wordpress sites hacked

[consult4web]

For those who use Wordpress, what security measures do you implement?

[PokerProp]

For starters be careful of free themes. I've found 3 infected ones this month including one that was absolutely brilliant, seriously I was so impressed I almost felt bad debugging it lol.

[consult4web]

The same guy who hacked 2 of my wordpress sites also hacked another one of my sites not using wordpress.
This other site is a phpbb forum so I am thinking the hack has more to do with php holes. the hack screws up the mysql database.

[Notspot]

I'm not an expert on this, but I've been getting repeated attempted hacking attacks on my sql databases. They try to access through an incredibly long list of common directory and file names.

Change the admin directory names to something they'll never think of - it's protected me so far - fingers crossed.

For wordpress - read this:-

http://lorelle.wordpress.com/2007/09...ordpress-blog/

[GregK]

phpbb? 'nuff said...

[Bryan]

Keep your wordpress installation up to date and definitely be careful of free themes.

I've read a lot recently about free themes being downloaded with all sorts of crap from ads in them, to malicious stuff to hidden text so be careful of that.

Bryan