How to secure and optimize wordpress websites

by **Adminkunlex** Wed Jan 15, 2020 5:36 am

There are so many people want to secure and optimize the
website.
You can find 100’s of blog post related to security and speed, but not all of them cover everything!
Here are the steps I take to secure words
1. Hide admin panel (first things to do).
2. Hide the main directory like wp-includes, wp-content.. etc..
3. Disable PHP execution from Uploads Directory
4. Disable Directory indexing.
5. Never use Nulled/Warez Plugin, Themes or Images. (Paid Plugin/Theme but free Download), those people usually add malicious code!
6. Install Firewall for disabling or block the common attacks like direct file access, XSS, LFI, RFI or SQL Injection.
7. Try to use Dedicated Hosting instead of Shared, or use a reputable shared hosting provider.
8. Make sure #WordPress set to auto-update.
9. Never use week username like (admin, Jhon, etc).
10. Use Most Complicated and Secure Password.
11. Change Theme “style.css” file data so, the hacker can’t determinate the theme name and version.
12. hide WordPress detail (version, license etc).
13. use HTTPS (SSL)

Speed:

1. Block Spammy Bot (you can find the list over
the internet).
2. Optimized each and every image for better
performance (WEBP Image format a good
choice).
3. use CDN
4. Combine Js/CSS for less request.
5. Use Cache Plugin for better performance.
6. Optimize Database (WordPress generate too
many junk data).
7. use HTTPS (SSL).
8. Minify HTML/CSS/JS.

Source