This will help add some security to the authenticated cookies when logged in to manage the site or blog.Įxample: define(‘AUTH_KEY’, define(‘SECURE_AUTH_KEY’, ‘r(1n%/%NA?uZEzS# PD define(‘AUTH_SALT’, ‘cCKSOF2JkI!%5qJ`8Ad6P`+ define(‘SECURE_AUTH_SALT’, ‘Xrj~J&+s)G*TAx7 Um|e+JTVB7Y4N|I>u4RF})TB 8#>UE ADSARobot|ah-ha|almaden|aktuelles|Anarchie|amzn_assoc|ASPSeek|ASSORT|ATHENS|Atomz|attach|attache|autoemailspider Visit the url and copy/paste the provided salts to your wp-config.php. In this case all it takes is an employee logging in over coffee shop wifi for the credentials to be stolen or other Dashboard activity be intercepted.Ĭonsider further protecting the login page for your blog by requiring a second factor authentication such as Yubikey ( ), Google Authenticator ( ), and/or Apache server auth for another layer of security.Īnother suggested change in wp-config.php is to add some salt.
com / wp – admin ) will automatically redirect to HTTPS and retain the HTTPS session while logged in to the Dashboard.Ĭuriously, many large corporate WordPress sites have their login page and Dashboard in clear text over HTTP and are not using this above option. With this enabled, visiting the login URL of WordPress (Ex: http :// example. To enable and require HTTPS for the WordPress login and WordPress Dashboard area, put the following in wp-config.php: define(‘FORCE_SSL_ADMIN’, true) One easy change is to require HTTPS for the WordPress login and Dashboard area.
0 kommentar(er)
