If you table prefix is “wp_” or “wp1_” or even “wordpress_”, then changing it will bring your wordpress site security to a higher level.
By default fantastico installation sets “wp_” as a prefix for each wordpress table name. Since this is a known vulnerability, malicious users can exploit your data easily.
They specifically look for the wp_options […]

• 11 Comments

I found it the hard way, that some customer site were attached using “SQL Injection”.
This left me feeling disheartened, depressed, and extremley disappointed by what happened.
I went ahead and setup lately a test Wordpress site with the default installation from fantastico and sure enough the site was hacked.
Unfortunately, a default install of Wordpress is not […]

• 9 Comments

wp-config.php is located in the main directory of your Wordpress installation and used by Wordpress to access the database.
This file includes your user id , password, and database name unencrypted.
Even though it is a .php file, meaning no one should be able to see it’s content from the browser, it just […]

• 7 Comments