	Change default administrator's username		* Change default administrator's username

	== Addon Domains ==		== Addon Domains ==
	When setting up Addon domains (especially for Worpress installations) we recommend the Addon domains be placed outside your primary <code>'''public_html'''</code> folder. This helps prevent cross contamination of Wordpress installations if one of them gets infected with malware.		When setting up Addon domains (especially for Worpress installations) we recommend the Addon domains be placed outside your primary <code>'''public_html'''</code> folder. This helps prevent cross contamination of Wordpress installations if one of them gets infected with malware.

Scott at 07:20, 27 March 2022

2022-03-27T07:20:52Z

← Older revision		Revision as of 07:20, 27 March 2022
Line 24:		Line 24:

	Enact these security settings in addition to the above:		Enact these security settings in addition to the above:
	<gallery> Preferred-Security-Settings.png\|thumb\|alt= Preferred WordPress Toolkit Security Settings\| Preferred Security Settings</gallery>		<gallery> Preferred-Security-Settings.png\|thumb\|alt=Preferred WordPress Toolkit Security Settings\|Preferred Security Settings</gallery>
	* Configure security keys		* Configure security keys
	* Change		* Disable scripts concatenation for WordPress admin panel
			* Turn off pingbacks
			* Change default database table prefix
			* Enable bot protection
			* Block access to potentially seneitive files
			Change default administrator's username

	== Addon Domains ==		== Addon Domains ==
	When setting up Addon domains (especially for Worpress installations) we recommend the Addon domains be placed outside your primary <code>'''public_html'''</code> folder. This helps prevent cross contamination of Wordpress installations if one of them gets infected with malware.		When setting up Addon domains (especially for Worpress installations) we recommend the Addon domains be placed outside your primary <code>'''public_html'''</code> folder. This helps prevent cross contamination of Wordpress installations if one of them gets infected with malware.

Scott at 07:14, 27 March 2022

2022-03-27T07:14:25Z

← Older revision		Revision as of 07:14, 27 March 2022
Line 10:		Line 10:
	== Recommended WordPress Toolkit Settings ==		== Recommended WordPress Toolkit Settings ==
	Recommended update settings for WordPress core, plugins, and themes:		Recommended update settings for WordPress core, plugins, and themes:
	<gallery>		<gallery>WP-Toolkit-Update-Settings.png\|thumb\|alt=WP Toolkit Update Settings\|Update Settings</gallery>
	WP-Toolkit-Update-Settings.png\|thumb\|alt=WP Toolkit Update Settings\|Update Settings
	</gallery>

	* Enact ~~WPToolkit~~ recommendations (at a minimum):		Enact the following WP Toolkit Security recommendations (at a minimum):
	** Restrict access to files and directories		<gallery>Recommended-Minimum-Security-Settings.png\|thumb\|alt=Recommended Security Settings\|Recommended Security Settings</gallery>
	** Block directory browsing~~(can be reverted)~~		* Restrict access to files and directories
	** Block unauthorized access to wp-config.php~~(can be reverted)~~		* Block directory browsing
	** Disable PHP execution in cache directories~~(can be reverted)~~		* Block unauthorized access to wp-config.php
	** Block access to sensitive files~~(can be reverted)~~		* Disable PHP execution in cache directories
			* Block access to sensitive files
			* Forbid execution of PHP scripts in the wp-includes directory
			* Forbid execution of PHP scripts in the wp-content/uploads directory
			* Block access to .htaccess and .htpasswd

			Enact these security settings in addition to the above:
			<gallery> Preferred-Security-Settings.png\|thumb\|alt= Preferred WordPress Toolkit Security Settings\| Preferred Security Settings</gallery>
			* Configure security keys
			* Change

	== Addon Domains ==		== Addon Domains ==
	When setting up Addon domains (especially for Worpress installations) we recommend the Addon domains be placed outside your primary <code>'''public_html'''</code> folder. This helps prevent cross contamination of Wordpress installations if one of them gets infected with malware.		When setting up Addon domains (especially for Worpress installations) we recommend the Addon domains be placed outside your primary <code>'''public_html'''</code> folder. This helps prevent cross contamination of Wordpress installations if one of them gets infected with malware.

Scott at 06:55, 27 March 2022

2022-03-27T06:55:54Z

@@ Line 1: / Line 1: @@
-== Recommended WPToolkit Settings ==
+== WordPress Best Practices ==
-* Update all plugins, themes, and Wordpress Core files
+* Keep Wordpress Core and all plugins and themes updated
 * Remove all unused plugins and themes
 * Enact WPToolkit recommendations (at a minimum):
 ** Restrict access to files and directories

Scott: Wordpress setup & security recommendations

2022-03-26T23:49:47Z

Wordpress setup & security recommendations

New page

== Recommended WPToolkit Settings ==
* Update all plugins, themes, and Wordpress Core files
* Remove all unused plugins and themes
* Enact WPToolkit recommendations (at a minimum):
** Restrict access to files and directories
** Block directory browsing(can be reverted)
** Block unauthorized access to wp-config.php(can be reverted)
** Disable PHP execution in cache directories(can be reverted)
** Block access to sensitive files(can be reverted)

== Addon Domains ==
When setting up Addon domains (especially for Worpress installations) we recommend the Addon domains be placed outside your primary <code>'''public_html'''</code> folder. This helps prevent cross contamination of Wordpress installations if one of them gets infected with malware.