Wordpress Security – Part 1

Manual Security: How to secure your web server, securely access your database and keep WordPress secure

What you'll learn

Using publickeys instead of passwords logging in to a Linux system using SSH

Instead of using phpmyadmin, learning how to use DBeaver to connect to a MySQL server over an SSH tunnel

Configure nginx and Apache to serve WordPress using best practices

Fundamentals of keeping a WordPress installation secure

Requirements

Basic understanding of Linux

Be comfortable with using the terminal

Know what WordPress is, installed it at least once before

Description

Get ready for a thrilling journey into the world of WordPress security! In this course, you'll gain a deep understanding of the most common attack vectors and how to protect your website from malicious actors.You'll learn the crucial importance of applying fundamental security principles, as well as the steps to take if your site is ever hacked.Discover why investing in security measures for WordPress is vital, including what to look out for during installation, the significance of long-term support, and the difference between weak and strong authentication mechanisms.Explore the must-have features of a hosting provider, the power of backups as part of your security strategy, and the importance of automating security updates.Take your security to the next level by restricting SSH, using firewalls, public key authentication, and connecting over an SSH tunnel using DBeaver.Finally, you'll learn how to strengthen your web server configuration for maximum protection. Don't miss this opportunity to enhance your WordPress security knowledge and defend your website from cyber threats!In short, in this couse we will highlight the following things:Popularity of WordPress and common types of hacksWhat to watch out for when installation a Linux systemThe meaning of long-term support (LTS)Weak credentials vs. strong authentication mechanismsWhy backups have to be a part of your security strategyWhat features a hosting provider must haveAutomation of security updatesRestricting SSH, using firewalls and public key authenticationHow to use DBeaver to connect over an SSH tunnelStrengthen your web server configuration

Overview

Section 1: Common attack vectors explained

Lecture 1 Why WordPress is perceived insecure

Lecture 2 Dangers of a hacked WordPress

Lecture 3 Different attack vectors

Section 2: Fundamental security principles on your hosting

Lecture 4 The right hosting provider

Lecture 5 Quick overview of the fundamentals

Lecture 6 Automate installation of security patches

Lecture 7 Restrict access to SSH and SFTP

Lecture 8 Configuring different kinds of firewalls

Section 3: Applying fundamental security principles

Lecture 9 Using DBeaver and SSH tunnels

Lecture 10 Configuring your web server specific to WordPress

Lecture 11 Fundamental WordPress security principles

Lecture 12 Stay on top of things

Section 4: How to recover from a hack successfully

Lecture 13 Make a backup after each change

Lecture 14 Configure regular snapshot taking

Lecture 15 Restore from a snapshot

Lecture 16 Conclusion

Aspiring systems administrators and jack of all trades WordPress developers