{"id":1591,"date":"2017-12-30T23:05:26","date_gmt":"2017-12-30T21:05:26","guid":{"rendered":"https:\/\/www.hostking.host\/blog\/?p=1591"},"modified":"2026-10-16T08:50:54","modified_gmt":"2026-10-16T04:50:54","slug":"protect-wordpress-site-hacked-tips","status":"publish","type":"post","link":"https:\/\/www.hostking.host\/blog\/protect-wordpress-site-hacked-tips\/","title":{"rendered":"How to secure a WordPress site from hackers"},"content":{"rendered":"<p>From time to time, customers sites get hacked. Here are the reasons why and how to prevent that from occurring and keeping your WordPress protected.<\/p>\n<ol>\n<li>Within <a href=\"https:\/\/www.hostking.host\/web-hosting\">cPanel<\/a> always ensure your ModSecurity rule-set is enabled. This can be done by searching for ModSecurity and enabling it on all sites.<\/li>\n<li>Always ensure your WordPress Install, Plugins and Themes are fully updated at all times. Check monthly to be sure.<\/li>\n<li>Secure the Login Page and Prevent Brute Force Attacks. ModSecurity already has built-in protection but it always helps to have a second level of protection in case. We recommend installing Wordfence free version.<\/li>\n<li>Ensure you are using a strong password &#8211; preferably longer than 8 characters and a combination of Uppercase, lowercase and numbers at the very least.<\/li>\n<li>Enabled the FREE let&#8217;s encrypt SSL feature to encrypt your data<\/li>\n<li>Always ensure your contact us page, comments boxes, registration pages have some sort of strong captcha installed. For example Googles Recaptcha plugin for WordPress.<\/li>\n<li>Change the WordPress database table prefix<\/li>\n<li>Set strong passwords for your database when installing it or reset it within MySQL Databases icon and update your wp-config.php file with the stronger password.<\/li>\n<li>Disallow file editing by adding the following to the wp-config.php file:&nbsp;define(&#8216;DISALLOW_FILE_EDIT&#8217;, true);<\/li>\n<li>Set directory permissions as per WordPress&#8217;s Guidance &#8211;&nbsp;<a href=\"https:\/\/codex.wordpress.org\/Changing_File_Permissions\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/codex.wordpress.org\/Changing_File_Permissions<\/a><\/li>\n<li>Disable directory listing with .htaccess<\/li>\n<li>Remove your WordPress version number &#8211; Usually just look for a plugin in the Plugin Manager that can perform it. Would be under Security but there are many to choose from.<\/li>\n<\/ol>\n<p>Using the above techniques will make it extremely hard for any hacker to hack your site. Always perform some sort of security when installing any website, WordPress or not.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>WordPress sites can be hacked, but following key security steps makes it much harder for attackers to succeed. Here&#8217;s what you need to do.<\/p>\n","protected":false},"author":2,"featured_media":1593,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"hk_meta_description":"","hk_noindex":false,"footnotes":""},"categories":[220,119],"tags":[198,200,199,197,154],"class_list":["post-1591","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-wordpress","tag-password-security","tag-security-plugins","tag-ssl-certificates","tag-wordpress-maintenance","tag-wordpress-security","entry"],"hk_builder":"","_links":{"self":[{"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/posts\/1591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/comments?post=1591"}],"version-history":[{"count":1,"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/posts\/1591\/revisions"}],"predecessor-version":[{"id":24887,"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/posts\/1591\/revisions\/24887"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/media\/1593"}],"wp:attachment":[{"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/media?parent=1591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/categories?post=1591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hostking.host\/blog\/wp-json\/wp\/v2\/tags?post=1591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}