Wordpress Security Part Three

Useful Plugin´s For Wordpress That Enhance Its Security

Here are a few WordPress plugins that are recommended for use to improve security:

WP Security Scan:

Scans all of your files for malicious code

URL: http://www.techerator.com/2009/10/how-to-keep-wordpress-secure-with-wp-security-scan/

Wordpress File Monitor:

Monitors your site for any changes to your files, you’ll be alerted if an unauthorized party makes any changes to your install.

URL: http://mattwalters.net/projects/wordpress-file-monitor/
NOTE: Please read the posts on the creators Blog about what to do if the Plugin stops giving reports to you when changes to file have been made.

Here is the URL: http://mattwalters.net/2010/03/01/wordpress-file-monitor-security-alert/

Inspite of this, this plugin is great top use and this issue will get sorted out in the future.

Akismet:

This comes bundled with WordPress. This really is the very best plugin to keep spam away.
URL: http://codex.wordpress.org/Plugins/Akismet
URL: http://akismet.com/download/

Askapache Password Protect:

This adds an extra layer of security to your admin area by adding HTTP authentication.
URL: http://wordpress.org/extend/plugins/askapache-password-protect/
URL: http://www.askapache.com/wordpress/htaccess-password-protect.html

Limit Login Attempts:

Will shut down anybody who fails X number of logins from a specific IP address (using auth cookies).

It keeps tracking all failed IPs, emails you in the event of a lockout, and is the perfect solution for keeping nosy relatives out of your admin area.

Login Lockdown:

This great security plugin goes hand in hand with the one just above, as it prevents people from guessing your password to login to your site. It records the IP address and timestamp of every failed login attempt. This helps to prevent brute force password discovery.
URL: http://wordpress.org/extend/plugins/login-lockdown/
URL: http://www.bad-neighborhood.com/login-lockdown.html

TAC (Theme Authenticity Checker):

If you’ve downloaded your theme from an external source
OR
If you have suspicions about your theme you can use TAC to search the source files of every installed theme on your Wordpress Blog for signs of malicious code.

If such code is found, TAC displays the path to the theme file, the line number, and a small snippet of the suspect code.
URL: http://wordpress.org/extend/plugins/tac/
URL: http://builtbackwards.com/projects/tac/