Paul A. Luzzi

August 23, 2015

Tired of all the hack attempts against my wordpress installs.  So finally :

• upgrade to latest release
• installed brute force attack plugins
• installed security plugins
• created .htaccess files in each deployment, which is from here, and looked like this :

# protect xmlrpc from https://perishablepress.com/wordpress-xmlrpc-pingback-vulnerability/
<Files xmlrpc.php>
Order Deny,Allow
Deny from all
Allow from 192.168.1
</Files>

# protect wp-cron from https://perishablepress.com/wordpress-xmlrpc-pingback-vulnerability/
<Files wp-cron.php>
Order Deny,Allow
Deny from all
Allow from 192.168.1
</Files>