Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter tyrannosaurhex

    (@asg1123)

    Seems to be working now. i think it was the A record and nameserver update which took time to refresh. Had TTL set to 600 secs but it took 4 hours, lol.

    Thanks.

    Is there anything else I should tale care of?

    BTW, I am kind of worried about the db username, password in wp-config file. How do I check and make sure it is not publicly accessible.

    Thread Starter tyrannosaurhex

    (@asg1123)

    Alright, so I did a manual file movement through FTP to the new host.

    Then I exported the DB from old host and imported it to the new host using phpMyAdmin. Added new users to the database and wp-config.php.

    Changed the A record in DNS manager to IPs of new host.

    However, the website is not accesible. Anything I may have missed?

    While Limit-Login attempts, will lockout any multiple incorrect password attempts, it will not put a stop to them.

    Here is what you need to do.

    1. You need to change the name of default login ID “admin” to something else. Every WP site has default login named “admin”. And when someone enters admin and incorrect password, it gives a error message “The password for login ID admin is incorrect” – which gives away the fact that there is indeed a “admin” named user id present.
    2. You need to remove any admin access to ID number 1.
    3. To keep login page secured, so that boths or random hackers cannot see the default /wp-admin login screen, you need to change the default /wp-admin login to something else such as https://www.yourdomain.com/cryptologin or any other you want. Every default WP installation has /wp-admin as a login page.

    While these are few precautionary measures which can be done manually, there are others such as blocking access to htaccess file, protecting your directory structure from being seen and that the source code of your page tells anyone that you are using WordPress and lists all the plugins uses, who might then use any known vulnerabilities.

    Look for a a security plugin called iThemes security. It does all of the above, and I use it myself with a couple of other plugins(Wordfence & antivirus) to cover all areas.

    Thread Starter tyrannosaurhex

    (@asg1123)

    NM, got it sorted finally, didn’t know there was a Product Category option in Screen Options when editing Menus. Duh.

    Anyways, I am using mystile, got it from woothemes.

Viewing 4 replies - 1 through 4 (of 4 total)