629 posts
  • Bought between 10 and 49 items
  • Exclusive Author
  • Has been a member for 4-5 years
  • Sold between 100 and 1 000 dollars
Thecodingdude says

I’ve never understood why people use wordpress when it’s just an accident waiting to happen.

I understand why wordpress IS a good platform, but it’s one of the poorest platforms when it comes to security; in other words there is none.

Have you ever given anyone access to your wordpress admin? Did you know that they can install a plugin to download your database without needing a password. You can also download your FTP files without a password. If you use the same password elsewhere in your wordpress config they can access that.

If you give someone access to FTP and you have a wordpress install, running an include(”../wp-config.php”) would be all it took to get your password.

So why do you use wordpress and how do you protect your wordpress from attacks like these? Do you only install plugins from people you trust?

2429 posts
  • Has been a member for 4-5 years
  • Exclusive Author
  • Europe
  • Bought between 10 and 49 items
  • Referred between 100 and 199 users
  • Sold between 100 and 1 000 dollars
  • Microlancer Beta Tester
digitalimpact says

Well, I use it because it’s awesome, simple and has a huge community.

I’ve also found a way of dealing with all the above: I never hand out my passwords. Simple. Powerful.

P.S.: it’s WordPress.

3699 posts Community Moderator
  • Author had a File in an Envato Bundle
  • Grew a moustache for the Envato Movember competition
  • Community Moderator
  • Referred more than 2000 users
  • Has been a member for 4-5 years
  • United Kingdom
  • Repeatedly Helped protect Envato Marketplaces against copyright violations
  • Contributed a Blog Post
+4 more
quickandeasy Volunteer moderator says

@ArranMcguire got me using random password gens for wp-config + if you’re giving someone your FTP details… they need to be trustworthy anyway.

and when it comes to security etc, free updates from Wordpress deal with those, right?

+ a massively active community

+ easy to install and a wealth of themes and plugins to make it do pretty much whatever you want it to do

I love wordpress.

812 posts
  • Bought between 10 and 49 items
  • Exclusive Author
  • Has been a member for 4-5 years
iamthwee says

Giving anyone access to wordpress admin is a bad idea obviously. And if you have the ftp details then obviously you have root access anyway.

In regards to passwords they aren’t stored anywhere in the database as plain text. They are encrypted with a one time hash.

All that being said, WP is pretty secure. Unfortunately, if you use a plugin this is probably where vulnerabilities are best exploited. That’s about the only weak link IMO .

1394 posts
  • Microlancer Beta Tester
  • Repeatedly Helped protect Envato Marketplaces against copyright violations
  • Contributed a Blog Post
  • Author had a Free File of the Month
  • Has been a member for 4-5 years
  • Europe
  • Bought between 10 and 49 items
  • Referred between 10 and 49 users
  • Exclusive Author
+1 more
Stylius says

Why on Earth would I give my passwords to someone else? If you give your password to another person, then don’t “moan” about WordPress’ security, it is you.

629 posts
  • Bought between 10 and 49 items
  • Exclusive Author
  • Has been a member for 4-5 years
  • Sold between 100 and 1 000 dollars
Thecodingdude says

What I meant with FTP was in cPanel, you can create FTP accounts that point to a certain directory, so user “abcd” can only access directory “abcd”. This in itself is secure but they can still eventually work their way to get hold of your FTP files :P

177 posts
  • Bought between 1 and 9 items
  • Referred between 1 and 9 users
  • Exclusive Author
  • Has been a member for 3-4 years
  • Sold between 5 000 and 10 000 dollars
  • Romania
DanThemes says

Why on Earth would I give my passwords to someone else? If you give your password to another person, then don’t “moan” about WordPress’ security, it is you.

+1 Well said.

629 posts
  • Bought between 10 and 49 items
  • Exclusive Author
  • Has been a member for 4-5 years
  • Sold between 100 and 1 000 dollars
Thecodingdude says


Why on Earth would I give my passwords to someone else? If you give your password to another person, then don’t “moan” about WordPress’ security, it is you.
+1 Well said.

You can create multiple admin accounts in wordpress ;)

280 posts
  • Sold between 10 000 and 50 000 dollars
  • Exclusive Author
  • Europe
  • Bought between 50 and 99 items
  • Referred between 10 and 49 users
  • Microlancer Beta Tester
  • Has been a member for 3-4 years
cosmincotor says

Don’t allow people you don’t trust to access the admin panel or your FTP , actually don’t give them access to anything if you’re not 100% sure they can be trusted :)

1561 posts Chris Robinson
  • United States
  • Sold between 250 000 and 1 000 000 dollars
  • Elite Author
  • Has been a member for 5-6 years
  • Author had a File in an Envato Bundle
  • Referred between 500 and 999 users
  • Author had a Free File of the Month
+5 more
contempoinc says

Don’t allow people you don’t trust to access the admin panel or your FTP , actually don’t give them access to anything if you’re not 100% sure they can be trusted :)

Exactly.

by
by
by
by
by
by