The document discusses basic WordPress security strategies and plugins to consider. It recommends picking a reliable host, splitting domains and hosting, backing up sites regularly, keeping WordPress and plugins updated, restricting wp-admin access, using strong passwords, and installing security-focused plugins like Akismet, Bad Behavior, and WP Security Scan. Regular server log checks, non-standard database prefixes, avoiding the "admin" user, file permission management, and .htaccess restrictions are also advised. Testing backups, database cleanup, and security audits are suggested along with using a staging server and services like CloudFlare.

1. Reno Tahoe WordCamp 2010 WordPress Security Blitz!

2. Why? Content, freshness, SEO, networking, design, stability, functionality, performance, scaling...

3. Why? Content, freshness, SEO, networking, design, stability, functionality, performance, scaling... ...and now security, too?

4. Why? ...can't we all just get along?

5. Why? To leverage your efforts building a thriving community!

6. Strategy A little bit of effort, some discipline, and LOTS of common sense

9. Split domain and hosting

11. Split domain and hosting

12. Back up (and back up again!)

14. Split domain and hosting

15. Back up (and back up again!)

16. Keep WP, plugins up-to-date

18. Split domain and hosting

19. Back up (and back up again!)

20. Keep WP, plugins up-to-date

21. Move wp-config.php up/out

23. Split domain and hosting

24. Back up (and back up again!)

25. Keep WP, plugins up-to-date

26. Move wp-config.php up/out

27. File permissions (755/644)

30. Regularly check server logs

32. Regularly check server logs

33. Post-Logger (vi-logger.php)

35. Regularly check server logs

36. Post-Logger (vi-logger.php)

37. DB table prefix: not “wp_”

39. Regularly check server logs

40. Post-Logger (vi-logger.php)

41. DB table prefix: not “wp_”

42. No user “admin”

44. Regularly check server logs

45. Post-Logger (vi-logger.php)

46. DB table prefix: not “wp_”

47. No user “admin”

48. Use strong passwords!

51. Bad Behavior

53. Bad Behavior

54. http:BL (Project Honey Pot)

56. Bad Behavior

57. http:BL (Project Honey Pot)

58. WP Security Scan

60. Bad Behavior

61. http:BL (Project Honey Pot)

62. WP Security Scan

63. AntiVirus

65. Bad Behavior

66. http:BL (Project Honey Pot)

67. WP Security Scan

68. AntiVirus

69. ...but don't go wild on plugins!

72. Check on your DB (e.g. drop old tables, optimize... Clean Options plugin)

74. Check on your DB (e.g. drop old tables, optimize...)

75. Security audits (e.g. Acunetix)

77. Check on your DB (e.g. drop old tables, optimize...)

78. Security audits (e.g. Acunetix)

79. Your own computer

81. Check on your DB (e.g. drop old tables, optimize...)

82. Security audits (e.g. Acunetix)

83. Your own computer

84. Use a staging server to test

86. Check on your DB (e.g. drop old tables, optimize...)

87. Security audits (e.g. Acunetix)

88. Your own computer

89. Use a staging server to test

90. External (e.g. CloudFlare)

91. And finally... Support developers and designers!

92. Questions?

93. Contact information Álvaro Degives-Más: Alvaro at RenoLanguages.com