winner singh

Sorry for a lot of question, one more: I am using a Wp-rocket plugin for Caching, Is it good and secure for WordPress?

Should I install these plugins?

https://www.ads-software.com/plugins/block-bad-queries/

And you did not mention that what is the solution of XML-RPC hacking?, okay I will not
Block via code in a .htacess file, but what is the solution of that?

And I am using Dreamhost VPS hosting, is it good?

Okay as your article told me that don’t disable XML-RPC, so I am not disabling this.

I deleted “API.Spain.php” file, website is clean now, I added the code in .htacess file to wp-content/uploads/ and I also add the kill php execution code: https://ibb.co/hU2ey6

And I also Installed Jetpack plugin, Is it good for the site? what are the advantages of this?

As wordfence saying that use two factor authentication, is best what if hackers hack via FTP username and password, if they hacked via FTP they can delete, edit and add the anything?, how to protect that.

okay I am sending you theme, please test it, after installing the plugin with this theme create the problem with theme panel as well as website images not showing up.

here is the download link for theme: https://transfer.pcloud.com/download.html?code=5ZfPVV7ZN424c2WOckzZe8k0ZkeBaLsNsfnbROeMpeN3XXk3vjJSX

Thank you but please tell me after clicking the button of NoIndex in Media (attachment), how many days google will take to set it, like when I am searching my blog name, still attachment page shows: allinallnews : https://www.google.co.in/search?q=allinallnews&ie=utf-8&oe=utf-8&client=firefox-b&gfe_rd=cr&dcr=0&ei=drjwWYrmNanv8wf_-pKACw

Dreamhost told me that It was trying to login via XMLRPC. What should I do to protect from XMLRPC, should I Install this plugin https://www.ads-software.com/plugins/disable-xml-rpc/

or add this code to .htacess file

# Block WordPress xmlrpc.php requests
<Files xmlrpc.php>
order deny,allow
deny from all
allow from 103.41.36.73
</Files>

Is there any disadvantage to block XMLRPC file?

Now I deleted those files which were founded malicious during Wordfence scan..

File Deleted:

wp-includes/widgets/cry_lib.php
/wp-includes/js/page.php
wp-includes/js/swfupload/functions.php
wp-includes/js/tinymce/utils/javascript.php
wp-includes/js/articles/0fea6_b92e79e193a16d39e2412e2b82a0c27e
wp-includes/js/articles/d30ef49
wp-admin/wp_cache_mutex.lock
wp-admin/network/xml.php
wp-admin/includes/login.php
wp-admin/css/.bt

Please tell me how these files are created in these folders? Is it via FTP or Is it via wp-login hacking or via any other hacking software? Can you please send me some articles to read about how hackers do this.!

And I found one PHP files manually via FTP login which is in the wp-content/uploads/2013/06/api.Spain.php

Why this file is in the photos folder.. how it comes, the even problem is wordfence even did not find it for me.. ??

Should I delete this file also?

And what other codes should I add to .htacess file so that website can fully be protected..

Thank you.

And life in your description says Sign-in using your password and your cell phone to vastly improve login security.

can you please show me some demo video so that I can understand.

What should I add in Robot.txt for protection? and is this search harmful to my web? or someone tries to hack?

what should I take precaution for this?

Okay done, I selected Noindex option: Media (attachment) please check : https://ibb.co/nOY0fm

If I set noindex to media, it will also hide all images from google? or it will just noindex to the post which is automatically created when the photo is uploaded?

example it says “enabling this will redirect them to the post they were attached to” if that post is deleted will it also work, will these photo URL stop crawling on google.

There is one problem: I am using newspaper theme from themeforest. after installing the plugin theme panel is look different see: https://ibb.co/gpwuMR see before after image.

Found the solution, actually, there were two folders in the theme, one was a newspaper and other was newspaper_theme, I deleted newspaper folder and rename newspaper_theme to newspaper and now it is working, your plugin is good, please carry on and update your plugin because I saw most of the plugin author quit in between.

Thank you