If you table prefix is “wp_” or “wp1_” or even “wordpress_”, then changing it will bring your wordpress site security to a higher level.
By default fantastico installation sets “wp_” as a prefix for each wordpress table name. Since this is a known vulnerability, malicious users can exploit your data easily.
They specifically look for the wp_options […]

• 11 Comments

I found it the hard way, that some customer site were attached using “SQL Injection”.
This left me feeling disheartened, depressed, and extremley disappointed by what happened.
I went ahead and setup lately a test Wordpress site with the default installation from fantastico and sure enough the site was hacked.
Unfortunately, a default install of Wordpress is not […]

• 9 Comments

wp-config.php is located in the main directory of your Wordpress installation and used by Wordpress to access the database.
This file includes your user id , password, and database name unencrypted.
Even though it is a .php file, meaning no one should be able to see it’s content from the browser, it just […]

• 7 Comments

Hi, this is my first blog post.
I have seen a lot of people starting great blogs and wanted to follow, but frankly I was always reluctant because of my writing skills and/or fear of writing.
I decided to try Wordpress, since a lot of my hosting customers already use it,
and I thought I can bring more […]

• 0 Comments

WordPress Wins Best Social Networking CMS
CMSWire, CA -Oct 29, 2007
WordPress won the ‘Best Social Networking CMS’ category, with Drupal and Elgg tying for second. The basic formula was based upon what the public voted for. …

More: continued here

• 1 Comment